> For the complete documentation index, see [llms.txt](https://writeups.adityadindi.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://writeups.adityadindi.com/tryhackme/untitled/git-happens.md).

# Git Happens

![](/files/-Mdn8gvYpGq74Il5sUKt)

## Scanning

Lets run scans to find open ports and services

![](/files/-Mdn9hq72ojnS0MsrkOI)

## Enumeration 

Lets check the webserver out.

![](/files/-Mdn9nv4O7ZYcR636TCI)

We have a login page. In the nmap scan we found the `/.git/` directory, lets check it out.

![](/files/-MdnA-SNlY0Xrau-LMA-)

We have a bunch of directories.

Now we can manually look at all the directories, or we can use a tool called `GitTools`. Lets download it.

![](/files/-MdnAq45fQ9pBor2Q4e7)

Now lets download the directories onto out machine and call it `clone`.

![](/files/-MdnBK1m-_TnzXmOeSgH)

Now we can see all the directories on our machine

![](/files/-MdnBYGRw2z48Cicmn_5)

Here, lets look at the logs as they are the most interesting

![](/files/-MdnC6k30lJaU8KPZyfr)

Looking at all of them , the highlighted one is the most interesting as it might show us interesting information about the login page. Lets look at it in more detail

![](/files/-MdnDG2vcGdc1WeQwvpv)

Scrolling to the end of the file, we find the flag.

![](/files/-MdnDClsfvP0nDRaHFqR)