OhSINT — TryHackMe Walkthrough

By on

 

OhSINT — TryHackMe Walkthrough






First of, we need to download the picture given in the above option.


After that download exiftool, in my case I've downloaded the Windows executable version


Exiftool: is a free and open-source program for reading, writing, and manipulating images, audio, video, and PDF metadata.


To run the tool, simply drag and drop the image file you wish to examine in Windows. Note I'm using the portable exiftool version.




The tool spits out a bunch of information about the image we downloaded like filetype, filename, GPS Position, copyright, etc.


Here, we get to know about the copyright which is in the name of OWoodflint. Let’s now search it on google and see whether we can find anything.




google search result of OWoodflint accounts: Twitter, blog, GitHub profile



Here, we go through each site and check whether we can find something useful.



Twitter:



1. What is this users avatar of?

cat


2. What city is this person in?

London


From the Twitter page, we find the BSSID on the Twitter profile, to find the location we need to use wigle.net


Just create an account in wigle.net and go to the view option then advanced search as shown below.




Paste in the BSSID into BSSID/MAC and then click on the query to see the result.

at the bottom, you can see the result such as map, net ID, SSID, etc. click on the map option to the result!


You can also find the location in GitHub profile too.




3. What’s the SSID of the WAP he connected to?

UnileverWiFi


4. What is his personal email address?

OWoodflint@gmail.com


5. What site did you find his email address on?

Github


6. Where has he gone on holiday?

New York


From blog site, he reveals his location. let's inspect the site.





7. What is this person’s password?

pennYDr0pper.!



ROOM COMPLETED!



Comments

Post a Comment

Popular posts from this blog

GOAD Active Directory LAB Setup on a Windows host

By on
Image
 In this write-up, I am going to explain how I set up the GOAD Active directory lab from my Windows host using VMware, along with a number of errors and steps and procedure I went through how I fixed them. GOAD (Game of Active Directory) lab is created by Orange Cyberdefense to provide pentesters a ready-to-use, vulnerable AD environment in which to practise common attack methods. As described in the Github page, “the lab is intended to be installed from a Linux host”, but it is still possible to successfully install the lab from a Windows host. I did not want to install the lab inside a virtual Ubuntu machine, as nested virtualisation would slow down performance too much. On high level, my setup will look like: Windows host: with Vagrant installed to run the VMs on VMware. VMware Pro: with Ubuntu 22.04 VM installed to run ansible playbooks to make the AD vulnerable. In this environment, there are two different available labs: GOAD : 5 vms, 2 forests, 3 domains (full goad lab) GOAD...
Read more

My Short Analysis - Redline Infostealer

By on
Image
  In this write up, Let's tear up a specific sample of Infostealer malware and deep dive into some of its functions. This is just short analysis of Redline Infostealer malware and it is intended for educational and entertainment purposes only. The reason for picking up this sample is because of its significant and rampant in the cybercrime ecosystem. One of the most common and prolific malware stealers out there in the wild. Distributed in the cybercrime marketplace and the dark web. So, without further ado let's take a look on this malware and unravel some of its functions. Executive Summary: RedLine Stealer is a malicious program that harvest users’ confidential data from browsers, systems, installed software, credit card information and domain information of enterprise environment. It also infects operating systems with other malware. Distributed in underground forums for sale as standalone ($100/$150 depending on the version) or on a subscription basis ($100/month). This ma...
Read more

Regular expressions - Notes

By on
Image
  Regular expressions - Notes Introduction What are regular expressions? Regular expressions (or Regex) are patterns of text that you define to search documents and match exactly what you're looking for. Why should I learn how to use them? Even if you won't need them sooner or later, it's a great tool to know how to use. It will make you more capable in CTF's, and potentially a better developer if that's a goal you have. You spend a little time learning it and save yourself lots of time in the long run by using it. I know all that, but I'm lazy. This is a lazy person's tutorial. There's a little reading, and then you  learn by doing . Where's the 'Deploy' button? There's no machine to deploy.  There are two ways to test your expressions. Either: create a text file with some test paragraphs (in a Unix machine) and then use  egrep <pattern> <file>  to see what matches and what doesn't, or use an online editor like  https://r...
Read more