miscmedium

Phantom

tamuctf

Task: GitHub repo with single empty commit, flag hidden in phantom/orphaned commit. Solution: Used GitHub API /comments endpoint to discover unreachable commit SHA, then traversed git tree via Git Data API to extract flag from blob.

$ ls tags/ techniques/

osint git github phantom_commits dangling_commits git_data_api github_api

github_phantom_commit_recoverygithub_api_commit_enumerationgit_tree_traversalbase64_blob_decoding

Analysis

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.

$ python3 exploit.py --target 192.168.1.1 --port 8080
[*] Connecting to target...
[+] Shell obtained!

Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]