commit-echo

Updated 20 Sep 2026

•
Attribution
- •
  Solved by rn during the competition.
•
What it asked
- •
  Inspect a repository whose working tree had been cleaned and recover evidence preserved in commit history.
•
Approach
- •
  git log --all showed one earlier commit. git show <commit> displayed the deleted file and its contents even though it no longer existed in the current tree.
- •
  Deleting a tracked file in a later commit does not erase it from existing Git objects or history.

Solution

git log --all --oneline --decorate
git show --stat d8cafa0c87fecdf6e201d8783c8fa9fd04709197
git show d8cafa0c87fecdf6e201d8783c8fa9fd04709197

•
Verification
- •
  The team document records the recovered flag and the exact commit ID. The repository archive was not separately attached for replay.
•
Concepts
- •
  Git object history; deleted-file recovery; commit-level evidence review.
•
Source
- •
  Source: team document KMIPNVIII-unintended.docx, titled “Writeup unintended KMIPN 8 Final”. Page numbers refer to the rendered document. Rendered pp. 79–80.
- •
  Flag: KMIPN8{deleted_files_still_live_in_git}.