History Never Forgets
150 points · 0 solved
A developer scrubbed a flag from the working tree but left the repo history intact.
$ git log --oneline
a1b2c3d remove secrets
e4f5g6h initial commit
$ git show e4f5g6h:config.txt
api_url=https://internal.sudosecurity.org
flag=ss{history_never_forgets}Lesson: rotation beats deletion — anything committed once is recoverable forever.
Hints0/2