dCTF 2021: Leak Spin and DevOps vs SecOps
Finding two dCTF flags through GitHub pages, branches, and GitHub Actions artifacts.
Original challenge writeup: Leak Spin && Devops vs Secops.md
These two challenges went together.
I do not have the original challenge descriptions anymore because I wrote this after the CTF ended. I only remember that both descriptions were short and did not give much away.
I found the first thread while working on Injection:
That pointed to a GitHub page:
That was enough for Leak Spin:
DevOps vs SecOps
This one was also hidden in their GitHub page:
It was just tucked away a little deeper.
First, I had to switch to the devops branch:
Then I opened the Actions tab:
From there, I went through Create ctfd.yml and found the flag:
