OhSINT

OhSINT

Room Link: https://tryhackme.com/room/ohsint

🧠 Knowledge Inbox (Unfamiliar Things)

Quickly list things you don't know here. Define them LATER.

📝 Lab Journal

Chronological log of actions, commands, and findings.

Task 1: OhSint

What information can you possibly get with just one image file?

Note: This challenge was updated on 2024-02-01. If you are following any older walkthroughs, expect a small change. Additionally, the file is also available on the AttackBox, under the /Rooms/OhSINT directory.

🚩 Flags

Task Question Flag How I found it
1 What is this user's avatar of? cat Found the twitter username @OWoodflint by finding the copyright inside exiftool of the image from the challenge
1 What city is this person in? London Found the city in his github repo in https://github.com/OWoodfl1nt/people_finder
1 What is the SSID of the WAP he connected to? UnileverWiFi Found the ssid inside wigle using his twitter post 'From my house I can get free wifi ;D Bssid: B4:5D:50:AA:86:41 - Go nuts!' specifically the BSSID
1 What is his personal email address? OWoodflint@gmail.com Found the email in his github repo in https://github.com/OWoodfl1nt/people_finder
1 What site did you find his email address on? Github Found the account in google by searching OWoodflint
1 Where has he gone on holiday? New York Found where he had gone holiday off to in his wordpress from his repo https://github.com/OWoodfl1nt/people_finder, and in home page there's a text said New york
1 What is the person's password? pennYDr0pper.! Found the person's password in the wordpress source page in the home page

🎓 Key Takeaways