osint

Sdctf 2022

Google-Ransom

Solved by: Avantika (iamavu) and Starry-Lord

Google Ransom
Oh no! A hacker has stolen a flag from us and is holding it ransom. Can you help us figure out who created this document? Find their email address and demand they return the flag!

Ransom Letter - https://docs.google.com/document/d/1MbY-aT4WY6jcfTugUEpLTjPQyIL9pnZgX_jP8d8G2Uo/edit

We can find the owner of any drive file via google API, simply query the fileID which is present in the URL itself https://developers.google.com/drive/api/v3/reference/files/get

the * tells to print all possible fields in the metadata, we get the email as amy.sdctf@gmail.com send them a email and we get back our flag

FLAG - sdctf{0p3n_S0uRCE_1S_aMaz1NG}

Published on : 10 May 2022