🔎
CyberSleuth Chronicles
ArchiveAbout UsResources
  • Welcome
  • 👋About Us
  • 📖Archive
  • 🔍The Unicorn, the OG, and the Academy
  • 🔓Open-Source Certified (OSC): Shaping the Future of OSINT Through Certification
  • 🔎Practical Junior OSINT Researcher (PJOR) : A Practical Review for a Practical Cert
  • 🕰️OSINT Week 2024
  • 🕰️OSINT Week CTF (May 2024)
  • 🕰️OSINT Week Answer Key
  • 🐻Analyzing APT 29 (NOBELIUM aka Cozy-Bear) – Part 1
  • 🐻Analyzing APT 29 (NOBELIUM aka Cozy-Bear) – Part 2
  • 👷Securing the Inbox
  • 🐦Serving up AD Decoy accounts to Responder
  • 📚Building a Detection Engineering Home-lab
  • 👷‍♂️Social Engineering TTPs Episode 2: Malicious Job Advertisements
  • 👷‍♂️Social Engineering TTPs Episode 1: Smishing with 2FA Spoofing
  • 📞Informational Interviews
  • 💾Resources
    • ☕Useful Resource for Everyone!
    • 👾Malware and Reverse Engineering Resources
Powered by GitBook

OSINT Week CTF (May 2024)

Last updated 1 year ago

Click here for the

Part 1: The Windy City OSINT Challenge

This challenge is in association with The CyberSleuth Chronicles. Please read the following directions on how to participate.

Instructions for the Challenge:

There are three separate challenges all themed with The Windy City - Chicago. The images are provided in the questions below.

Submitting answers:

Use the images to complete the challenges. An answer key is provided at the link above. Please be sure to read the notes on the submission form to ensure your answers are captured accurately. We are not collecting your email addresses.

Use your OSINT skills to piece together the puzzles, some are easy while others are not so straight forward. Each image corresponds only to the challenge associated with its number. You do not need to download or install anything. You can complete every challenge with only a browser.

How to use provided images:

Each of the three challenges uses one image and they are titled, respectively.

Challenge #1 == building1

Challenge #2 == building2

Challenge #3 == building3

The buildings do not relate to the other challenges.

For example, you will not use building2 to answer any questions for Challenge #1 or #3. However there are clues at the end of Challenge #1 and #2. You should leverage these clues to help answer the next challenge.

How clues work:

Challenge #1 ends in a clue for Challenge #2 and Challenge #2 ends in a clue for Challenge #3. Challenge #3 has no clue for any other challenge.

Use the clue to help answer the next challenge in sequence, 1>2>3. The clue will not help you answer the current question. For example, the clue at the end of the Challenge #1 will not help answer Challenge #1 nor #3 but will help answer Challenge #2.

Hopefully, I’ve explained how to successfully participate in this guide.

If you have any questions, please reach out via The CyberSleuth Chronicles Discord server. -@HackinKraken

Steven Amador

Good luck and have fun! ---------------------------------------------------------------------------------------------------------------------

Challenge #1:

Image:

Difficulty: Hard Flag Format: Only answers in the following format will be marked correct $0.00

My new job starts soon, and I am scoping out the area. So many food options in downtown....I sort of need to get into shape though. Decisions decisions .... Let's keep it 'Simple' - about eight veggie shacks (no tax) or a short-term trial to get The Gain….

Question: What is the price difference between the short term trial and the eight veggie shacks? Clue for challenge #2: Don't worry about tax, no one ever got popped for that....

Challenge #2 - Question 1/2:

Image:

Difficulty: Easy Flag Format: FirstName LastName

When do roaches die? Just a cool $100 million and a wink on federal steps 4 years later. Clue for challenge #3: Money is money, five bucks for two hours?! Sheesh!

Question: What famous person are we talking about here?

Challenge #2 - Question 2/2:

Image:

Challenge #3 - Question 1/2:

Image:

Difficulty: Easy Flag Format: 123456789 No spaces. Please note there may be more or less than 9 digits. McDonald's ain't the only Mc in town!

Question: What is the full zone number ending in 8? Use the clue from question 2 to answer this question.

Challenge #3 - Question 2/2:

Image:


OSINT Omega: Day 1

Challenge #1

Title: Welcome to Solar Island

Difficulty: Easy Flag Format: slash32{place_of_business}

If I wanted to enjoy the sun and sand, eat a Big Mac in TOTAL darkness, and then go right next door for a cappuccino after everyone lightens the heck back up, where would I go? Mmmm... cappuccino....

Challenge #2

Title: Forget Me Not

Difficulty: Medium Flag format: slash32{full_answer}

A solitary star shines upon the place where only 31337 men died. 68,700 days couldn't wipe away their final words. What were they?

Challenge #3

Title: No Gare

Difficulty: Hard Flag format: slash32{name_of_place}


OSINT Omega: Day 2

Challenge #4

Title: The Magic of Moving Out

Difficulty: Easy Flag format: slash32{123_street_address}

Radcliffe's childhood "room" really sucks. I'm moving into the house next door.

Challenge #5

Title: Hit After Hit After Hit

Difficulty: Medium Flag format: slash32{MM-DD-YYYY}

First a hot billboard, then a deadly plane crash, and now a tornado? Could today get any worse?

Challenge #6

Title: Don't Be A CAD In The Rose Capital

Difficulty: Hard Flag format: slash32{$*} (Precise dollar amount, no comma)

My property taxes are the opposite of Affordable! They'll put me in an early grave! A long nap sounds Pleasant though. Speaking of Affordable, what is one of my 19.599 acres worth again?


OSINT Omega Day 3

Challenge #7

Title: GOATS, Lions, and Bulls (OH MY!)

Difficulty: Easy Flag format: slash32{number}

Every morning I leave my dorm and run 3.4 miles towards the sun to go see the lions. It's a straight shot past Building 1 from "Windy City OSINT Challenge" to see them. If I wanted to walk north instead to see a different statue, how many seconds would it take to get there?

Challenge #8

Title: I'm Completely Surrounded!

Difficulty: Medium Flag format: slash32{capitalcity_country}

My friend loves running to see statues but I'd rather see the real thing. If it's 10:22 CST where he is and 18:22 CST where I am, where am I?

Challenge #9

Title: Rock & Rick On Tap

Difficulty: Hard Flag format: slash32{video_name}

My childhood idol hit a thousand thousand thousand views a few years after opening a bar with me. I took inspiration from the extra at 0:52. What was the only other video he was in?


OSINT Omega Day 4 (Final Day)

Challenge #10

Title: Git Out, Torvalds!

Difficulty: Easy Flag format: slash32{MM-DD-YYYY}

Everyone loves my older brother, the big bad Windows breaker. But I'm the lesser known little brother. Do you even know what day I was born?

Challenge #11

Title: Am I DOIng This Right?

Difficulty: Medium Flag format: slash32{link}

Citing research papers is hard! My professor Riccardo Ghioni wrote a paper about open source intelligence, but I can't find it anywhere. Can you send me the unique link?

Challenge #12

Title: Linked In Park

Difficulty: Hard Flag format: slash32{place}

Where [volcanic glass] learned to speak, the President sleeps between the green and the Grant. What's the name of his house?

Challenge #13

Title: cryptOSINTalker

Difficulty: Very Hard Flag format: slash32{city_state}

Gloe-ih Lin Dzeh Gah Dzeh Gloe-ih Wol-la-chee Dibeh Klizzie-yazzi Tkin Nesh-chee Dibeh Dzeh Dibeh-yazzi Shush Ne-as-jah Gah Nesh-chee

Difficulty: Medium Flag Format: https://www.WEBSITE.COM/URL/URL Question: Post the link to the encyclopedia article.

Difficulty: Easy Flag Format: https://www.WEBSITE.COM/URL Question: Enter the URL used to view the rate. All answers to The Windy City Challenge can be found Don't forget to include your contact information!

The OSINT Omega Challenge was written by (aka Obsidian on discord)

Far from the mountains in the land of winged beasts, an ancient capital city lay in ruins Answers can be found Please include the same contact information you provided on "The Windy City OSINT Challenge" So we can add your points.

Reminder that all flags for day 2 can be found

Reminder that all flags for day 3 can be found

Reminder that all flags for day 4 can be found

🕰️
https://www.linkedin.com/in/steven-amador/
here
Samuel Stewart
here
here
here
here
Answer Key