Challenges: OhSINT (TryHackMe)

This article will cover the OhSINT write-up on THM.

What information can you possibly get with just one image file?

Note: This challenge was updated on 2024-02-01. If you are following any older walkthroughs, expect a small change. Additionally, the file is also available on the AttackBox, under the /Rooms/OhSINT directory.

Answer the questions below

1. What is this user's avatar of? cat

   using exiftool <filename> we get details about the image, most importantly the copyright owner, since this is an OSINT challenge, we have to do a web search of the copyright name and some of their profiles that comes up is X or Twitter on checking the profile, it has an avatar of a cat which is the answer.

   

   

2. What city is this person in? London

   Using OSINT search skills, the other profile that comes up is their GitHub profile, and on their readme, it shows that they’re based in London. Also, using the coordinates 54°17’41.27”N 2°15’1.33”N shown by exiftool, it shows a different town, which is not the accurate answer when searched on a site like Microsoft Bing Maps or Google Maps, but useful nonetheless, as it might be useful in another OSINT challenge

   

3. What is the SSID of the WAP he connected to? UnileverWiFi

   

Use Wigle.net to search the BSSID show above

4. What is his personal email address? OWoodflint@gmail.com

5. What site did you find his email address on? Github

6. Where has he gone on holiday? New York

   

7. What is the person's password? pennYDr0pper.!

   

   lll

Thank you for reading my article. Please leave any questions or comments on improving my learning journey and the THM challenges.