RITSEC CTF 2021: Blob | szymanski.ninja

Blob

Category: Forensics

200 points

Ha. Blob. Did you get the reference?

http://git.ritsec.club:7000/blob.git/

~knif3

Solution

Under the given address there’s a git repository. There’s a flag.txt in it. But it would be too easy if it has a flag ;-)

cat flag.txt

these aren't the droids you're looking for

I’ve spent some time trying to figure it out where’s the flag. Finally I’ve decided to brutally unzlib all the objects. It wasn’t huge amount of files so…

for i in `find .git -type f`; do python -c "import zlib; print(zlib.decompress(open('${i}', 'rb').read()));"; done

Traceback (most recent call last):
  File "<string>", line 1, in <module>
zlib.error: Error -3 while decompressing data: incorrect header check
blob 59# Blob

That pesky flag should be around here somewhere...

blob 27RS{refs_can_b3_secret_too}

commit 167tree b9d6753be80df863c3656aa6389418d3213c96f2
author knif3 <[email protected]> 1617947351 +0000
committer knif3 <[email protected]> 1617947351 +0000

Initial Commit

tree 73100644 README.md�̆������	����:٤100644 flag.txt�Wn��C�&c���A!��
blob 43these aren't the droids you're looking for

p.s. and that was the moment, when I’ve realized that intented solution was to execute git show flag ;-)

Flag

RS{refs_can_b3_secret_too}