Digital Forensics: Exploring OhSINT Techniques — A TryHackMe Room Walkthrough
OhSINT Tryhackme
Forensics-related CTFS are one of my favorites. I thought I could post this as a blog on my website. In this, I have used more images so it can be easily understood.
After downloading the task file from tryhackme we need a tool to forensics it so we can use the exiftool. Use the below command to install this Exiftool.
$ sudo apt install exiftool
This Exiftool helps you to view the Exif information of an image. Exif information is the metadata of an image. This includes date, time, size, device, resolution, …etc.
To view the image’s exif informations
$ exiftool image_name
A name is available in copyright. By doing this social engineering, we are likely to get some sensitive information
lets google that name
First, the answer to the first question was found on the twitter page.
what is this users avatar of ?
: cat
See the tweet made by this cat in which BSSID is given as free wifi and you can find its location using this
Use wigle.net website to find location using this bssid.
In wigle.net website you can get the location of cat by passing bssid as input and filtering
what city is person in?
: london
You can zoom in on this map and get the answer to the next question.
Next, I found the email address available when I went to the github link of cat
what site did you find his email address
: github
Next let’s go to cat’s wordpress where she mentions she is in new york. So he might have gone to New York for a holiday
final answer (password)
As an elementary education student studying penetration testing, I am currently reading some books. If you are a beginner in penetration testing, then these books will be very useful for you.
