WS3

http.request.method == GET on wireshark

Export Objects > HTTP > git-receive-pack

Create a new git repo

Place in the git repo

Open in hex editor and fix the file header to be just 'PACK' at the beginning (remove all the crap)

Now git unpack-objects < git-receive-pack

Navigate to objects folder, here there are 3 git objects:

• a commit

• a tree file

• a blob file

Decompress the zlib blob file with: python -c "import zlib; print zlib.decompress(open('3f47cbcb3ad8e946d0aad59259bdb1bc9e63f2').read());" > flag.jpg

Open the file up in a hex editor and remove the first few bytes so the header is a jpeg header

Open it up for the flag

actf{git_good_git_wireshark-123323}