miscPromedium

Phantom

tamuctf

Task: GitHub repo with single empty commit, flag hidden in phantom/orphaned commit. Solution: Used GitHub API /comments endpoint to discover unreachable commit SHA, then traversed git tree via Git Data API to extract flag from blob.

$ ls tags/ techniques/
github_phantom_commit_recoverygithub_api_commit_enumerationgit_tree_traversalbase64_blob_decoding

πŸ”’

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups