GIt




IceCTF Exposed Web Writeup


Ok in this question i looked at robots.txt it had blocked /.git and flag.php
after that i found out that we can dump files from ./git file using Gitdumper

./gitdump.sh ./gitdumper.sh http://exposed.vuln.icec.tf/.git/ /home/siva/Desktop/

Next I used tig (just enter tig) in the cloned repo .. and u will se the flag :)