Osint - Vacation - Writeup

Description

People even try to turn their pets into celebrities, it gets annoying quite fast. That reminds me, have you come across @tig3r_and_b3ar ? Apparently their owner is a photographer, I haven’t contacted her though.

Writeup

Since the owner is a photographer we should look at instagram.

By using an instagram viewer we can look at her profile without actually logging in.

https://dumpor.com/v/tig3r_and_b3ar

The one thing that sticks out here is that this account is following exactly one other account.

https://dumpor.com/v/tig3r_and_b3ar/following

So lets take a look at the profile of Ashlyn Bardot.

https://dumpor.com/v/ashlynbardot)

In her profile description we can see

Photographer

Contact me at ashlyn_bardot@yahoo.com

Wait … that is peculiar … an exposed email on that profile??

So I decided to send her an email:

1
2
3
4
5

From: [myEmail]
To: ashlyn_bardot@yahoo.com
Subject: flag

Hi, can you provide me the flag for E-CTF Vacation?

I quickly received a response from here:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

From: ashlyn_bardot@yahoo.com
To: [myEmail]
Subject: Auto Response: flag

Hello!

I'm currently on vacation, so I can't really help at the moment.

I wonder if this is what you were looking for when you contacted me: 
CTF{f0und_th3_fl@g}


Yours truly,
Ashlyn Bardot.

So the flag is

1

CTF{f0und_th3_fl@g}