Blame Game writeup - Pico CTF ( General skills )

Solution -

Step 1: Download challenge files - First, download the challenge.zip file from the Pico CTF interface and extract it. After extracting, you’ll see the files, including a hidden .git directory. This directory indicates that the project is under version control with Git.

Within the project, there is a single Python file called message.py located in the drop-in directory. However, the file contains incorrect or non-working code.

Step 2: Check commit history - Since the file seems to contain faulty code, the next step is to examine the commit history to see if any earlier versions of the file worked correctly or if we can find any clues.

To view the commit history of the specific file (message.py), use the following Git command:
git log message.py

This command shows all the previous commits made to message.py, including details like the author, date, and commit message. In the commit logs, one of the commit author names will contain the flag.

You will see the flag in one of the author name of commits.