Git Happens

https://tryhackme.com/room/githappens

As usual let's fir up nmap

We see there's an open port (80) running a git server. Let's check it.

We can use GitTools (https://github.com/internetwache/GitTools) to see if we can obtain anything interesting from the git server.

Frist let's use the Dumper tool to download as much as possible from the found .git repository from the webserver.

./gitdumper.sh http://IP/.git /tmp/gitrepo

After that, let's use Extractor to extract commits and their content from a broken repository.

Now, we can check the repositories manually and see if we find something interesting or we can go to the downloaded .git folder and run the "git show" command to see modifications in the commits.

git show COMMIT_ID 

Nothing interesting in that one. Let's keep looking till we find something.

Finally we find what we want.