<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Dev Diaries]]></title><description><![CDATA[Obsidian digital garden]]></description><link>http://github.com/dylang/node-rss</link><image><url>site-lib/media/favicon.png</url><title>Dev Diaries</title><link></link></image><generator>Webpage HTML Export plugin for Obsidian</generator><lastBuildDate>Tue, 24 Mar 2026 18:06:44 GMT</lastBuildDate><atom:link href="site-lib/rss.xml" rel="self" type="application/rss+xml"/><pubDate>Tue, 24 Mar 2026 18:06:44 GMT</pubDate><ttl>60</ttl><dc:creator></dc:creator><item><title><![CDATA[Dev Diaries]]></title><description><![CDATA[--Hunt through online development traces to uncover what was left behind.<img alt="Dev Diaries.png#center" src="attachments/dev-diaries.png" target="_self" style="width: 600px; max-width: 100%;">
<br>Room link: <a rel="noopener nofollow" class="external-link is-unresolved" href="https://tryhackme.com/room/devdiaries" target="_self">https://tryhackme.com/room/devdiaries</a>
Difficulty: Easy
<br>Authors: <a data-tooltip-position="top" aria-label="https://tryhackme.com/p/ar33zy" rel="noopener nofollow" class="external-link is-unresolved" href="https://tryhackme.com/p/ar33zy" target="_self">ar33zy</a> and <a data-tooltip-position="top" aria-label="https://tryhackme.com/p/tryhackme" rel="noopener nofollow" class="external-link is-unresolved" href="https://tryhackme.com/p/tryhackme" target="_self">tryhackme</a>
We have just launched a website developed by a freelance developer. The source code was not shared with us, and the developer has since disappeared without handing it over.Despite this, traces of the development process and earlier versions of the website may still exist online.You are only given the website's primary domain as a starting point: marvenly.com
<br>What is the subdomain where the development version of the website is hosted? <a href=".?query=tag:1Question" class="tag is-unresolved" target="_self" rel="noopener nofollow" data-href="#1Question">#1Question</a> <br>What is the GitHub username of the developer? <a href=".?query=tag:2Question" class="tag is-unresolved" target="_self" rel="noopener nofollow" data-href="#2Question">#2Question</a> <br>What is the developer's email address? <a href=".?query=tag:3Question" class="tag is-unresolved" target="_self" rel="noopener nofollow" data-href="#3Question">#3Question</a>
<br>What reason did the developer mention in the commit history for removing the source code? <a href=".?query=tag:4Question" class="tag is-unresolved" target="_self" rel="noopener nofollow" data-href="#4Question">#4Question</a> <br>What is the value of the hidden flag? <a href=".?query=tag:5Question" class="tag is-unresolved" target="_self" rel="noopener nofollow" data-href="#5Question">#5Question</a>
The only information that we have is the domain name: marvely.com. and trying to browse that domain, gives no response.<br><img alt="Pasted image 20260324200917.png#center" src="attachments/pasted-image-20260324200917.png" target="_self" style="width: 900px; max-width: 100%;">Which also leading into a google and other search engine searches also gives us the same results.<br>Hence, we go with <a data-tooltip-position="top" aria-label="https://crt.sh/" rel="noopener nofollow" class="external-link is-unresolved" href="https://crt.sh/" target="_self">crt.sh</a> to look for any subdomains and other domain related information.<br><img alt="Pasted image 20260324212505.png#center" src="attachments/pasted-image-20260324212505.png" target="_self" style="width: 1000px; max-width: 100%;">In here, we get the list of certificates provided to it's domains and subdomains.<br><img alt="Pasted image 20260324212914.png#center" src="attachments/pasted-image-20260324212914.png" target="_self" style="width: 1000px; max-width: 100%;"><br>which answers the first question ( <a href=".?query=tag:1Question" class="tag is-unresolved" target="_self" rel="noopener nofollow" data-href="#1Question">#1Question</a>).The domain is Down I guessGoing through the subdomain that we identified, we can find the username of the user who has developed this application.<br><img alt="Pasted image 20260324214443.png > center" src="attachments/pasted-image-20260324214443.png" target="_self"><br>searching for this username on <a data-tooltip-position="top" aria-label="https://github.com/" rel="noopener nofollow" class="external-link is-unresolved" href="https://github.com/" target="_self">GitHub</a>, gives us a hit on one profile.<br><img alt="Pasted image 20260324214734.png#center" src="attachments/pasted-image-20260324214734.png" target="_self" style="width: 1000px; max-width: 100%;"><br>Which confirms the 2nd question's answer ( <a href=".?query=tag:2Question" class="tag is-unresolved" target="_self" rel="noopener nofollow" data-href="#2Question">#2Question</a>).Going to the profile and the only repository, we see the index.html file present. Hence to dig further, we clone the repository.<br><img alt="Pasted image 20260324215055.png#center" src="attachments/pasted-image-20260324215055.png" target="_self" style="width: 1000px; max-width: 100%;">To clone, you can run the following commands:# To clone the respository
git clone https://github.com/notvibecoder23/marvenly_site.git # To move into the respository
cd marvenly_site
<br><img alt="Pasted image 20260324215305.png > center" src="attachments/pasted-image-20260324215305.png" target="_self">Just to look into the earlier versions of the commits and other logs, we can look into the git logs.# To view the logs of the repository
git log
<br><img alt="Pasted image 20260324215642.png#center" src="attachments/pasted-image-20260324215642.png" target="_self" style="width: 900px; max-width: 100%;">Here we find the email address of the author of the github repository and information related to each commits.<br>Which answers both third and forth question ( <a href=".?query=tag:3Question" class="tag is-unresolved" target="_self" rel="noopener nofollow" data-href="#3Question">#3Question</a> and <a href=".?query=tag:4Question" class="tag is-unresolved" target="_self" rel="noopener nofollow" data-href="#4Question">#4Question</a>)Now, to find the flag, we have to look into the older versions of the commit. For that, the easier way is to look from the author's GitHub Page and it's commits.For that, go to the author's GitHub page with index.html code opened. Then click on History at the right corner of the screen.<br><img alt="Pasted image 20260324231003.png#center" src="attachments/pasted-image-20260324231003.png" target="_self" style="width: 1000px; max-width: 100%;">Here select the commit of Removed my signature, ready for deployment.<br><img alt="Pasted image 20260324231244.png#center" src="attachments/pasted-image-20260324231244.png" target="_self" style="width: 10000px; max-width: 100%;">Here we find the flag to this room THM{........<br><img alt="Pasted image 20260324231516.png#center" src="attachments/pasted-image-20260324231516.png" target="_self" style="width: 1000px; max-width: 100%;">And, wit that we finish the room....]]></description><link>dev-diaries.html</link><guid isPermaLink="false">TryHackMe/Dev Diaries.md</guid><pubDate>Tue, 24 Mar 2026 18:06:23 GMT</pubDate><enclosure url="." length="0" type="false"/><content:encoded>&lt;figure&gt;&lt;img src=&quot;.&quot;&gt;&lt;/figure&gt;</content:encoded></item></channel></rss>