Skip to content

Trufflehog Search

Trufflehog Search                                          Cloud Ring                                          A picture containing clipart Description automatically generatedSulfrod

A person in a garment Description automatically generated with low confidence

Graphical user interface, text Description automatically generated

Hints :
- Git lab repo https://haugfactory.com/orcadmin/aws_scripts

- You can search for secrets in a Git repo with trufflehog git https://some.repo/here.git.

 

Installed trufflehog in local machine and scanned the Github repo with it.

 
trufflehog https://haugfactory.com/asnowball/aws_scripts.git

Text Description automatically generated

File put_policy.py contains the AWS credentials

Answer : put_policy.py

We submit the answer, and the objective is now completed and we get 10 coins as well