# THM - ohSINT ![](https://hackmd.io/_uploads/By_oGjjY2.jpg) 1. What is this user's avatar of? > Answer format: *** https://exif.tools/ ![](https://hackmd.io/_uploads/BJp5zssK3.png) ~~~ Copyright: OWoodflint ~~~ ![](https://hackmd.io/_uploads/r1ZJXsjt2.png) <https://twitter.com/owoodflint> **Flag \#1:** `cat` 2. What city is this person in? > Answer format: ****** ![](https://hackmd.io/_uploads/Hk03wjjYh.png) ~~~ From my house I can get free wifi ;D Bssid: B4:5D:50:AA:86:41 - Go nuts! ~~~ ~~~shell $ python3 geowifi.py -s bssid B4:5D:50:AA:86:41 ██████╗ ███████╗ ██████╗ ██╗ ██╗ ███████╗ ██╔════╝ ██╔════╝██╔═══██╗ ██║ ██║ ██╗ ██╔════╝ ██╗ ██║ ███╗█████╗ ██║ ██║ ██║ █╗ ██║ ██║ █████╗ ██║ ██║ ██║██╔══╝ ██║ ██║ ██║███╗██║ ██║ ██╔══╝ ██║ ╚██████╔╝███████╗╚██████╔╝ ╚███╔███╔╝ ██║ ██║ ██║ ╚═════╝ ╚══════╝ ╚═════╝ ╚══╝╚══╝ ╚═╝ ╚═╝ ╚═╝ 🌍by GOΠZO Search Results ┏━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━┳━━━━━━┳━━━━━━━━━━━━━┳━━━━━━━━━━━━━┓ ┃ Module ┃ BSSID ┃ SSID ┃ Latitude ┃ Longitude ┃ ┡━━━━━━━━━━╇━━━━━━━━━━━━━━━━━━━╇━━━━━━╇━━━━━━━━━━━━━╇━━━━━━━━━━━━━┩ │ google │ ❌ │ ❌ │ ❌ │ ❌ │ │ wigle │ ❌ │ ❌ │ ❌ │ ❌ │ │ apple │ B4:5D:50:AA:86:41 │ ❌ │ 51.50839614 │ -0.13204006 │ │ combain │ ❌ │ ❌ │ ❌ │ ❌ │ │ mylnikov │ ❌ │ ❌ │ ❌ │ ❌ │ │ wifidb │ ❌ │ ❌ │ ❌ │ ❌ │ └──────────┴───────────────────┴──────┴─────────────┴─────────────┘ [🔴] Error in google module: api key not valid. please pass a valid api key. [🔴] Error in wigle module: expecting value: line 1 column 1 (char 0) [🔴] Error in combain module: key missing or invalid [🔴] Error in mylnikov module: object was not found [🔴] Error in wifidb module: request failed [🟢] Vendor_check module result: : Aruba, a Hewlett Packard Enterprise Company ~~~ ~~~ 51.50839614, -0.13204006 ~~~ <https://www.google.com/maps/place/51%C2%B030'30.2%22N+0%C2%B007'55.3%22W/@51.5083961,-0.1342288,17z/data=!3m1!4b1!4m4!3m3!8m2!3d51.5083961!4d-0.1320401?entry=ttu> ![](https://hackmd.io/_uploads/H1PJYost3.png) <https://wigle.net/mapsearch?maplat=51.50830958528049&maplon=-0.13215182110323465&mapzoom=12#B4:5D:50:AA:86:41> ![](https://hackmd.io/_uploads/Hydmcijth.png) **Flag \#2:** `London` 3. What is the SSID of the WAP he connected to? > Answer format: ************ ![](https://hackmd.io/_uploads/ByXOqijKh.png) **Flag \#3:** `UnileverWIFI` 4. What is his personal email address? > Answer format: ****************.*** ![](https://hackmd.io/_uploads/By9-2jjKn.png) <https://github.com/OWoodfl1nt/people_finder> ![](https://hackmd.io/_uploads/BysnosoKn.png) **Flag \#4:** `OWoodflint@gmail.com` 5. What site did you find his email address on? > Answer format: ****** **Flag \#5:** `github` 6. Where has he gone on holiday? > Answer format: *** **** <https://oliverwoodflint.wordpress.com/> ![](https://hackmd.io/_uploads/SyfU2sjKh.png) **Flag \#6:** `New York` 7. What is the person's password? > Answer format: ************.* ~~~shell curl -s https://oliverwoodflint.wordpress.com/ | grep -oE '.{0,5}[a-zA-Z0-9]{12}\...{0,5}' googlesyndication.com' / googletagservices.com' / ne.rubiconproject.com' / er.rubiconproject.com' / //oliverwoodflint.wordpr //oliverwoodflint.wordpr \/oliverwoodflint.wordpr \/oliverwoodflint.wordpr //oliverwoodflint.wordpr //oliverwoodflint.wordpr //oliverwoodflint.wordpr //oliverwoodflint.wordpr //oliverwoodflint.wordpr //oliverwoodflint.wordpr //oliverwoodflint.wordpr //oliverwoodflint.wordpr lor">pennYDr0pper.!</p> //oliverwoodflint.wordpr //oliverwoodflint.wordpr //oliverwoodflint.wordpr //oliverwoodflint.wordpr //oliverwoodflint.wordpr //oliverwoodflint.wordpr 2Foliverwoodflint.wordpr //oliverwoodflint.wordpr //oliverwoodflint.wordpr 2Foliverwoodflint.wordpr 2Foliverwoodflint.wordpr ~~~ **Flag \#6:** `pennYDr0pper.!`