DEV DIARIES — TRY HACK ME WALKTHROUGH:

TASK — 01: CHALLENGE

Scenario

We have just launched a website developed by a freelance developer. The source code was not shared with us, and the developer has since disappeared without handing it over.

Despite this, traces of the development process and earlier versions of the website may still exist online.

We are given only the primary domain:

                                 marvenly.com

                                 marvenly.com

The objective is to perform reconnaissance and find information about the development environment and the developer.

Challenge 1 — Find the Development Subdomain

Question

What is the subdomain where the development version of the website is hosted?

We are given the primary domain:

                                marvenly.com

                                marvenly.com

Since we do not have access to the source code, I started with subdomain enumeration.For this challenge, I used DNSDumpster to discover DNS records and subdomains associated with the target domain.

ANSWER IS : uat-testing.marvenly.com

ANSWER IS : uat-testing.marvenly.com

Challenge 2 — Investigate the Development Website

Question What is the subdomain where the development version of the website is hosted?

After discovering the subdomain, I opened:

https://uat-testing.marvenly.com

https://uat-testing.marvenly.com

The website was accessible and appeared to be a development/testing version of the main website.

I manually explored the website and navigated to the Contact section.

After scrolling down to the bottom of the page, I found information about the developer, including a GitHub username.

This username became the next clue for the investigation.

ANSWER IS: notvibecoder23

ANSWER IS: notvibecoder23

Challenge 3 — Find the Developer's Email Address

Question

What is the developer's email address?

The Contact section of the development website revealed the developer's GitHub username.

I used the username to search for the developer's GitHub profile.

Search: https://github/notvibecoder23/

Search: https://github/notvibecoder23/

The GitHub profile contained the relevant repository.

I opened the repository and clicked the Code button to obtain the repository URL.

ANSWER IS: freelancedevbycoder23@gmail.com

ANSWER IS: freelancedevbycoder23@gmail.com

Challenge 4 — Why Was the Source Code Removed?

Question

What reason did the developer mention in the commit history for removing the source code?

After finding the repository, I inspected the GitHub commit history.There were four commits in the repository.I opened the commits one by one and checked the commit messages and changes.

One of the commits revealed the reason why the project was abandoned.

The developer mentioned:

ANSWER IS: The project was marked as abandoned due to a payment dispute.

ANSWER IS: The project was marked as abandoned due to a payment dispute.

Challenge 5 — Find the Hidden Flag

Question

What is the value of the hidden flag?

Next, I investigated the previous commits to look for information that had been removed from the latest version of the project.

On GitHub, I found a commit named:

Removed my signature, ready for deployment

Removed my signature, ready for deployment

THE FLAG: THM{g1t_h1st0ry_n3v3r_f0rg3ts}

THE FLAG: THM{g1t_h1st0ry_n3v3r_f0rg3ts}