notes / writeup
Commited (THM Challenge)
https://tryhackme.com/room/
When I read the description, I immediately think about check its history so that I run
ubuntu@thm-comitted:~/commited/commited$ git log --oneline --all
28c3621 (HEAD -> master) Finished
4e16af9 (dbint) Reminder Added.
c56c470 Oops
3a8cc16 DB check
6e1ea88 Note added
9ecdc56 Database management features added.
26bcf1a Create database logic added
b0eda7d Connecting to db logic added
441daaa Initial Project.
I saw the commit Oops really sus. Then I checked it
ubuntu@thm-comitted:~/commited/commited$ git show c56c470
commit c56c470a2a9dfb5cfbd54cd614a9fdb1644412b5
Author: fumenoid <fumenoid@gmail.com>
Date: Sun Feb 13 00:46:39 2022 -0800
Oops
diff --git a/main.py b/main.py
index 54d0271..0e1d395 100644
--- a/main.py
+++ b/main.py
@@ -4,7 +4,7 @@ def create_db():
mydb = mysql.connector.connect(
host="localhost",
user="root", # Username Goes Here
- password="flag{a489a9dbf8eb9d37c6e0cc1a92cda17b}" # Password Goes Here
+ password="" # Password Goes Here
)
mycursor = mydb.cursor()
@@ -16,7 +16,7 @@ def create_tables():
mydb = mysql.connector.connect(
host="localhost",
user="root", #username Goes here
And tada the lag appear