Skip to content

Day 3

What is the name of the Registrar for the domain santagift.shop?

whois santagift.shop |grep -i registrar

Note

Namecheap Inc

Find the website's source code (repository) on github.com and open the file containing sensitive credentials. Can you find the flag?

GitHub Search: santagiftshop

Note

{THM_OSINT_WORKS}

What is the name of the file containing passwords?

Note

config.php

What is the name of the QA server associated with the website?

In the README.md description shows:

Note

qa.santagift.shop

What is the DB_PASSWORD that is being reused between the QA and PROD environments?

Inside the config.php website we can find the DB_PASSWORD variable with the value:

Note

S@nta2022