DEV Community

Cover image for Blame Game - picoCTF writeups
Mahidul Haque
Mahidul Haque

Posted on

Blame Game - picoCTF writeups

#writeups #cybersecurity

The challenge mentions "commits," which indicates it involves Git. Let’s start by downloading the challenge files.

wget https://artifacts.picoctf.net/c_titan/159/challenge.zip
unzip challenge.zip
Enter fullscreen mode Exit fullscreen mode

Next, navigate to the extracted folder and list the files:

cd [extracted-folder]
ls
Enter fullscreen mode Exit fullscreen mode

You should see a Python file. Although you can view its content using:

cat file-name.py
Enter fullscreen mode Exit fullscreen mode

it’s not necessary for this challenge.

To explore the Git commit history, use:

git log
Enter fullscreen mode Exit fullscreen mode

or to see commits related to the Python file specifically:

git log file-name.py
Enter fullscreen mode Exit fullscreen mode

This will display a list of commits similar to the screenshot below:

The commits are listed from the oldest to the newest. The flag picoCTF{_______} is hidden somewhere in these commit messages.

For example, I found the flag here:

Top comments (0)