CTF TOPIC · 6 FLAGS · 20 MIN
OSINT (fictional targets)
Reused handles, photo geolocation and web archives - on invented people only.
Open-Source Intelligence means finding facts from public information. Classic moves: track a reused username across sites, read location from photo metadata, and recover deleted pages from web archives. Exorvio only ever uses fictional people and companies that we invented, clearly labelled. In real life, OSINT on a real person without permission can cause harm and may be illegal.
A first example
Match an exact @handle ; photo GPS -> place ; live page vs archived snapshot.First moves
- Search the exact handle, then close variants
- Read photo metadata and look for landmarks
- Check web archives for deleted pages
- Check public code history for 'removed' secrets
- Cross-reference: two weak clues make a strong one
The challenges
- One handle everywhere · Medium · 30 XP
- Where was it taken? · Medium · 30 XP
- Deleted, but archived · Easy · 20 XP
- The commit history · Easy · 20 XP
- Connect the posts · Medium · 30 XP
- Name the landmark · Easy · 20 XP
Find the flags yourself.
Sign in to open the evidence, use the in-browser tools and submit flags. Your progress stays with your account.
Open this topic →