> For the complete documentation index, see [llms.txt](https://ravins-organization.gitbook.io/ctf-writeups/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ravins-organization.gitbook.io/ctf-writeups/2024/blahajctf-2024/osint/bad-coder.md).

# Bad coder

My friend is learning to code but I think he's pretty bad at it. I've been trying to catch him lacking, maybe some poorly written code or something... all I've got is a username: `yattana_yattana`. Don't even know what it's for, can you help me out?

Author: `@scuffed`

First things first, I ran sherlock on the username and found a few results.

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2FxFB7VsOO6dZYXMvV07vN%2Fimage.png?alt=media&amp;token=cacb1333-af7a-43fa-98be-5813adee3c60" alt=""><figcaption></figcaption></figure>

After going through all of them, we find that this leads us to his Twitter account, as confirmed by the account talking about a flag.

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2FZNB4IQHtEunwl3UWfg7Y%2Fimage.png?alt=media&amp;token=236af43e-7cde-4cc4-8b69-d87df320d1e0" alt="" width="375"><figcaption></figcaption></figure>

After looking through some of their posts, I found an interesting post,&#x20;

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2FyLf1fmydtBSQnu11qjAd%2Fimage.png?alt=media&amp;token=2ab5f0c3-bba5-4768-a3b8-8a8895e78232" alt=""><figcaption><p>98fCuFS7VA5nepzJBYrN8q2f6LyDVsAynEFnyHQRrygc</p></figcaption></figure>

Turns out this was a red herring but there were a whole bunch of transactions from this address

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2FS04SHO6n90SlmmyvaYVS%2Fimage.png?alt=media&amp;token=6d7c56f6-e3b5-4c7a-a2c7-b7273564612a" alt=""><figcaption><p>All a red herring</p></figcaption></figure>

After searching some more, I found the correct post, where it was talking about a github repo, (makes more sense since the challenge name is Bad Coder)

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2FJCEKkw8fV6lV8Ry0YxXA%2Fimage.png?alt=media&amp;token=1cb3d22d-6e69-47cd-a1cc-cf710d813421" alt=""><figcaption><p>github.com/yokuyarimashita</p></figcaption></figure>

By going to the github, we see there is only 1 repo available

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2FeGnIXWmVpRWgMfRTtFTY%2Fimage.png?alt=media&amp;token=e00afb51-4f0f-4026-b615-ed5cb692033c" alt=""><figcaption><p>Lets take a look</p></figcaption></figure>

After taking a closer look, we see that there are 3 branches, lets take a look at them

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2FgMuQPY2LZxDojXHLfKNu%2Fimage.png?alt=media&amp;token=e1278791-8431-477a-b7cb-ade1566a52fe" alt=""><figcaption></figcaption></figure>

I went to take a look at the `testing` branch and there were 11 commits. So I went to take a look at the `Create env` commit, and the flag was there.

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2FlcV4ULgC1Nq7Lzo4d3tk%2Fimage.png?alt=media&amp;token=1df64515-1f5f-4b31-b930-28d4b1f4f17e" alt=""><figcaption><p>FLAG=blahaj{c4r3fuL_w17h_y0UR_c0MM175}</p></figcaption></figure>

Thus giving us the flag `blahaj{c4r3fuL_w17h_y0UR_c0MM175}`.
