repuzzled
My way
We're looking for a leaked email in this user profile on github. The user only has one repo so that sounds like a good place to start - my first thought is that each git commit made contains some metadata so let's clone it and have a look with git log:
$ git clone https://github.com/repuzzler7/Ciphey.git
Cloning into 'Ciphey'...
remote: Enumerating objects: 10374, done.
remote: Counting objects: 100% (766/766), done.
remote: Compressing objects: 100% (306/306), done.
remote: Total 10374 (delta 540), reused 660 (delta 457), pack-reused 9608
Receiving objects: 100% (10374/10374), 16.71 MiB | 16.52 MiB/s, done.
Resolving deltas: 100% (6275/6275), done.
$ cd Ciphey
$ git log -n 1
commit 290bc017c6aa5d3b5d23a548fded54f39d14cbfb (HEAD -> master, origin/master, origin/HEAD)
Author: repuzzler7 <t0T4lLy_r341_v3rY_0fFIcla1@repuzzler7.com>
Date: Wed Aug 18 01:26:06 2021 +0000
ictf{not_actual_flag_be_careful_not_to_dox_yourself}
There we have it, the email address is stored in the author field linked to the commit.
Alternatives
There are a couple of cool github specific ways of finding this commit metadata that I learnt about after submitting the flag for this challenge; The first is to add .patch to the end of the commit url, for example which gives us this diff (check out some of the fake flags/easter eggs too!):
From 290bc017c6aa5d3b5d23a548fded54f39d14cbfb Mon Sep 17 00:00:00 2001
From: repuzzler7 <t0T4lLy_r341_v3rY_0fFIcla1@repuzzler7.com>
Date: Wed, 18 Aug 2021 01:26:06 +0000
Subject: [PATCH] ictf{not_actual_flag_be_careful_not_to_dox_yourself}
---
README.md | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/README.md b/README.md
index 56c21352..ac31f0a0 100644
--- a/README.md
+++ b/README.md
@@ -74,7 +74,7 @@ And that's just the tip of the iceberg. For the full technical explanation, chec
- **50+ encryptions/encodings supported** such as binary, Morse code and Base64. Classical ciphers like the Caesar cipher, Affine cipher and the Vigenere cipher. Along with modern encryption like repeating-key XOR and more. **[For the full list, click here](https://github.com/Ciphey/Ciphey/wiki/Supported-Ciphers)**
- **Custom Built Artificial Intelligence with Augmented Search (AuSearch) for answering the question "what encryption was used?"** Resulting in decryptions taking less than 3 seconds.
- **Custom built natural language processing module** Ciphey can determine whether something is plaintext or not. Whether that plaintext is JSON, a CTF flag, or English, Ciphey can get it in a couple of milliseconds.
-- **Multi Language Support** at present, only German & English (with AU, UK, CAN, USA variants).
+- **Multi Language Support** at presentictf{never_gonna_give_you_up}, only German & English (with AU, UK, CAN, USA variants).
- **Supports encryptions and hashes** Which the alternatives such as CyberChef Magic do not.
- **[C++ core](https://github.com/Ciphey/CipheyCore)** Blazingly fast.
@@ -189,7 +189,7 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
<tr>
<td align="center"><a href="https://github.com/Cyclic3"><img src="https://avatars1.githubusercontent.com/u/15613874?v=4?s=100" width="100px;" alt=""/><br /><sub><b>cyclic3</b></sub></a><br /><a href="#design-cyclic3" title="Design">🎨</a> <a href="#maintenance-cyclic3" title="Maintenance">🚧</a> <a href="https://github.com/Ciphey/Ciphey/commits?author=cyclic3" title="Code">💻</a> <a href="#ideas-cyclic3" title="Ideas, Planning, & Feedback">🤔</a></td>
<td align="center"><a href="https://skerritt.blog"><img src="https://avatars3.githubusercontent.com/u/10378052?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Brandon</b></sub></a><br /><a href="#design-brandonskerritt" title="Design">🎨</a> <a href="#maintenance-brandonskerritt" title="Maintenance">🚧</a> <a href="https://github.com/Ciphey/Ciphey/commits?author=brandonskerritt" title="Code">💻</a> <a href="#ideas-brandonskerritt" title="Ideas, Planning, & Feedback">🤔</a></td>
- <td align="center"><a href="https://github.com/michalani"><img src="https://avatars0.githubusercontent.com/u/27767884?v=4?s=100" width="100px;" alt=""/><br /><sub><b>michalani</b></sub></a><br /><a href="https://github.com/Ciphey/Ciphey/commits?author=michalani" title="Code">💻</a></td>
+ <td align="center"><a href="https://github.com/michalani"><img src="https://avatars0.githubufake email address: fake_email@gmail.comsercontent.com/u/27767884?v=4?s=100" width="100px;" alt=""/><br /><sub><b>michalani</b></sub></a><br /><a href="https://github.com/Ciphey/Ciphey/commits?author=michalani" title="Code">💻</a></td>
<td align="center"><a href="https://github.com/ashb07"><img src="https://avatars2.githubusercontent.com/u/24845568?v=4?s=100" width="100px;" alt=""/><br /><sub><b>ashb07</b></sub></a><br /><a href="https://github.com/Ciphey/Ciphey/commits?author=ashb07" title="Code">💻</a></td>
<td align="center"><a href="https://github.com/TheAlcanian"><img src="https://avatars3.githubusercontent.com/u/22127191?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Shardion</b></sub></a><br /><a href="https://github.com/Ciphey/Ciphey/issues?q=author%3ATheAlcanian" title="Bug reports">🐛</a></td>
<td align="center"><a href="https://github.com/Bryzizzle"><img src="https://avatars0.githubusercontent.com/u/57810197?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Bryan</b></sub></a><br /><a href="#translation-Bryzizzle" title="Translation">🌍</a> <a href="https://github.com/Ciphey/Ciphey/commits?author=Bryzizzle" title="Documentation">📖</a></td>
@@ -214,7 +214,7 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
<td align="center"><a href="https://hexchaos.xyz/"><img src="https://avatars1.githubusercontent.com/u/8947820?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Jack</b></sub></a><br /><a href="#translation-HexChaos" title="Translation">🌍</a></td>
</tr>
<tr>
- <td align="center"><a href="https://github.com/yafkari"><img src="https://avatars3.githubusercontent.com/u/41365655?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Younes</b></sub></a><br /><a href="#translation-yafkari" title="Translation">🌍</a></td>
+ <td align="center"><a href="https://github.com/yafkari"><img src="https://avatars3.githubanother fake email address: not_real_seriously_this_is_fake@hotmail.comusercontent.com/u/41365655?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Younes</b></sub></a><br /><a href="#translation-yafkari" title="Translation">🌍</a></td>
<td align="center"><a href="https://gitlab.com/Marnick39"><img src="https://avatars2.githubusercontent.com/u/17315511?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Marnick Vandecauter</b></sub></a><br /><a href="#translation-Marnick39" title="Translation">🌍</a></td>
<td align="center"><a href="https://github.com/mav8557"><img src="https://avatars0.githubusercontent.com/u/47306745?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Michael V</b></sub></a><br /><a href="https://github.com/Ciphey/Ciphey/commits?author=mav8557" title="Code">💻</a></td>
<td align="center"><a href="https://github.com/chuinzer"><img src="https://avatars2.githubusercontent.com/u/64257785?v=4?s=100" width="100px;" alt=""/><br /><sub><b>chuinzer</b></sub></a><br /><a href="#translation-chuinzer" title="Translation">🌍</a></td>
Another place we can look is the github events api for the user, which returns a json of any recent actions the user has made on github, including commit pushes, again containing the commit metadata like here:
[
{
"id": "17611118023",
"type": "PushEvent",
"actor": {
"id": 89113184,
"login": "repuzzler7",
"display_login": "repuzzler7",
"gravatar_id": "",
"url": "https://api.github.com/users/repuzzler7",
"avatar_url": "https://avatars.githubusercontent.com/u/89113184?"
},
"repo": {
"id": 397435069,
"name": "repuzzler7/Ciphey",
"url": "https://api.github.com/repos/repuzzler7/Ciphey"
},
"payload": {
"push_id": 7745837667,
"size": 1,
"distinct_size": 1,
"ref": "refs/heads/master",
"head": "290bc017c6aa5d3b5d23a548fded54f39d14cbfb",
"before": "b97220cb9d078bbfeea58cdb7937d9cfdbd72e28",
"commits": [
{
"sha": "290bc017c6aa5d3b5d23a548fded54f39d14cbfb",
"author": {
"email": "t0T4lLy_r341_v3rY_0fFIcla1@repuzzler7.com",
"name": "repuzzler7"
},
"message": "ictf{not_actual_flag_be_careful_not_to_dox_yourself}",
"distinct": true,
"url": "https://api.github.com/repos/repuzzler7/Ciphey/commits/290bc017c6aa5d3b5d23a548fded54f39d14cbfb"
}
]
},
"public": true,
"created_at": "2021-08-18T01:29:31Z"
}
]