Where Am I?
Your friend thought using a JPG was a great way to remember how to login to their private server. Can you find the flag?
Check out the file for hidden metadata using exiftool:
Decoding the base64 string under Image Description reveals the flag:
flag{b11a3f0ef4bc170ba9409c077355bba2)
Operation Not Found
This is the chall1 challenge for the “HuntressCTF2023” challenges on https://osint.golf. It’s a lot like Geoguesser if you have ever played :)
On initial review I tried looking for text to lookup online. There was a construction company clearly visible, but I had no luck on guessing with this as they have a wide footprint within the US. Decided to take a screenshot of the building and try multiple image lookup tools:
Useful sites:
Get a hit for Crosland Tower at Georgia Tech ATL from the Google Lookup. Find its location in Google Maps, then submit the same location in the challenge page for the flag:
flag{c46b7183c9810ec4ddb31b2fdc6a914c}
Under The Bridge
This is the chall2 challenge for the “HuntressCTF2023” challenges on https://osint.golf. It’s a lot like Geoguesser if you have ever played :)
Being from the UK, I was immediately able to at least narrow down the country based on signage as in this image example:
Tried looking up storage unit name that can be seen in the background: shurgard. Discover they have quite a few sites around London but need to narrow it down further. I spotted a very old sign, and a new version on what I assumed was a rail bridge so searched for “HC13 railbridge” and discover an image from this site with an interesting name “Rick Roll Bridge”… Taking the name and searching for it reveals this is where Rick Astley filmed THAT song. Enter the location in the challenge page for the flag:
flag{fdc8cd4cff2c19e0d1022e78481ddf36}