diff --git a/TryHackMe/OhSINT.md b/TryHackMe/OhSINT.md new file mode 100644 index 0000000..718aef8 --- /dev/null +++ b/TryHackMe/OhSINT.md @@ -0,0 +1,104 @@ +# TryHackMe-OhSINT + +> Abdullah Rizwan | 11 th September , 07 : 44 PM + + +This is a OSINT box where we have to analyze information only through image provided to us. + + +This is the image from which we have to extract data from. + + +I ran `exiftool` to see information of the image and found a name `OWoodflint` + + + +1. What is this users avatar of? + + + +``` +Cat +``` + +2. What city is this person in? + +By googling the name `OWoodflint` I was able to find his twitter account and there he shared his Wifi BSSID (Basic Service Set Identifer / MAC). + + + +Also we can find two a base 64 encoded text + + + +By using https://gchq.github.io/CyberChef/ + + + + +Then by googling the MAC it self I found `wigle.net` which is ISP in London. + + +Alternatively you can find his github account + + + +``` +London +``` + +3. Whats the SSID of the WAP he is connected to? + +From the result of `exiftool` we know the coordinates `54 deg 17' 41.27" N, 2 deg 15' 1.33" W` + +By converting them + + + +Register an account on `wigle.net` and find search in `London` with bssid `B4:5D:50:AA:86:41`. + + + + + +``` +UnileverWiFi + +``` + +4. What is his personal email address? + + + +``` +OWoodflint@gmail.com +``` + +5. What site did you find his email address on? + +``` +Github +``` + + +6. Where has he gone on holiday? + +We can also find his WordPress Blog + + + +``` +New York +``` + +7. What is this persons password? + +By looking at WordPress source scrolling thorugh we can find his password. + + + + + +``` +pennYDr0pper.! +```