osint
OSINT The Creator
Solved by : choco
“There is a flag on a few of the organizer’s profiles. Find it!”
One of the most prominent organiser is thomas Search his username on discord in the uiuctf server and you’ll get the flag under his profile (it is a spoiler)
Flag: uiuctf{@b0uT_m3_suppOrT5_maRkD0wN}
Chaplin’s PR Nightmare - 1
Solved by : choco
“Charlie Chaplin has gotten into software development, coding, and the like… He made a company, but it recently came under fire for a PR disaster. He got all over the internet before he realized the company’s mistake, and is now scrambling to clean up his mess, but it may be too late!! Find his Twitter Account and investigate! NOTE THAT THESE CHALLENGES DO NOT HAVE DO BE DONE IN ORDER!”
search “Chaplin Chaplin Coding” on twitter and you will get one result
https://twitter.com/ChaplinCoding
Now go to the “view lists” under the three dots next to follow (You need an account to see it)
You’ll find the flag in the second list https://twitter.com/i/lists/1416876734578929664
Flag: uiuctf{pe@k_c0medy!}
Chaplin’s PR Nightmare - 2
Solved by : choco
“Charlie made an advertisement to promote his company, he is using the modern media platform YouTube to present it! Can you find it?”
Searching up “Charlie Chaplin Coding” on google shows up this channel or the link is given from the previous challenge twitter account
https://www.youtube.com/channel/UCxPyHVMa8TyKrOj05x86osA
Click on the only video there and there will be the flag at almost the end of the video
flag: uiuctf{ch@plin_oN_th3_tV!!}
Chaplin’s PR Nightmare - 3
Solved by : choco
“Charlie even has a website!!! Find it and look around! The inner content of this flag begins with “ch””
Under the youtube “about” page from above you’ll get the link to their website
https://www.charliechaplin.dev/home
Scroll down on the home page and you’ll see an album of 3 pictures of charlie If you look closely on the picture of charlie with a macintosh, you’ll get the flag https://lh4.googleusercontent.com/qa6GoXttPCeo63Stxl8lJUNzxXZQ-TEac2HGMLKDsd1h3pEoE6MvQCS1ZdZ-x41n2mP398ke75tKKAg1B5w6niI=w16383
Flag: uiuctf{ch@pl1n_i5_eL337}
Chaplin’s PR Nightmare - 4
Solved by : choco
“Charlie left another flag on his company’s website. Maybe you have to reach out to him??? The inner content of this flag begins with “w3””
under the contact page you’ll see a google form to fill
https://docs.google.com/forms/d/e/1FAIpQLScpLDShOWwi3gQb12RfViHuVZR-__L5p8vIAQVQ6eczQULN3Q/viewform
Just submit the form (can be empty) and you’ll get the flag
Flag: uiuctf{w3_d0_nOt_v@lu3_yoUR_1nPuT}
Chaplin’s PR Nightmare - 5
Solved by : choco
“Charlie also has an imgur account that may hold the secret to his PR nightmare… Can you find it? The inner content of this flag begins with “tH” ”
Under the same website, Go to the about us page The last image there is actually uploaded from imgur
https://imgur.com/a/iZI1ov4
Go to their profile and check out their comment history Flag is in the first ever comment
https://imgur.com/user/chaplindevelopment/comments
Flag: uiuctf{tH3_pR_p0Lic3_h@vE_cAugHt_Up?!}
Chaplin’s PR Nightmare - 6
Solved by : choco
“Wow Charlie even set up a linkedin account, but not well it is kind of a mess. Is the PR nightmare here?? The inner content of this flag begins with “pr”“ This time you should go to linkedin to search up their name.
I searched up “C3D” as specified from their website to get their profile
https://www.linkedin.com/groups/13984825/
Go to their owners page and under his profile he’ll mention “I ran a event called “Top Hat Development Night”. It was very cool, you can find it on linkedin still search it up”
Search up “Top Hat Development Night” under events and you’ll get the event and flag under it
https://www.linkedin.com/events/6822753659445743616/
Flag: uiuctf{pr0f3s5iOn@l_bUs1n3sS_envIroNm3n7}
Chaplin’s PR Nightmare - 7
Solved by : choco
“Chaplin left some code up on GitHub which may be the actual PR nightmare I hope not though… Leaked code is bad. Find it!!! The inner content of this flag begins with “th””
Now this time search up “Charlie Chaplin” and there should be only 4 results under user you’ll figure out the profile under https://github.com/charliechaplindev
Scroll down their history and you’ll see an issue stating “ SECRET KEY SECRET KEY THIS IS BAD THIS IS BAD” Click on that and you’ll get the flag
Flag: uiuctf{th3_TrUe_pR_N1gHtm@r3}
Chaplin’s PR Nightmare - 8
Solved by : Starry-Lord
Straightup doxx Charlie by finding the email he set all these accounts up with, and investigate it. The inner content of this flag begins with “b0”
So now to find Charlie Chaplin dev ‘s e-mail address I used github.
https://github.com/charliechaplindev/C3D-Official/commit/ce81ede5ab18b6f4ca32ace4359c5570954dfc9b.patch
Remove the dot patch extension for regular layout.
Then I used the good old article https://medium.com/week-in-osint/getting-a-grasp-on-googleids-77a8ab707e43
And found contributions on Google maps at this location :
https://www.google.com/maps/contrib/117833363030761934622/photos/@41.9667449,-87.6385934,3a,84.8y,90t/data=!3m7!1e2!3m5!1sAF1QipOyi7R_ApFvR6ZeSYVpLYt4p_2wDjLu6r9V3T3T!2e10!6shttps:%2F%2Flh5.googleusercontent.com%2Fp%2FAF1QipOyi7R_ApFvR6ZeSYVpLYt4p_2wDjLu6r9V3T3T%3Dw545-h260-k-no!7i956!8i456!4m3!8m2!3m1!1e1
uiuctf{b0rk_b0rk_1_lOv3_mY_d0g<3}