Hi,
Firstly, I would like to share with you the solution of the problem in the OSINT category by leaving the second week of the Battleware CTF Competition, which is a short-term but fun and at the same time a challenging.
Category: OSINT
We are reviewing “.png” file given to us.
“notjustaflower”
If you want to download and review the image file : https://mega.nz/file/tuJ3jS5T#RFm3rvGs7RXLoIjsLMP4Nx_wYFqPN_dZpY5SUDennNI
First of all, we examine the metadata of the image file with the “Exiftool” to examine by looking at the metadata of the image file.
As can be seen in the Copyright section, we find a username that attracts our attention.
Nickname: @1mfl0w3r
We are starting to investigate the possibility of having some social media accounts used with this username.
For example:
“https://www.instagram.com/@1mfl0w3r“
We see an account on Twitter created with the same nickname and image.
When we examine the user’s tweets, we can see that there may be a few tips tweeted for us.
If we pay attention to the last tweet, we see that sent us an ASCII encoded tweet. In the second tweet, “did hacker created a repository?” By giving us some information that the hacker created a repository, it immediately brings to mind the possibility that he created a repository on GitHub. However, we continue by deciphering the text encoded in ASCII because it does not give much information.
Tweet : 115 101 099 114 101 116 105 110 104 101 114 101
We get help from http://www.unit-conversion.info/texttools/ascii/ to decipher the encrypted text.
Deciphered text: secretinhere
The deciphered text reminds us again of the hint given in the second tweet.
The deciphered text may be suitable for a username and the hint gave us in the tweet that there is such a user on GitHub.And just as we thought, the address “https://github.com/secretinhere/” takes us to the user, the hacker mentioned in the tweet.
When we examine the repository created by the user, we see that there is a repository named “secret”.
We can read the content of the flag by going to the directory where the flag is located.
To access the content of the Flag: https://github.com/secretinhere/secret/blob/main/flag
It tells us how to find the flag and how the flag format is.
The question we have to solve for Flag : Who was the first person that Mustafa Kemal Ataturk sent abroad for education and received the first PhD in the field of world science?
We learned who Aydın Sayılı was 😊
Flag : Flag{AydinSayili}
Thank you for your time 😊
