Open-Source-Intelligence

Summer Camp 2020 – 1-2-3 Words


While tailing a suspected member of the liber8tion hacker group to an outdoor cafe, one of our agents was able to sneak a quick picture of a conversation between them and another hacker. With our patented “Zoom & Enhance” technology, were were able to make out this part of the texts. We know from other intercepted communications that liber8tion is planning on making a hard drive drop. What can you determine about the group’s future activities?

Challenge Question:
1) Where will the drop happen at?

Once you hit the right keywords, this challenge takes less time to finish than it took me to stage a fake cafe in my backyard.

As always, let’s start with the challenge metadata — and by metadata I mean the title, questions. This is an OSINT question, which probably means that you’re going to end up doing a lot of googling. The questions and the preamble make it pretty clear that you’re going to be looking for some kind of location data, so that will be your first step.

Once you look at the image, you’ll probably focus in on the two messages that stand out:

///thinkers.fortified.implanted
///cakes.shuttled.switch

Both have a very specific format, and if you don’t know what it is already, it’s a little tricky to find. Searching for “three words separated by periods” gives you a digital album on bandcamp, “///” will give you your computer files, and any combination of the words in the text will give you arbitrarily useless results. What gives?

The last thing you may think of trying is literally searching for “3 words” but lo’ and behold, that’s where your answer lies.

The trick to OSINT is realizing that there’s no dumb questions and even the most basic pieces of information can be important.

Happy Hacking!

WebWitch

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.