Posts NiteCTF 2021 - gachiHYPER [OSINT]
Post
Cancel

NiteCTF 2021 - gachiHYPER [OSINT]

This user called timehowls on reddit was really rude to me. Can you osint him and find some sensitive information about him?

The first thing they give us is a reddit username so we go to reddit and notice that they have a comment about a discord server.

The reddit comment tells us that he just joined, so we can deduce that he joined the discord server on the 29th. We check the welcome logs and indeed he is there but he has changed his name.

Looking at his User ID we can find out his new name

At this point we can see that the user clockcroissant has both twitch and twitter.His twitch is empty but his twitter has some interesting information. I found the following messages that give us quite a few clues:

I love watching twitch 12 hours a day and rest of the time I mod on discord

I LOVE YOUR STREAMSSSS

The challenge tells us that we have to find sensitive information, so maybe he wrote something useful in some stream.Wolfabelle has quite a few videos so we first look at the date Clockcroissant joined twitch and then download the chats of all the videos since that date.

At first it seems that there is nothing relevant, but if we think about it, he may have said something sensitive but it has been deleted. Finally, through the following URL we can get all the conversation that had been deleted.

https://logs.ivr.fi/?channel=wolfabelle&username=clockcroissant

So, we get the flag :)

snite{d0nt_s1mp_fOr_3g1rl5}

This post is licensed under CC BY 4.0 by the author.