rm .git/index git reset HEAD . Suddenly, files that were "deleted" or hidden reappear. You’ll see a file named backup_ flag.txt (without the space) or user_flag.enc . After restoring the Git index, run ls -la . You’ll find a symlink or a hidden file like .secret/creds .
Final Thoughts Challenge 2 teaches a critical real-world lesson: Directory indexing + exposed version control = Game over. index of challenge 2
Let’s break down exactly how to solve it. When you navigate to the provided endpoint (let’s call it http://target/challenge2/ ), you are greeted with a raw Apache-style directory listing: After restoring the Git index, run ls -la
Decode the .enc file using the key found in the Git history ( git reflog ): Let’s break down exactly how to solve it
User: pentest_low Note: The .git index is corrupted. Restore HEAD. Bingo. This isn't a standard web challenge anymore. This is a challenge. Step 3: The Exploit - Restoring the Index If the .git folder is exposed (try /challenge2/.git/ ), and you see a directory listing there, you can download the entire repo using wget or git-dumper .
Check the readme.txt :
Alex Mercenary | Category: Cybersecurity / CTF Walkthrough If you’ve been following along with our Capture The Flag (CTF) series, you know that Challenge 1 was a gentle handshake. Challenge 2 , however, is where the gloves come off.