Shrek_Fans_Only

Shrek Fans Only

Shrek seems to be pretty angry about something, so he deleted some important information off his site. He murmured something about Donkey being too *committed* to infiltrate his swamp. Can you *checkout* the site and see what the *status* is?

Background Knowledges

• File inclusion vulnerability - Wikipedia
• Git - Git Objects
  • Git is a content-addressable filesystem.

Tools

• wget
• base64
• zlib-flate

Description

• Analyze link
  • 
    • getimg.php?img=aW1nMS5qcGc=
    • echo aW1nMS5qcGc= | base64 --decode -> img1.jpg
    • File-inclusion vulnerable.
• Get git commit history.
  • 
    • To get flag, we have to find difference between 759be9 Initial commit and 976b62 remove flag.
  • 
    • Follow the tree object of each commit object.
    • SHA-1 sum of index.php is different. This means that there are changes.
    • Flag must be deleted from index.php.
  • 
    • Follow the blob object of index.php in 759be9 Initial commit.
    • The flag shows up.
• utflag{honey_i_shrunk_the_kids_HxSv03jgkj}