=

Commitment issues writeup - Pico CTF ( General skills )

Description : I accidentally wrote the flag down. Good thing I deleted it!

Solution -

Step 1: Download challenge files - First, download the challenge.zip file from the Pico CTF interface and extract it. After extracting, you’ll see the files, including a hidden .git directory. This directory indicates that the project is under version control with Git.

The fact that the flag was "deleted" gives us a big clue: we’ll need to use Git to dig into the past to find the flag.

Step 2: Check the previous commits - Next, we want to look at the previous commits made in this Git repository. To do this, we use the following command:git log

Code bash
git log

The git log command will display a list of all commits, showing who made the changes and when. Each commit also has a unique identifier known as a "commit hash" that we’ll need for the next step.

Step 3: Show the commit changes - Once you’ve identified the commit that potentially contains the flag, you can view its changes using the git show command. Here’s the basic syntax:
git show COMMIT_HASH

Replace COMMIT_HASH with the actual hash from the git log command. This will show the differences introduced in that specific commit. By inspecting the changes, you’ll likely find the flag that was written and then deleted.


Commitment issuses picoctf image 2

Flag is - picoCTF{s@n1t1z3_7246792d}