> For the complete documentation index, see [llms.txt](https://the-winrars.gitbook.io/writeups/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://the-winrars.gitbook.io/writeups/2020-writeups/angstrom/ws3.md).

# WS3

* http.request.method == GET on wireshark
* Export Objects > HTTP > git-receive-pack
* Create a new git repo
* Place in the git repo
* Open in hex editor and fix the file header to be just 'PACK' at the beginning (remove all the crap)
* Now git unpack-objects < git-receive-pack
* Navigate to objects folder, here there are 3 git objects:
  * a commit
  * a tree file
  * a blob file
* Decompress the zlib blob file with: python -c "import zlib; print zlib.decompress(open('3f47cbcb3ad8e946d0aad59259bdb1bc9e63f2').read());" > flag.jpg
* Open the file up in a hex editor and remove the first few bytes so the header is a jpeg header
* Open it up for the flag

  **actf{git\_good\_git\_wireshark-123323}**