HackTheBox Forensics Challenge (Illumination) Write-Up

Step 1: Unzip and check the directory for any hidden files.

Step 2: Inspect the .git directory.

Step 3: Git log exists. Get the git log. 

One of the commits looks suspicious. 

Step 4: show the changes of the suspicious commit. 

git show 47241a47f62ada864ec74bd6dedc4d33f4374699

get the secret token being deleted in this commit. 

Step 5: put the token into a file and decode the token.

base64 —decode token.txt