Post

OhSINT

OSINT, or Open Source Intelligence, is like being a detective on the internet. It involves gathering information from publicly available sources like social media, websites, news articles, and online databases to learn about people, organizations, or events.

OhSINT

OhSINT


Hola 👋 here is my ohSINT walkthrough on tryhackme which is real fun.

What is OSINT 🤔?

OSINT, or Open Source Intelligence, is like being a detective on the internet. It involves gathering information from publicly available sources like social media, websites, news articles, and online databases to learn about people, organizations, or events.

So, lets begin. I started by downloading the given task, which was a window XP wallpaper 😆. WindowsXP

Q1: What is this user’s avatar of?

  • So i started by checking what type of file it is.

first

  • It did’nt give me much detailed, so i use Exiftool which is a command-line tool used for reading, writing, and editing metadata in various file types, including images, videos, audio files, and documents. So i obtained a lot of details about the pictures, and we can see a copyright which is owoodflint.”

second2

  • “So I searched(recon) the name on Google, and I found a GitHub account and Twitter account..

owood

  • So I looked into the Twitter account and saw the answer to the first question: What is this user’s avatar of

profle (2)

  • Answer= Cat

Q2: What city is this person in?

  • “So I took a look at the GitHub account and found the location.”

owood github location

  • Answer: London

Q3: What is the SSID of the WAP he connected to?

  • So I looked up its Twitter account and found the BSSID.
  • Next, I used a website tool called WiGLE, which collects information about different wireless hotspots around the world.
  • Then I used it to get the SSID name when I knew the BSSID. by zooming in alot 😟

locat Answer: UnileverWiFi

Q4: What is his personal email address?

  • Take a look at the Github account and found the email. 🕺

owood github mail

Q5: What site did you find his email address on?

Answer: Github

Q6: Where has he gone on holiday?

  • yeah 😆, “So I found its website on GitHub and took a look at it. Then I saw.. He went to new york to enjoy 😂

owood web Answer: New york

Q7: What is the person’s password?

  • So I carefully viewed the page source of the website and found the victim’s password. page syy Answer: pennYDr0pper.!

Yeah, that’s it. Thanks for reading! If you have any feedback, please feel free to message me on Twitter T3chnocr4t.

Go back home

This post is licensed under CC BY 4.0 by the author.