Description
Someone's commits seems to be preventing the program from working. Who is it?
They provided us with a zip file, let’s download it.
tobiasare@hacktheplanet:~$ wget http://example.com/challenge.zip
Unzip this file and you got a lot of content
tobiasare@hacktheplanet:~$ unzip challenge.zipcode></pre>
Archive: challenge.zip
creating: drop-in/
extracting: drop-in/message.py
creating: drop-in/.git/
creating: drop-in/.git/branches/
inflating: drop-in/.git/description
creating: drop-in/.git/hooks/
inflating: drop-in/.git/hooks/applypatch-msg.sample
inflating: drop-in/.git/hooks/commit-msg.sample
inflating: drop-in/.git/hooks/fsmonitor-watchman.sample
inflating: drop-in/.git/hooks/post-update.sample
inflating: drop-in/.git/hooks/pre-applypatch.sample
inflating: drop-in/.git/hooks/pre-commit.sample
inflating: drop-in/.git/hooks/pre-merge-commit.sample
inflating: drop-in/.git/hooks/pre-push.sample
inflating: drop-in/.git/hooks/pre-rebase.sample
inflating: drop-in/.git/hooks/pre-receive.sample
inflating: drop-in/.git/hooks/prepare-commit-msg.sample
inflating: drop-in/.git/hooks/update.sample
creating: drop-in/.git/info/
inflating: drop-in/.git/info/exclude
creating: drop-in/.git/refs/
creating: drop-in/.git/refs/heads/
extracting: drop-in/.git/refs/heads/master
creating: drop-in/.git/refs/tags/
extracting: drop-in/.git/HEAD
inflating: drop-in/.git/config
creating: drop-in/.git/objects/
creating: drop-in/.git/objects/pack/
creating: drop-in/.git/objects/info/
creating: drop-in/.git/objects/7d/
extracting: drop-in/.git/objects/7d/f869a15e76c28afb609fa4dbc059144ad70161
extracting: drop-in/.git/objects/7d/0613c54635917946d70e0b2e9ca42136c18ee4
extracting: drop-in/.git/objects/7d/1ca8dc38f8bc18eb35b2571d2b550673f2b415
creating: drop-in/.git/objects/a5/
extracting: drop-in/.git/objects/a5/6b2529881119591fce34630170f5630f4b096c
creating: drop-in/.git/objects/f3/
extracting: drop-in/.git/objects/f3/cec26cf7f80f91b5c3d1972f14dd4e9f97ec83
extracting: drop-in/.git/objects/f3/cb1c88e58063947d16d222c68e04e62c23649e
extracting: drop-in/.git/objects/f3/7406b0cab000c4af56ca105f0d194608e9402e
creating: drop-in/.git/objects/32/
extracting: drop-in/.git/objects/32/6544a21bf75fa38f486891c58119c236a7dbbf
extracting: drop-in/.git/objects/32/a8c7430819aa9f2ca0a731f992c6cb8b09793c
extracting: drop-in/.git/objects/32/ede878fe116a9ea9b2753fcf11543472e45035
extracting: drop-in/.git/objects/32/a8b421e4870c094e436e3df403a243c9f61b19
extracting: drop-in/.git/objects/32/223a970ba9986bd9caabcae02cb014381e5b42
creating: drop-in/.git/objects/28/
extracting: drop-in/.git/objects/28/9871add646b411282a84ff33f37abfd976ca59
extracting: drop-in/.git/objects/28/c9a9686078224264c931276d433fd4eec66f7b
creating: drop-in/.git/objects/9a/
extracting: drop-in/.git/objects/9a/e3e1bc67ad0143c611c5f65399b79850d20983
creating: drop-in/.git/objects/ce/
[SNIP]
tobiasare@hacktheplanet:~$ cat drop-inmessage.py
print("Hello, World!"
Nothing here.
tobiasare@hacktheplanet:~$ git log
commit 8cc3930896bb01ae046bc08c382bd30772918ff5 (HEAD -> master)
Author: picoCTF <ops@picoctf.com>
Date: Sat Mar 9 21:09:06 2024 +0000
important business work
commit 6dbd8d326a2f0c9fe7f0011c8e60448b9accc6ff
Author: picoCTF <ops@picoctf.com>
Date: Sat Mar 9 21:09:06 2024 +0000
important business work
commit 2e8970529c41058a68aae8bc04ef7a2d53ce0d8a
Author: picoCTF <ops@picoctf.com>
Date: Sat Mar 9 21:09:06 2024 +0000
important business work
commit 135020e8b96565248b604cb42ae54e256e8fc48a
Author: picoCTF <ops@picoctf.com>
Date: Sat Mar 9 21:09:06 2024 +0000
important business work
commit a95fbac033f190b3fb1066727ea01d7d4be362b5
Author: picoCTF <ops@picoctf.com>
Date: Sat Mar 9 21:09:06 2024 +0000
important business work
commit e6b8b174bf1ce6361ff29096579d2752616cb6f2
Author: picoCTF <ops@picoctf.com>
Date: Sat Mar 9 21:09:06 2024 +0000
important business work
[SNIP]
Nothing here either.
tobiasare@hacktheplanet:~$ git reflog
8cc3930 (HEAD -> master) HEAD@{0}: commit: important business work
6dbd8d3 HEAD@{1}: commit: important business work
2e89705 HEAD@{2}: commit: important business work
135020e HEAD@{3}: commit: important business work
a95fbac HEAD@{4}: commit: important business work
e6b8b17 HEAD@{5}: commit: important business work
5118475 HEAD@{6}: commit: important business work
8f3c43e HEAD@{7}: commit: important business work
6701b97 HEAD@{8}: commit: important business work
8c96635 HEAD@{9}: commit: important business work
44d5213 HEAD@{10}: commit: important business work
8be10be HEAD@{11}: commit: important business work
85e253b HEAD@{12}: commit: important business work
81e3422 HEAD@{13}: commit: important business work
53ca048 HEAD@{14}: commit: important business work
1de3614 HEAD@{15}: commit: important business work
f45b2d3 HEAD@{16}: commit: important business work
0e9857c HEAD@{17}: commit: important business work
32223a9 HEAD@{18}: commit: important business work
d683b18 HEAD@{19}: commit: important business work
2c8a227 HEAD@{20}: commit: important business work
88d99c0 HEAD@{21}: commit: important business work
[SNIP]
Nope.
tobiasare@hacktheplanet:~$ ls
message.py
Let’s use log
tobiasare@hacktheplanet:~$ git log message.py
commit 9ae3e1bc67ad0143c611c5f65399b79850d20983
Author: picoCTF{@sk_th3_1nt3rn_yupyuyp} <ops@picoctf.com>
Date: Sat Mar 9 21:09:01 2024 +0000
optimize file size of prod code
commit f3cec26cf7f80f91b5c3d1972f14dd4e9f97ec83
Author: picoCTF <ops@picoctf.com>
Date: Sat Mar 9 21:09:01 2024 +0000
create top secret project
The intern………
Thank you for reading.