All-Hail-Google

OSINT Challenge for RTLxHACTF (Written by me in cooperation with Moriarty from Thehackerscrew)

Imo it deserves more than 75pts, only 8 solves until the end of CTF

Start with a geoguesser image

Description: A 'wonder' place

With Google lens or something like that we find out that the place is Wonders Park, Da Nang, Viet Nam (The city which im living at xD)

https://www.google.com/maps/place/C%C3%B4ng+vi%C3%AAn+K%E1%BB%B3+Quan/@16.0988215,108.2222085,17z/data=!4m12!1m6!3m5!1s0x3142198d74e5a281:0x24e8ff134e9f0079!2zQ8O0bmcgdmnDqm4gS-G7syBRdWFu!8m2!3d16.0988164!4d108.2243972!3m4!1s0x3142198d74e5a281:0x24e8ff134e9f0079!8m2!3d16.0988164!4d108.2243972?hl=vi-VN

Look at the review section, we see this comment with 'newest' filter that looks really suspicious ( I used one of my account to review because google prevent newly created account from spamming review)

Follow the paste bin link we got this drive link

Follow it we get this image

After downloading it and use 'exiftool' we got the email of Alexander

Now we got the email, if we mail it, there is an auto reply mail which lead us to Rick Astley song :)

So now look at the review: Such a great place, can't wait to visit this park with my wife next year.

That looks like an event in calendar

But if we use Ghunt, we can't see the event (the calendar of alexixthomas is actually public, but somehow i fooled Ghunt =)))

So if players use Ghunt, they might follow the wrong path.

Now we go to Google Calendar and add the gmail to search list

Then scroll the calendar to next year, we see the event

Here we got the email of his wife, the username lead to another Twitter account which is just an easter egg

Then we mail her, we got auto reply

I hide flag in the email with white text, so they must view the raw mail or hightlight the mail to see it

This is the first chall i wrote, so I definitely messed up many things. If you have something for improving it, you can dm me psycholog1st#2222. Thanks for playing and reading =))

Btw, give me a star if you find this writeup helpful xD

Cre: psycholog1st