notes / writeup

Commited (THM Challenge)

https://tryhackme.com/room/

May 22, 2026 writeup

https://tryhackme.com/room/

When I read the description, I immediately think about check its history so that I run

ubuntu@thm-comitted:~/commited/commited$ git log --oneline --all  
28c3621 (HEAD -> master) Finished
4e16af9 (dbint) Reminder Added.
c56c470 Oops
3a8cc16 DB check
6e1ea88 Note added
9ecdc56 Database management features added.
26bcf1a Create database logic added
b0eda7d Connecting to db logic added
441daaa Initial Project.

I saw the commit Oops really sus. Then I checked it

ubuntu@thm-comitted:~/commited/commited$ git show c56c470
commit c56c470a2a9dfb5cfbd54cd614a9fdb1644412b5
Author: fumenoid <fumenoid@gmail.com>
Date:   Sun Feb 13 00:46:39 2022 -0800

    Oops

diff --git a/main.py b/main.py
index 54d0271..0e1d395 100644
--- a/main.py
+++ b/main.py
@@ -4,7 +4,7 @@ def create_db():
     mydb = mysql.connector.connect(
     host="localhost",
     user="root", # Username Goes Here
-    password="flag{a489a9dbf8eb9d37c6e0cc1a92cda17b}" # Password Goes Here
+    password="" # Password Goes Here
     )
 
     mycursor = mydb.cursor()
@@ -16,7 +16,7 @@ def create_tables():
     mydb = mysql.connector.connect(
     host="localhost",
     user="root", #username Goes here

And tada the lag appear