Description

The repository has a git tag that stores a secret. Tags are a common place to anchor release notes or store data outside the commit tree.

Overview

• git tag lists all tags in the repository.
• git show <tag> displays the tag’s message or the object it points to.
• Unlike branches, tags are not fetched by default in some configurations; git fetch --tags retrieves them.

Solution

git clone ssh://bandit30-git@localhost:2220/home/bandit30-git/repo
cd repo
git tag
git show <tagname>

• The tag’s annotation contains the password.

Password

OoffzGDlzhAlerFJ2cAiz1D41JW1Mhmt