[BSides San Francisco CTF] Web 100 the-year-2000

As he says in this web: made with apache,git,notepad++,html

After one hour searching i find out git vulnerability

I use gitdumper and extractor to solve this challenge:

secondly:
extractor.sh repo/ doom/

Open doom directory, we can see 3 folders:

Let cat one by one
cat doom/0-9e9ce4da43d0d2dc10ece64f75ec9cab1f4e5de0/index.html

I got lucky, the flag is in there:
FLAG:what_is_HEAD_may_never_die