TryHackMe - Git Happens

Git Happens

TryHackMe Room Link: Git Happens

Task 1 Capture the flag

Find the Super Secret Password

---

Walkthrough

We begin this challenge room by running a nmap scan to see what ports are open.

From the nmap scan we can see 1 port open.
Port 80 http

The nmap scan also informs us that there is a .git directory on the website.

Checking the website only shows a login screen

When we test logging in with username admin and password admin nothing appears to happen.
There is no error message.

The nmap scan lists a .git directory lets check that now.

We can see the folder structure of a git repository.
We can check each folder and file individually but it is better to download the git repo and check it locally with git.

To download the .git directory we can use GitTools.
Lets clone the GitTools repository to our local machine

Now that we have the tools we can download the .git directory.

Now we can go into the newly created git folder and see what commits were made on this repository.

Looking at the messages for the commits we can see that the site was made more secure with each commit applied.
So we want to be looking at the early commits before any security was applied.

We need to find a password so checking commits before any security was implemented is the best option.
There are 2 commits availables

• Made the login page, boss!
• inital commit

We use the checkout command to revert the repository back to an earlier commit.

Once the checkout is completed we now have 2 files and 1 directory.
Let’s check what is in index.html.
Scrolling through the html file we can see a login() at the end of the file and it contains the username and password in plaintext.

Entering the password on tryhackme will complete the room.