Hack the Box: Illumination

Challenge Lab: Forensics

Difficulty: Easy

“A Junior Developer just switched to a new source control platform. Can you find the secret token?”

Zip Password: hackthebox

Start out by downloading and unzipping the provided file. You will notice that there is a hidden .git folder:

This directory should hold all the history of changes from the Junior Developer in the log portion:

Let’s focus on the one where the tokens were removed:

See the token? It looks like it is encoded with Base64. Let’s decode it:

You can either decode it in the command line like this:

Or use something like CyberChef:

Happy Hacking! ❤