mis4nthr0pia

  • SWIMMER OSINT CTF 2026 – lattice_tower

    Challenge Overview We are presented with a scenario involving a lattice tower of a communications facility that was damaged during an earthquake in Japan in December 2025. The objective is to identify the official technical name of this facility as a communications hub (its Shuyokyoku or “Accommodation Station” name), which differs from the common name reported in news articles. Initial Assumptions…

  • SWIMMER OSINT CTF 2026 – dabeyohiru_05_hidden1

    Challenge Overview The task is to determine the legal name of the user debeyohiru/furaigo5. We are given access to their public profile page and are instructed to identify the real name in Latin alphabet, ignoring Kanji or Hiragana. Initial Assumptions Investigation Process Step 1: Inspect the Profile Source Step 2: Examine the JavaScript File Key Findings Final Flag…

  • SWIMMER OSINT CTF 2026 – lilica_07_work

    Challenge Overview The goal of this challenge was to identify the nearest Tokyo Metro station to the workplace of the target, “Lilica”. We were provided with: Initial Assumptions Investigation Process Step 1: Analyzing the Image (The Physical Clue) Step 2: Analyzing Digital Footprints (The Profession) Step 3: Geolocation of the Workplace Step 4: Determining the Station Key…

  • SWIMMER OSINT CTF 2026 – lilica_06_name

    Challenge overview The objective of this challenge is to determine lilica’s real name using publicly available information. The answer should be in the Latin alphabet (romaji). Flag format: Example (not the solution): Initial assumptions Investigation process Key findings Final flag / answer Notes & takeaways

  • SWIMMER OSINT CTF 2026 – lilica_05_hosting

    Challenge overview Lilica hosts a personal website using a third-party hosting service. The website itself is not violating any terms, but the objective is to identify the abuse-reporting email address of the hosting provider. Flag format: Warning: Do not send emails to this address. The task is only to identify it via OSINT. Initial assumptions Investigation process…

  • SWIMMER OSINT CTF 2026 – lilica_04_domain

    Challenge overview Lilica ran a personal website linked from her social media account @twilight_lilica. Your task is to determine when the domain name of her personal website was registered in YYYY/MM/DD format. Flag format: Initial assumptions From lilica’s social media activity, she linked to a domain that appears to be a personal portfolio or profile…

  • SWIMMER OSINT CTF 2026 – lilica_02_virtual_identity

    Challenge overview Lilica is also interested in VR, and some activity has been observed in the future. The objective of this challenge is to identify the VRChat user ID which lilica was using as of 2026. VRChat user information can be viewed in a web browser. Flag format: Example (not the solution): Initial assumptions Investigation process…

  • SWIMMER OSINT CTF 2026 – rain_06_ai

    Challenge Overview An image of Tokyo Station was published on rain’s blog. However, visual inspection suggests that the image is AI-generated rather than a real photograph. The objective of this challenge is to determine which AI tool was used to generate the image, using only lawful OSINT techniques. Flag format: Example (not the solution): Initial…

  • SWIMMER OSINT CTF 2026 – rain_04_source2

    Challenge Overview In rain’s second fake article, the author claims to have discovered unpublished information. This claim is suspected to be false. Your task is to debunk the claim by identifying the original source of the image used in the article. The challenge states that the image originates from an old book that has been…

  • SWIMMER OSINT CTF 2026 – rain_01_social

    Challenge Overview As of 2026, the individual known as rain appears to have had an X (formerly Twitter) account. Investigators obtained a screenshot of a post, but the username was intentionally obscured by an overlay (appearing like a notepad or masking element). The task is to identify the X account shown in the screenshot and…