--- layout: post title: "DeconstruCT.F 2021 | OSINT | Dora the Explorer" date: 2021-10-03 13:37:00 +0700 tags: [ctf, writeup] --- <figure> <img src="https://cdn.discordapp.com/attachments/874145963407720513/894206917239513118/Group.png"> </figure> #### OSINT | Dora the Explorer (474 points | 18 solves) Challenge Description: ``` Hi, I am Dora the Explorer and I love exploring as you know ;) (after all 1+1=0), and I recently found this place which has an a very cool looking street art to it. Plus they posted about it on social media many a times. You all should see this too sometime!!! ``` We're given a file (`osint.jpg`): <figure> <img src="https://cdn.discordapp.com/attachments/847311120539844628/894609520142213160/osint.jpg"> </figure> **Solution:** View the given file and check the photo. If we look at the metadata there are locations that we can find. <figure><figure><figure> <img src="https://cdn.discordapp.com/attachments/847311120539844628/894609712404893716/unknown.png"> </figure> </figure> </figure><br> See on google maps and it is in India, more precisely in Champa Gali. <figure> <img src="https://cdn.discordapp.com/attachments/847311120539844628/894610069524738168/unknown.png"> </figure> <br> We can see the similarity of the photo location with in the challenge. <figure> <img src="https://cdn.discordapp.com/attachments/847311120539844628/894610356515794954/unknown.png"> </figure> If we pay attention, there is a clue in the photo Social Street,yeah it's a cafe in that area. We are close now. <figure> <img src="https://media.discordapp.net/attachments/847311120539844628/894610762859941898/unknown.png"> </figure> <br> Do a search and we find the social media [@socialstreetcafe](https://www.instagram.com/socialstreetcafe). <figure> <img src="https://cdn.discordapp.com/attachments/847311120539844628/894611271842947142/unknown.png"> </figure> This is an another clue in desc. <figure> <img src="https://cdn.discordapp.com/attachments/847311120539844628/894611506388406422/unknown.png"> </figure><br> We found [a post](https://www.instagram.com/p/CKGRq81l5bv/) similar to the one in the description. <img src="https://cdn.discordapp.com/attachments/847311120539844628/894612068311920650/unknown.png"> We dont know what mean this key, but if we bruteforce the text we’ll get the flag. <img src="https://cdn.discordapp.com/attachments/847311120539844628/894612383627096084/unknown.png"> FLAG : **dsc{1m4g3s_h1d3_4l0t_s0_b3_c4r3fu1}**
Last changed by  
 
Sekte Gadeng
255

Read more

DeconstruCT.F 2021 | Forensic | Mike

Forensic | Mike (433 points | 11 solves) Challenge Description: Julia has come to you to ask for help. After spending too much time on his computer, Mike has gone insane, but no one knows why. Can you figure it out? Julia would really appreciate it. Here's how his desktop looked like. Weird how his system time doesn't change.. Wrap the flag that you find with dsc{<flag>}! We're given a file (desktop_wallpaper.png): Solution:

10/4/2021
DeconstruCT.F 2021 | OSINT | AHF

OSINT | AHF (429 points | 11 solves) Challenge Description: We've been listening and we've heard this group can write decent code (ahem ahem), but what have they been listening to? We're given a file (team.pdf), which contains: Solution: The file provided is nothing strange, so we do a search for they team name (Team AtomHeartFather)

10/4/2021
DeconstruCT.F 2021 | OSINT | Flags...and Flags

OSINT | Flags...and Flags (250 points | 5 solves) Challenge Description: The Co-Founder Of Spike music loves flags, and he loves to hide them in plain sight. Find it! Solution: Do a search and find the account in instagram. We get two account,that is Neil Kavalakkat account and Rithik Jain account, who became the co-founder of spike. But there is nothing interesting in Neil Kavalakkat account, so after we realized in Rithik Jain's latest photo there is a qr code in his hand. Just decode the qr code and get the flag

10/4/2021
DeconstruCT.F 2021 | REV | Scraps

REV | Scraps (150 points | 100 solves) Challenge Description: One of our coders have locked down an application that is scheduled to be released tommorow. Can you unlock the application as soon as possible. Solution: Given an ELF 64 Binary files which can be reversed through static analysis from IDA Decompiler. endbr64

10/4/2021
Read more from Sekte Gadeng
Published on HackMD