Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
/app/repo is a Git repository. A developer accidentally committed an API_KEY and removed it in a later commit. Inspect the normal Git history, find the earlier config.py, and recover the flag contained in the API key.
Use git log --oneline to inspect commit history
Focus on commits where config.py was added or changed
Use git show <commit>:config.py to display an older version of the file