Video walkthrough for "Photographs", an opensource intelligence (OSINT) challenge from the ‪@intigriti‬ 1337UP LIVE CTF 2023. The challenge required players to examine exifdata and then trace back through alt accounts created by the target, exploring social media accounts uncovered using sherlock (and Google), reverse image searching etc. They would eventually find an interesting comment on a blog indicating location data was shared. This was a hint that players need to check the waybackmachine for an archived copy of the page, which contained the flag! Write-ups/tutorials aimed at beginners - Hope you enjoy 🙂 #INTIGRITI #CTF #OSINT
↢Social Media↣
Twitter: / _cryptocat
GitHub: github.com/Crypto-Cat/CTF
HackTheBox: app.hackthebox.eu/profile/11897
LinkedIn: / cryptocat
Reddit: / _cryptocat23
KZfaq: / cryptocat23
Twitch: / cryptocat23
↢INTIGRITI 1337UPLIVE CTF↣
ctftime.org/event/2134
ctf.intigriti.io
go.intigriti.com/discord
↢Resources↣
github.com/Crypto-Cat/CTF#readme
↢Chapters↣
0:00 Start
0:15 Explore website
0:31 Analyse image (strings / exif)
1:19 Search for username #1 on sherlock
2:14 Investigate social media (fl0pfl0p5)
4:31 Find another username on reddit
5:04 Search for username #2 on sherlock
5:26 Find image #2 on Twitter (m4r64r1n3)
5:46 Reverse image search (Google / Tineye)
6:54 Find & research username #3
7:13 Find a copy of image #2 on blogspot (v1ck1v4l3)
7:45 Check the waybackmachine for archived copy
8:29 End