How to Approach an OSINT Challenge - "Photographs" [INTIGRITI 1337UP LIVE CTF 2023]

Video walkthrough for "Photographs", an opensource intelligence (OSINT) challenge from the ‪@intigriti‬ 1337UP LIVE CTF 2023. The challenge required players to examine exifdata and then trace back through alt accounts created by the target, exploring social media accounts uncovered using sherlock (and Google), reverse image searching etc. They would eventually find an interesting comment on a blog indicating location data was shared. This was a hint that players need to check the waybackmachine for an archived copy of the page, which contained the flag! Write-ups/tutorials aimed at beginners - Hope you enjoy 🙂 #INTIGRITI #CTF #OSINT
↢Social Media↣
Twitter: / _cryptocat
GitHub: github.com/Crypto-Cat/CTF
HackTheBox: app.hackthebox.eu/profile/11897
LinkedIn: / cryptocat
Reddit: / _cryptocat23
UA-cam: / cryptocat23
Twitch: / cryptocat23
↢INTIGRITI 1337UPLIVE CTF↣
ctftime.org/event/2134
ctf.intigriti.io
go.intigriti.com/discord
↢Resources↣
github.com/Crypto-Cat/CTF#readme
↢Chapters↣
0:00 Start
0:15 Explore website
0:31 Analyse image (strings / exif)
1:19 Search for username #1 on sherlock
2:14 Investigate social media (fl0pfl0p5)
4:31 Find another username on reddit
5:04 Search for username #2 on sherlock
5:26 Find image #2 on Twitter (m4r64r1n3)
5:46 Reverse image search (Google / Tineye)
6:54 Find & research username #3
7:13 Find a copy of image #2 on blogspot (v1ck1v4l3)
7:45 Check the waybackmachine for archived copy
8:29 End

[@sleexox]

first time watching an OSINT ctf walkthrough. Pretty sick. it would’ve taken me days

[@ge0x1]

I love your channel bro, I don't know why i haven't seen it earlier. Thank you for your work and time

[@_CryptoCat]

Cheers dude! Much appreciated 👊

[@nocturnal697]

Hey, I am pretty new to CTFs and have only been doing CTFs on websites like picoCTF (and a university CTF event) and was just wondering if you have any recommendations for where I can look to participate in more of the competition style CTF events. Thanks :)

[@_CryptoCat]

Yesss! ctftime.org is the best place to check for upcoming/ongoing events, you can also find (and post your own) writeups there 😊

[@asadse7en]

How would i know which CTFs you're participating in and will be making writeups so i can follow xD

[@_CryptoCat]

I don't really have a CTF schedule, just check ctftime.org when I have time. You can keep an eye on my youtube or github for writeups 😊

[@daltzinn]

I think the image didn't load on Google due to the canvas blocker in firefox

[@_CryptoCat]

Ahhh TY for the heads up 👊

[@diegocondori5673]

Xd I almost did it

[@_CryptoCat]

Next time then! 👊