> For the complete documentation index, see [llms.txt](https://maurvan.gitbook.io/ctf-writeups/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://maurvan.gitbook.io/ctf-writeups/bluehens-ctf-2024/index/intro-to-web.md). # Intro to Web ## Challenge > It's nice to have some training problems. > > ## Solution When checking the link, we end up on a blank page with some text.

Now, "version control" naturally makes me think of git. So let's check if we can find something... So `/.git/` is forbidden but when we keep looking, there's the HEAD file which contains interesting information.

So of course, I went to see the contents of that ref.

This number is actually the commit id for the latest commit in the master branch. But to go further with this, we first need to download the git repository somehow. After some digging I found the Dumper tool from [GitTools](https://github.com/internetwache/GitTools) and it works like a charm.

Now we've got a load of files but no way to read them. So we use the Extractor from the earlier mentioned GitTools.

As we know, the `6d11ca62644930fee1e2e48345c8d35bde2a95e7` file refers to the last commit, which is not what we're interested in. Let's look at the other one. It contains 2 files: `commit-meta.txt` and `index.html`. This is what the text file contains:

And the web page looks like this:

Let's check out the code of this web page.

We can see there's a password stored and it's hashed using the MD5 algorithm. Using an [online MD5 decrypter](https://10015.io/tools/md5-encrypt-decrypt) I managed to find the password.

Now, let's enter it on our page.

It works ! But wait, where's my flag ? Oh right, we don't have access to it on this page. When checking the DevTools we can indeed see it tried to request the flag, but got an error.

What if we copied those parameters and used it on the actual website ?

Bingo !