- Published on
Emergency - OSINT - Cyber Siege 23
- Authors
- Name
- Hamza Haroon
- @thegr1ffyn
Emergency - OSINT - Cyber Siege 23
Hint: In case of fire, exit the building rather than tweet about it.
This challenge was given in the Medium category of Cyber Siege CTF.
The user is provided with an image:
Here we are given an email:
test.thegr1ffyn@gmail.com
To get ahead with the question, we use epieos.com
We see that we can use this tool to perform OSINT on any email address. We search for our given email.
We got this as a result:
We are given a hint which tells us about how time management is very important to our user. Did you get it?????
We see that we are given a Google Calender link that we can look into to find something juicy.
https://calendar.google.com/calendar/u/0/embed?src=test.thegr1ffyn@gmail.com
Ahhhh, here it is:
So we have a hint:
You are going in the right direction, continue perpendicular to the ground at SUM32768
to find the emergency.
Notice how we are given a string, we search it out on Google.
Seems like the given string relates to some kind of flying as given in our hint as well. The first result is a tweet about an aircraft. Lets check:
So this seems like the flight number of an aircraft that is being reported by a Twitter Investigator. We scroll down a bit to find another hint.
Seems like we are almost there, all we need to do now is to find the time of landing and the total time of the flight on 7 February 2022.
Flightradar24.com is a good tool to find information:
We enter the flight details:
We check this to find the exact flying details on the specific date.
So here we have our flag:
AOF{10:57PM_3:22}
Easter Egg:
Sometimes smart work is more efficient than hard work. If you went through the calendar, you will notice that one more memo is given on September 24, 2022.
Lets open it up:
If we click on copy to my calender, it redirects to another page where we can see all the details of the memo. Notice how there is a file given in the attachments:
Lets open up the file:
The whole question endpoint is given here. Its always better to look for more ways to find a clue.
Hope it was fun to solve although no one was able to solve this :D