<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>Forem: Mahidul Haque</title>
    <description>The latest articles on Forem by Mahidul Haque (@mahidulhq).</description>
    <link>https://forem.com/mahidulhq</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3211553%2F41454b47-1c82-420c-8cc8-1e410271065b.jpg</url>
      <title>Forem: Mahidul Haque</title>
      <link>https://forem.com/mahidulhq</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://forem.com/feed/mahidulhq"/>
    <language>en</language>
    <item>
      <title>Blame Game - picoCTF writeups</title>
      <dc:creator>Mahidul Haque</dc:creator>
      <pubDate>Wed, 15 Oct 2025 03:00:14 +0000</pubDate>
      <link>https://forem.com/mahidulhq/blame-game-picoctf-writeups-1ipn</link>
      <guid>https://forem.com/mahidulhq/blame-game-picoctf-writeups-1ipn</guid>
      <description>&lt;p&gt;The challenge mentions "commits," which indicates it involves Git. Let’s start by downloading the challenge files.&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;wget https://artifacts.picoctf.net/c_titan/159/challenge.zip
unzip challenge.zip
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;Next, navigate to the extracted folder and list the files:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;&lt;span class="nb"&gt;cd&lt;/span&gt; &lt;span class="o"&gt;[&lt;/span&gt;extracted-folder]
&lt;span class="nb"&gt;ls&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;You should see a Python file. Although you can view its content using:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;&lt;span class="nb"&gt;cat &lt;/span&gt;file-name.py
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;it’s not necessary for this challenge.&lt;/p&gt;

&lt;p&gt;To explore the Git commit history, use:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;git log
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;or to see commits related to the Python file specifically:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;git log file-name.py
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;This will display a list of commits similar to the screenshot below:&lt;br&gt;
&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Ffc05gxhxtfoxx5gx7zpo.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Ffc05gxhxtfoxx5gx7zpo.png" alt=" " width="800" height="679"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;The commits are listed from the oldest to the newest. The flag &lt;code&gt;picoCTF{_______}&lt;/code&gt; is hidden somewhere in these commit messages. &lt;/p&gt;

&lt;p&gt;For example, I found the flag here:&lt;br&gt;
&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fe9p3hcb5zoifivr5xhjn.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fe9p3hcb5zoifivr5xhjn.png" alt=" " width="788" height="200"&gt;&lt;/a&gt;&lt;/p&gt;

</description>
      <category>writeups</category>
      <category>cybersecurity</category>
    </item>
  </channel>
</rss>
