Day 3

What is the name of the Registrar for the domain santagift.shop?

whois santagift.shop |grep -i registrar
circle-info

Namecheap Inc

Find the website's source code (repository) on github.comarrow-up-right and open the file containing sensitive credentials. Can you find the flag?

Repo link

circle-info

{THM_OSINT_WORKS}

What is the name of the file containing passwords?

circle-info

config.php

What is the name of the QA server associated with the website?

In the README.md description shows:

circle-info

qa.santagift.shop

What is the DB_PASSWORD that is being reused between the QA and PROD environments?

Inside the config.php website we can find the DB_PASSWORD variable with the value:

circle-info

S@nta2022

Last updated