Thoughts, writeups, and experiments in cybersecurity and coding
mis4nthr0pia Challenge Overview In rain’s second fake article, the author claims to have discovered unpublished information. This claim is suspected to be false. Your task is to debunk the claim by identifying the original source of the image used in the article. The challenge states that the image originates from an old book that has been … Read more
Challenge Overview As of 2026, the individual known as rain appears to have had an X (formerly Twitter) account. Investigators obtained a screenshot of a post, but the username was intentionally obscured by an overlay (appearing like a notepad or masking element). The task is to identify the X account shown in the screenshot and … Read more
Challenge Overview This challenge is part of an OSINT training series based on real-world leaked material. Participants are required to remain strictly passive, performing analysis and reasoning only. The task is to identify the date of birth of an individual whose name appears in a historical dataset linked to an FSB-related leak. Important constraints: Initial Assumptions Given the nature … Read more
Challenge Overview This challenge focuses on uncovering the origins of the OSINT tool “Holehe”, specifically tracing back the first public appearance and creation date of the creator’s email address. Behind every OSINT tool is a developer, and behind that developer is usually a publicly exposed email. The task is to identify: Only the date is … Read more
Challenge Overview A passenger posted a photo of their flight ticket online. The image was heavily pixelated, but some details were still partially visible. The task for this challenge is to recover the following information using lawful OSINT techniques only: The ticket appears to be from American Airlines, and visible elements include a blurred name, … Read more
Challenge Overview A photograph was taken in Paris on December 3rd, 2023, around 18:00. The image shows a masked individual standing in what appears to be a central and upscale district of Paris. The objective of this challenge is to identify the nearest Paris metro station to the location where the photograph was taken, using … Read more
Attachment 📜 Prologue – A Very Trusting Program Every good pwn challenge starts the same way: That’s it. No bounds check.No validation.No fear. Just blind trust. 😈 The Vulnerability – Negative Indexing The array values has a fixed size: But the program never checks whether idx is inside [0..SIZE-1]. That means we can do this: And write before the array. In other … Read more
So, here I am, happily cruising through this CTF, when I open the next challenge: FONT LEAGUES. At first glance I thought, “Cool, maybe some font trivia? A logo? Something artsy?”…Nope. It was a straight-up font file. A .ttf. And suddenly I realized: Oh no. They want me to reverse engineer a font. Step … Read more