This was my first time getting first blood with my team, so I’m excited to write it up. OSINT challenges have a lot of collaboration opportunities, and our first blood was due to some good teamwork.<\/p>\n\n\n\n
Challenge Description: Can you help me find the full name of the person behind the alias “anonhunter26”? This link might be helpful: https:\/\/osintframework.com\/<\/a> Submit flag as osu{firstname_lastname}<\/p>\n\n\n\n Looks like we’ve got to track someone down given their username. Before doing anything, I checked for a twitter account<\/a>. The bio states that our target is a “Senior software developer at a small startup.” Looks like finding the company might be our secondary goal. Scrolling through the rest of the account, we see reference to a “coworker and good friend” whose handle is @hatebav2ropc<\/a>. Neither of these accounts follow or are followed by anyone, and their likes are relevant to infosec but not helpful in identification.<\/p>\n\n\n\n Looks like “hatebav2ropc” might give us a clue, though, so let’s gather some information. https:\/\/whatsmyname.app\/<\/a> shows that hatebav2ropc exists on GitHub<\/a>. There is only one repository, with two commits. Clicking on a commit and adding “.patch” to the URL gives patch information.<\/p>\n\n\n\n We’ve got an email! Looking at it with https:\/\/tools.epieos.com\/email.php<\/a> shows that the account belongs to someone named Gabriel Cortney. <\/p>\n\n\n\n Using Twitter search for “Gabriel Cortney” reveals a more professional Twitter account<\/a>, whose bio states that Cortney is a “Lead security analyst for @opticalsocial<\/a>.” The company’s Twitter account is followed only by Cortney and a man claiming to be the CEO. We’re looking for a senior software developer, so we might take our new information back to Github.<\/p>\n\n\n\n Searching for “opticalsocial” on Github gives us one user in the results: Oswald Denman<\/a>, a senior software developer.<\/p>\n\n\n\n Submitting the flag This was my first time getting first blood with my team, so I’m excited to write it up. OSINT challenges have a lot of collaboration opportunities, and our first blood was due to some good teamwork. Challenge Description: Can you help me find the full name of the person behind the alias “anonhunter26”? This link … Continue reading Writeup: Target Practice<\/span><\/a><\/p>\n","protected":false},"author":11809,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-47","post","type-post","status-publish","format-standard","hentry","category-writeups"],"_links":{"self":[{"href":"https:\/\/blogs.oregonstate.edu\/paul\/wp-json\/wp\/v2\/posts\/47","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.oregonstate.edu\/paul\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.oregonstate.edu\/paul\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.oregonstate.edu\/paul\/wp-json\/wp\/v2\/users\/11809"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.oregonstate.edu\/paul\/wp-json\/wp\/v2\/comments?post=47"}],"version-history":[{"count":3,"href":"https:\/\/blogs.oregonstate.edu\/paul\/wp-json\/wp\/v2\/posts\/47\/revisions"}],"predecessor-version":[{"id":50,"href":"https:\/\/blogs.oregonstate.edu\/paul\/wp-json\/wp\/v2\/posts\/47\/revisions\/50"}],"wp:attachment":[{"href":"https:\/\/blogs.oregonstate.edu\/paul\/wp-json\/wp\/v2\/media?parent=47"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.oregonstate.edu\/paul\/wp-json\/wp\/v2\/categories?post=47"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.oregonstate.edu\/paul\/wp-json\/wp\/v2\/tags?post=47"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}From b8e908c74c182c73d840192cd89d3f27b5177641 Mon Sep 17 00:00:00 2001\nFrom: Anonymous <anonymousfreak32@gmail.com<\/strong>>\nDate: Fri, 24 Sep 2021 23:57:15 -0700\nSubject: [PATCH] Fixed line formatting\n<\/code><\/pre>\n\n\n\nosu{Oswald_Denman} <\/code>is a success!<\/p>\n","protected":false},"excerpt":{"rendered":"