Sws101_ctf2
Topic : Committed
Overview
In the “Committed” room on TryHackMe, the objective is to track down sensitive code that a developer accidentally committed to a GitHub repository. This involves investigating the commit history to identify and analyze the sensitive information.
Step-by-Step Solution
- Start the machine.
- Get the IP Address of the VM.
- Set Up a Web Server on the VM.
- Download the Zip File to Your Local Machine.
- Extract the Zip File.
- Use GitTools to Extract Commits.
- Search for the Flag and lastly submit it.
Summary
This walkthrough involves starting a VM, transferring files to the local machine, extracting git commits, and searching for a specific flag. It demonstrates practical skills in forensics and handling git repositories, emphasizing the importance of securing code and commits.
This post is licensed under CC BY 4.0 by the author.