OhSINT — TryHackMe — Writeup

Hello. I’m Rahmos. Here is my OhSINT Tryhackme writeup. Check it out!

OhSINT

First, download the image.

Then, upload the image to http://exif.regex.info/exif.cgi to see it’s metadata

Metadata

You can see, its author is “OWoodflint”. We’ve got the name, so check it out on Google search. Remember to use “” so Google will return exactly what matched Owoodflint.

Google search

There are 3 social media of this person : Twitter, Github, and Wordpress.

First let’s go to Twitter.

Twitter

He is using a cat as his avatar. So:

#1 cat is ans for question 1

Look at his second post, there is a BSSID. Based on this, we can search for his location using https://wigle.net/

Click on View -> Advanced Search -> Input the BSSID

Location

So he is at London!

#2 London is ans for question 2

There is also his SSID.

#3 UnileverWiFi is ans for question 3

Now get back to Google to find his email address. Click on the link to his Github.

Github

Here you can see the email. It’s also #4 ans!

We found his email on Github, so

#5 Github is ans for question 5

Now get back to Google again and click the link to his Wordpress.

Wordpress

He said he was in New York. So:

#6 New York is ans for question 6

Finally, right click -> View page source to find his password!

#7 it’s also ans for question 7!