Skip to content

Day 3

What is the name of the Registrar for the domain santagift.shop?

Section titled “What is the name of the Registrar for the domain santagift.shop?”

Terminal window
whois santagift.shop |grep -i registrar

Find the website’s source code (repository) on github.com and open the file containing sensitive credentials. Can you find the flag?

Section titled “Find the website’s source code (repository) on github.com and open the file containing sensitive credentials. Can you find the flag?”

GitHub Search: santagiftshop

What is the name of the file containing passwords?

Section titled “What is the name of the file containing passwords?”

What is the name of the QA server associated with the website?

Section titled “What is the name of the QA server associated with the website?”

In the README.md description shows:

What is the DB_PASSWORD that is being reused between the QA and PROD environments?

Section titled “What is the DB_PASSWORD that is being reused between the QA and PROD environments?”

Inside the config.php website we can find the DB_PASSWORD variable with the value: