Rating:
## [New Developer](https://infernoctf.live/challenges#New%20Developer)
OSINT, 50 Points
Author: nullpxl
Writeup By: **-0x1C**
>A friend of a friend of a friend who is known for leaking info was recently hired at a game company.
>What can you find in their GitHub profile?
>https://github.com/iamthedeveloper123
## Solution:
Looking at the [link we are given](https://github.com/iamthedeveloper123), we can go through and check their repositories out.
The first thing I did was check out [/bash2048](https://github.com/iamthedeveloper123/bash2048) as it was the first one on the repos list.
Scrolling through, we see some *interesting* code for our loss condition of the game ([line 300-302](https://github.com/iamthedeveloper123/bash2048/blob/master/bash2048.sh#L300))
```
source ../dotfiles/.bashrc2
printf "\nYou have lost, try going to https://pastebin.com/$CODE for help!. (And also for some secrets...) \033[0m\n"
exit 0
```
From this code, we can infer that there is information coming from the source file named [.bashrc2](https://github.com/iamthedeveloper123/dotfiles/blob/master/.bashrc2) located in [../dotfiles/](https://github.com/iamthedeveloper123/dotfiles)
Looking through the [.bashrc2](https://github.com/iamthedeveloper123/dotfiles/blob/master/.bashrc2) file for any information that might be getting exported or moved somehow to another file, we see that at [line 83](https://github.com/iamthedeveloper123/dotfiles/blob/master/.bashrc2#L83) we have the code
```
export CODE="trpNwEPT"
```
*very interesting*.
Combining `https://pastebin.com/`and `trpNwEPT` yields us with a working link that contains the flag!
Link: https://pastebin.com/trpNwEPT
Mirror: https://web.archive.org/web/20191228071022/https://pastebin.com/raw/trpNwEPT
Flag: `infernoCTF{n3ver_4dd_sen5itv3_7hings_to_y0ur_publ1c_git}`
