Tags: github git slack osint ssh api 

Rating:

# Full WriteUp

Full Writeup on our website: [http://www.aperikube.fr/docs/nullcon_2018_osint4/](http://www.aperikube.fr/docs/nullcon_2018_osint4/)

-----

# TL;DR

In this task I have to “hack” again a server. So I nmapped the IP, I got 22 and 80 ports open, there is a .git directory.

Then we take a look on previous commit and I can see a slack token, with the Slack API I get back private / public ssh keys and user information (username).

Then, with those informations I just log myself with username and keys. A little look about history and flag.

Original writeup (http://www.aperikube.fr/docs/nullcon_2018_osint4/).
Cy6erDJan. 15, 2019, 7:42 p.m.

+