Advent Of Cyber 2023 — Day 20

What is the handle of the developer responsible for the merge changes?

Check the handle for the username “Frostlino”

@badsecops

What port is the defaced calendar site server running on?

Check the config file named: “.gitlab-ci.yml”

9081

What server is the malicious server running on?

apache

What message did the Frostlings leave on the defaced site?

Open your TryHackMe MachineIp with the port 9081 in new tab IP:9081

FROSTLINGS RULE 

What is the commit ID of the original code for the Advent Calendar site?

Click on history & check commit ID for the first commit

986b7407

That’s it | Visit mansoorbarri.com for other hacking & IT related articles.