OSINT, 50 Points
Author: nullpxl
Writeup By: -0x1C
A friend of a friend of a friend who is known for leaking info was recently hired at a game company. What can you find in their GitHub profile? https://github.com/iamthedeveloper123
Looking at the link we are given, we can go through and check their repositories out.
The first thing I did was check out /bash2048 as it was the first one on the repos list.
Scrolling through, we see some interesting code for our loss condition of the game (line 300-302)
source ../dotfiles/.bashrc2
printf "\nYou have lost, try going to https://pastebin.com/$CODE for help!. (And also for some secrets...) \033[0m\n"
exit 0
From this code, we can infer that there is information coming from the source file named .bashrc2 located in ../dotfiles/
Looking through the .bashrc2 file for any information that might be getting exported or moved somehow to another file, we see that at line 83 we have the code
export CODE="trpNwEPT"
very interesting.
Combining https://pastebin.com/and trpNwEPT yields us with a working link that contains the flag!
Link: https://pastebin.com/trpNwEPT
Mirror: https://web.archive.org/web/20191228071022/https://pastebin.com/raw/trpNwEPT
Flag: infernoCTF{n3ver_4dd_sen5itv3_7hings_to_y0ur_publ1c_git}