Advent of Cyber 2022 [Day3] — OSINT | Nothing escapes detective McRed — Writeup

OSINT Nothing escapes detective McRed Writeup ~December 3, Karthikeyan Nagaraj

Karthikeyan Nagaraj
System Weakness

--

  1. What is the name of the Registrar for the domain santagift.shop?
Ans : Namecheap Inc

2. Find the website’s source code (repository) on github.com and open the file containing sensitive credentials. Can you find the flag?

Ans : {THM_OSINT_WORKS}

3. What is the name of the file containing passwords?

Ans : config.php

4. What is the name of the QA server associated with the website?

Use Ctrl+F to Find for Keywords

Ans : qa.santagift.shop

5. What is the DB_PASSWORD that is being reused between the QA and PROD environments?

Same Method

Ans : S@nta2022

Thank you for Reading!!

Happy Hacking ~

Author : Karthikeyan Nagaraj ~ Cyberw1ng

Queries:

TryHackme 2022

Advent of Cyber 2022

Advent of Cyber 4 2022

Advent of Cyber 2022 Day 3

Advent of Cyber 2022 Day 3 Answers

Advent of Cyber 2022 Day 3 Answers Writeups

Karthikeyan Nagaraj ~ Cyberw1ng

--

--

Security Researcher | Bug Hunter | Web Pentester | CTF Player | TryHackme Top 1% | AI Researcher | Blockchain Developer