# UIUCTF 2024 WRITE UP Hi guys, this is my writeup for 5/6 OSINT challenges I have done so far in this CTF, enjoy ! # ***Hip With the Youth*** ![image](https://hackmd.io/_uploads/S1F9THC8C.png) First one is always simple, the descriptions mentions about Instagram, so let's have a check on it. At first, if you wrote the full name with spaces and capitalized the first letter, it wouldn't appear, try without space and lower 'em all. ![image](https://hackmd.io/_uploads/S1UY0B0IR.png) I've had a look at their posts and nothing special though, let's move to their threads, maybe we can find something there :> ![image](https://hackmd.io/_uploads/H1u1yUA8R.png) As I expected, we've got our very first flag :3 ***flag: uiuctf{7W1773r_K!113r_321879}*** # An Unlikely Partnership Let's get to the next part of this challenge ![image](https://hackmd.io/_uploads/H1kLJUAIA.png) Provided a linkedin account, I began my investigation there ![image](https://hackmd.io/_uploads/BkbjJ80UR.png) ![image](https://hackmd.io/_uploads/r1VglIC8C.png) At first glance, nothing special though, but when scrolling down, at the "Skills" section, something interesting appeared. ![image](https://hackmd.io/_uploads/B1XcxI0LC.png) By clicking into it, I've found the influencer ![image](https://hackmd.io/_uploads/HkNax8RLA.png) Going into his account, I got the second flag ![image](https://hackmd.io/_uploads/BJQeWL0IR.png) ***flag: uiuctf{0M160D_U1UCCH4N_15_MY_F4V0r173_129301}*** # The Weakest Link ![image](https://hackmd.io/_uploads/r1fobICIA.png) The last challenge requires us to do some searches about some kinds of collaboration on Spotify, let's do it ![image](https://hackmd.io/_uploads/HkReMU0U0.png) P/s: I got the hint from the author is to solve this challenge in desktop app, cuz it has the feature that web app doesn't support :D So let's open the spotify account in the desktop app ![image](https://hackmd.io/_uploads/B182MICUA.png) Hmm nothing. As a habit, I clicked on following him, and then I started to realize what was the feature the author mentioned above. I noticed the friend activity on the top right corner, which doesn't show on the web app, clicked on it, this thing appeared to me: ![image](https://hackmd.io/_uploads/H18TX8CIA.png) Moving to the playlist, I got the third flag: ![image](https://hackmd.io/_uploads/S1axVICIR.png) ***flag: uiuctf{7rU1Y_50N65_0F_7H3_5UMM3r_432013}*** # Night ![image](https://hackmd.io/_uploads/HkNEIdCIC.png) We're given a picture with a city night view, by using google lens, I knew that the tower which has the purple thing on top of it is the Prudential Tower in B oston. ![image](https://hackmd.io/_uploads/rJqWvd0LC.png) Navigating to it, this is my imaginary view of this picture: ![image](https://hackmd.io/_uploads/SkclqO0LR.png) So I started investigating from there, and I found this place: https://www.google.com/maps/@42.3479967,-71.0691271,3a,75y,253.13h,95.94t/data=!3m7!1e1!3m5!1sK3wQkx037cgBmBjOWjqO5g!2e0!6shttps:%2F%2Fstreetviewpixels-pa.googleapis.com%2Fv1%2Fthumbnail%3Fpanoid%3DK3wQkx037cgBmBjOWjqO5g%26cb_client%3Dmaps_sv.share%26w%3D900%26h%3D600%26yaw%3D253.1318501187716%26pitch%3D-5.942544498730271%26thumbfov%3D90!7i16384!8i8192?coh=205410&entry=ttu ![image](https://hackmd.io/_uploads/HyHbjuCLR.png) So our flag is: ***flag: uiuctf{Arlington Street, Boston}*** # Chunky Boi ![image](https://hackmd.io/_uploads/HyuBj_RI0.png) ![chal_3_1_optimized_1000](https://hackmd.io/_uploads/B1dNnuAL0.jpg) Using geospy.ai, we can know where this plane is: ![Screenshot_2024-06-30_133431_2_optimized_1000](https://hackmd.io/_uploads/r1s6ndAIA.png) Navigate to Boeing Field, I realized we're in the wrong airport, moved down a little bit to the south, I saw the same place where the plane was parking: ![Screenshot_2024-06-30_133803_optimized_1000](https://hackmd.io/_uploads/B11YaOAL0.png) From there, I can easily get the coordinates and submit the flag ***flag: uiuctf{Boeing C-17 Globemaster III, 47.462, -122.303}*** That's all, thanks you guys for reading :33