A beginner-level TryHackMe OSINT challenge walkthrough covering subdomain discovery, GitHub profile investigation, and commit history analysis. Starting from a single domain (marvenly.com), the investigation uncovers a development subdomain, a developer's GitHub username hidden in a footer, their email from git commit logs, and a hidden flag buried in older commit history. The key takeaway: deleted files and removed code can still be recovered through version control history.
Sort: