Room 404 — TryHackMe Hacker Holidays 2026 Day 2 Writeup

Day 2 walkthrough: one curl to /.git/HEAD confirms the leak, git-dumper rebuilds the repo, and the flag sits in a supposedly cleaned commit. Flags redacted.