GlacierCTF – GetResetHard

Description

1. Kevin joined our company.
2. Kevin took a s**t on the carpet.
3. Kevin git reset --hard the entire repo.
4. Kevin force pushed.
5. Kevin left the company.

Now it’s your turn to fix the mess. You get the compressed disk with the repository.

Note: The repo is completely safe.

Downloadable file: gitresethard.tar.gz

---

Process

1. Download the gitresethard.tar.gz.

2. Extract the compressed file using the command below.

    tar -xzvf gitresethard.tar.gz
   

3. After decompressing the file, change the directory to gitresethard/repo.

4. Type in the following command to reveal any hidden/dangling commits:

    git fsck --lost-found
   

   

5. A hidden/dangling commit is present. Let’s see the contents using the git show command.

    git show <dangling commit_id>
   

   

6. The dangling commit shows a connection using openssl and also includes a password which is being encrypted. I chose to use echo to pipe it directly.

7. After running the command, we got the flag!

Flag: gctf{0113_wh0_g1t_r3s3t3d_th3_c4t_4789}

---

Summary

Step	Action
1	Extract the repo archive
2	Run git fsck to detect orphaned objects
3	Identify dangling commit 6a81c76e…
4	View its contents with git show
5	Find OpenSSL encryption clues
6	Recreate decryption using echo → openssl
7	Recover the flag