Git and Crumpets is a medium difficulty box from tryhackme which is mostly based on git. We get a shell on the box using a CVE in gitea’s git hooks functionality .For root, we change the permissions of the git user to root user. Now we were able to see a private repository owned by root which had root user’s ssh private key through which we login as root to get the root flag....
Room Description - Boss wanted me to create a prototype, so here it is! We even used something called “version control” that made deploying this really easy! Room Link - https://tryhackme.com/room/githappens Creator - hydragyrum Task 1 - Find the Super Secret Password NMAP # Nmap 7.91 scan initiated Wed Jul 21 01:43:34 2021 as: nmap -sC -sV -v -p 80 -Pn -oN git-happens.nmap 10.10.73.189 Nmap scan report for 10.10.73.189 Host is up....