Home / Companies / Snyk / Blog / Post Details
Content Deep Dive

Fetch the Flag CTF 2022 writeup: git-refs

Blog post from Snyk

Post Details
Company
Date Published
Author
Iulia Manda
Word Count
585
Language
English
Hacker News Points
-
Summary

This web-based challenge, `git-refs`, involved using Git commands to access a remote repository and ultimately find a flag hidden in system files. The initial approach focused on exploiting the lack of authentication and analyzing network requests, but this led to a dead end. A change in approach was then taken, where the team used Git configuration options to discover a command that opened an editor, allowing them to modify a configuration file and ultimately find the flag. Throughout the challenge, the importance of input sanitization and understanding Git commands was highlighted.