Thoughts, writeups, and experiments in cybersecurity and coding
Challenge overview The objective of this challenge is to determine lilica’s real name using publicly available information. The answer should be in the Latin alphabet (romaji). Flag format: Example (not the solution): Initial assumptions Investigation process Key findings Final flag / answer Notes & takeaways
Challenge overview Lilica hosts a personal website using a third-party hosting service. The website itself is not violating any terms, but the objective is to identify the abuse-reporting email address of the hosting provider. Flag format: Warning: Do not send emails to this address. The task is only to identify it via OSINT. Initial assumptions Investigation process … Read more
Challenge overview Lilica ran a personal website linked from her social media account @twilight_lilica. Your task is to determine when the domain name of her personal website was registered in YYYY/MM/DD format. Flag format: Initial assumptions From lilica’s social media activity, she linked to a domain that appears to be a personal portfolio or profile … Read more
Challenge overview Lilica is also interested in VR, and some activity has been observed in the future. The objective of this challenge is to identify the VRChat user ID which lilica was using as of 2026. VRChat user information can be viewed in a web browser. Flag format: Example (not the solution): Initial assumptions Investigation process … Read more