Project Sekai - ✅-osint-legoclones-4

Project Sekai

🔒 BYUCTF 2023 / ✅-osint-legoclones-4

Legoclones 4 - 500 points

Category: Osint Description: Back in the day, Wikia (aka Fandom) allowed each person to put some data in their profile such as where you live and your current occupation. I only ever had 3 occupations listed in my profile at different times. What was one of them? Notes from the organizer:

Doxxing Legoclones in real-life will not help you in any of these OSINT challenges. Stick to Legoclones and not his real-life counterpart
Flag format - byuctf{Exact text for occupation}

Files: No files. Tags: Hard

Sutx pinned a message to this channel. 05/19/2023 12:00 PM

@rubiya wants to collaborate

12:19

@Legoclones wants to collaborate

12:25

@Deleted User wants to collaborate

@Guesslemonger wants to collaborate

try the sidebar

14:06

where height was redacted

tried, didn't see any occupation

14:07

probably a scraping chall, download entire site and grep lol

maybe

14:08

try soup or something lmao

@sahuang now

i need context for other 4 chals

15:15

not idea about this series

its just about clone trooper fandom

any background or links useful before i start from 0

15:19

not related with other 4 series?

no

15:20

its just legoclones profile

what profile

15:22

send link

https://clonetrooper.fandom.com/wiki/User:Legoclones

User:Legoclones

I am now currently retired, and will not respond to any messages on my talk page. I may randomly edit this wiki if I have extra time and nothing to do, however it will be very scarce. If you...

ok so we need to osint on this page only? e.g. history edits, wayback

15:46

any other pages relevant

15:46

I only ever had 3 occupations listed in my profile at different times

15:46

history edits or wayback i guess

15:46

@Deleted User what did you get

nothing there

15:47

no progress for this

any other pages relevant

15:47

ok

I think it's only rhis page that's relevant

pretty sure its history or wayback from the challenge description, otherwise its misleading

15:47

when they said "at different times" it must be time related

sure, im almost home

yeah

15:48

im gonna check edit first

I did, nothing there

15:48

they might have removed feature from fandom

o

15:48

how about wayback

that's why it doesn't appear

15:48

haven't checked

k

15:48

Saved 4 times between June 21, 2022 and March 21, 2023

15:50

ok it seems the edit is done before wayback captures

15:50

so need sth else

15:51

https://clonetrooper.fandom.com/wiki/User:Legoclones?action=history you checked all here?

User:Legoclones

I am now currently retired, and will not respond to any messages on my talk page. I may randomly edit this wiki if I have extra time and nothing to do, however it will be very scarce. If you...

15:55

are those real occupations like programmer or sth related to game?

15:56

like, is administrator of Clone Wiki among the three?

Deleted User

I did, nothing there

did you diff every neighbour commits there in history?

16:04

@Legoclones does occupation include game titles like administrator and bureaucrat of Clone Trooper Wiki or it's real world occupation

you will know it when you see it

16:05

Like I said in description, osinting me in real life won't help

16:05

I didn't put any attempt limits on this one bc the occupations are unique strings of text

16:06

brute force won't work

@ems

16:13

@Deleted User

16:13

https://clonetrooper.fandom.com/wiki/User:Legoclones?type=revision&diff=28620&oldid=21857

User:Legoclones

I am now currently retired, and will not respond to any messages on my talk page. I may randomly edit this wiki if I have extra time and nothing to do, however it will be very scarce. If you...

16:14

However, I will be present on CWA Military Squads Wiki sometimes, so you can contact me there if you want to talk about something ''other'' than CTW.

16:14

find another wiki profile ig

16:14

i diffed every nearby commits, this one is the only relevant one where he said he retired due to "other work to do" (which?) then pointed to the other wikli

16:15

https://cwamilitarysquads.fandom.com/wiki/User:Legoclones

User:Legoclones

Welcome, I'm Lieutenant Legoclone Kyrimount. I'm currently the leader of the 1st Platoon in the Special Operations guild Republic Special Forces Division, placed on Ebon Hawk. I lead all the...

16:18

well idk if any other chals have related to this page, maybe CWA is out of scope

@Legoclones

is CWA out of scope?

16:23

but yeah im diffing nearby commits as well

16:23

a lot of "professions" are within the game

Deleted User

@Legoclones

no, CWA isn't explicitly out of scope

so the profession can either be real life or in game?

Legoclones

you will know it when you see it

all I can say is this

i would think it'd be obne of these

Image attachment

16:26

it'd literally say "Occupation:"

where is this

https://cwamilitarysquads.fandom.com/wiki/User:Legoclones

User:Legoclones

Welcome, I'm Lieutenant Legoclone Kyrimount. I'm currently the leader of the 1st Platoon in the Special Operations guild Republic Special Forces Division, placed on Ebon Hawk. I lead all the...

i didnt see occupation

16:27

yeah im checking diffs

https://cwamilitarysquads.fandom.com/wiki/Legoclone_Kyrimount

Legoclone Kyrimount

United Armed Forces [CWA] Gladiator Squad: Late Jan, 2014 - was placed in Gladiator Squad, the successor of United Armed Forces Mar 22, 2014 - was promoted to rank of Corporal and Commander rank...

16:28

Image attachment

you mean role?

tried, didnt work

16:29

this might be rabbit hole

16:31

ugh

then idk where to find, already checked all history

https://community.fandom.com/wiki/Help:Profiles

You can access your user profile on any community by hovering over your avatar at the bottom-left of the screen and then clicking "View Profile". Only logged-in users can have user profiles. Your...

lol

Image attachment

1

genuinely no clue

yeah

16:35

might try sth else

16:35

this is surprisingly the most solved in remaining

it's not guessy

16:37

we just dont know how lol

weird thing is i checked every history commit on https://clonetrooper.fandom.com/wiki/User:Legoclones but none gives result, so i was assuming there's some other profile on fandom that contains occupation - but CWA also doesnt show anything

@4n0nym4u5 wants to collaborate

@kanon wants to collaborate

@jayden wants to collaborate

we probably find few profiles and then look for occupations (edited)

have we confirmed that occupation is not some military position? like it actually is mentioned as Occupation: Flag

https://cwamilitarysquads.fandom.com/wiki/Special:Search?scope=cross-wiki&query=%22Legoclones%22&ns%5B0%5D=2 These are all profiles I guess

07:21

this guy had way too much time on hand to do all this shit

Guesslemonger

have we confirmed that occupation is not some military position? like it actually is mentioned as Occupation: Flag

i tried a lot

08:14

will try a few more when im on pc, not sure why they get so many solves

fuck this, my sanity is more important

did you check the other one

08:14

might need some insight

08:17

i had some summary there

@afterworld wants to collaborate

@Guesslemonger can you give run down

you basically need to find 3 occupations on fandom for user Legoclones

09:16

https://clonetrooper.fandom.com/wiki/User:Legoclones this is one

User:Legoclones

I am now currently retired, and will not respond to any messages on my talk page. I may randomly edit this wiki if I have extra time and nothing to do, however it will be very scarce. If you...

Legoclones

no, CWA isn't explicitly out of scope

there is also a CWA profile but idk what's "not explicitly out of scope", maybe its rabbit hole

09:19

i checked some solver, they did it pretty fast so idk what we are missing

Image attachment

afterworld

used /ctf submit

❌ Incorrect flag.

Guesslemonger

https://cwamilitarysquads.fandom.com/wiki/Special:Search?scope=cross-wiki&query=%22Legoclones%22&ns%5B0%5D=2 These are all profiles I guess

and yes all profile are here

afterworld

used /ctf submit

❌ Incorrect flag.

try website submit lmao

ya

im checking all "User:Legoclones"

09:28

then check User:Legoclones/?

09:34

there are a bunch User:Legoclones the /? is prob irrelevant because they are subpages

09:34

checking all of those commit histories

09:34

also i suspect all 3 occupations might be in 1 place otherwise its painful to find 3 places with occupation listed

09:34

maybe he did 3 edits to 3 occupations

do we know where occupation is usually listed

nope

09:36

its in profile

09:36

I only ever had 3 occupations listed in my profile at different times

so here? https://clonetrooper.fandom.com/wiki/User:Legoclones

User:Legoclones

I am now currently retired, and will not respond to any messages on my talk page. I may randomly edit this wiki if I have extra time and nothing to do, however it will be very scarce. If you...

there are at least 10 profiles that im checking npw

Guesslemonger

https://cwamilitarysquads.fandom.com/wiki/Special:Search?scope=cross-wiki&query=%22Legoclones%22&ns%5B0%5D=2 These are all profiles I guess

all "User:Legoclones" are relevant

all?

thats so much

im already halfway

i actually had checked them all and edit histories, didn't get anything

ah

09:38

yeah thats what im doing

09:44

yeah couldnt find anything, the issue is i dont know where else to find

09:44

i think only fandom is in scope

09:47

checked all of these none there

Image attachment

You don't need to guess the occupation, you'll absolutely know it when you see it

is anything out of fandom profile out of scope?

sahuang

checked all of these none there

Dang homeboy found me everywhere

said "listed in my profile" so

09:50

checked all profiles lmao

09:50

if its in some talk or msg wall or blog that would be insane

so many tabs opn in chrome that im

09:50

lagging

sahuang

is anything out of fandom profile out of scope?

Wdym

gm

Legoclones

Wdym

like, description said "listed in my profile" could it be somewhere else like outside fandom or in random post/msg walls?

No, it will be in my profile

hmm

09:52

interesting

which profile?????

Here's a hint

you say CWA isn't outside of scope

It doesn't matter

09:52

Which profile

lol

wtf

ty

time to join this discord

Image attachment

small community

09:53

love that

wait isnt that mrxbox98 ctf player

So is pinkhat (edited)

i thought thats wiki discord

It is

ctfers joined cause of chall lmfao

1

o

09:54

LOL ok

09:54

cuz i swear there were only 12 ppl online instead of 17 when i checked yesterday (edited)

1

bro Lego what have u done

but yeah unrelated ig

why are you such a fandom sweat

1

That is my greatest compliment

how old are you

I'm screenshotting this (edited)

1

afterworld

so many tabs opn in chrome that im

so im assuming looking at https://clonetrooper.fandom.com/wiki/User:Legoclones is enough given different profiles dont matter

yeah im going thru everything

09:56

rn

afterworld

how old are you

Bro if you've done your OSINT you'd know

i could try

yeah

24? (edited)

if you checekd all commit history

09:56

lmao

bro

09:56

thats crazy

09:56

you were on that site at 12

honestly kinda impressive lmao

1

Yeah I was in middle school

09:57

I'm 23 now

09:57

Close to 24

always a nerd

that was so convenient though

09:58

u just so happened to have a childhood that is researchable

09:58

and perpetually on the internet

afterworld

always a nerd

Yeah I feel like my life is just jumping from one super niche nerd group to another lol

Deleted User

u just so happened to have a childhood that is researchable

Yeah, that's why I felt it would be good OSINT. It's true OSINT, I ain't making this stuff up

lol yeah all of them were real

umm it specifically refers fandom/wikia, why would there be a common profile anywhere

https://clonetrooper.fandom.com/wiki/User:Legoclones?action=history

User:Legoclones

I am now currently retired, and will not respond to any messages on my talk page. I may randomly edit this wiki if I have extra time and nothing to do, however it will be very scarce. If you...

10:02

u guys went thru all this right?

10:02

just went thru all of it

ye

yeah nothing

all profiles are different, not sure how to find a common trait

ya (edited)

no way we go anywhere else other than fandom site(s) (edited)

only fandom profiles are relevant

10:08

already confirmed

10:09

and its on profile not like random posts or messages

10:16

also wayback seems irrelevant because we can already see edit history

so profile is important and it does not matter which profile?

from what lego said, yeah

10:20

No, it will be in my profile
It doesn't matter
Which profile

From this

so this counts as a profile? https://cwamilitarysquads.fandom.com/wiki/User:Legoclones

i think so

it might be the case that fandom changed their entire layout or something

10:24

so wayback might be important

10:24

it won't show up in history

10:24

they might have like removed occupation field altogether

10:25

so profile doesn't matter

10:25

Back in the day

10:25

wayback?

hm

10:25

wayback doesnt even archive that cwa

right

2nd place has 40 ppl playing, 3x our manpower

Guesslemonger

right

was also thinking if we need to check wikia history instead of fandom

10:43

url is supposed wikia or sth

10:43

before they rebrand

10:44

not sure if relevant

10:44

but we need the url

10:46

As description said "Back in the day, Wikia (aka Fandom) allowed each person to put some data in their profile such as where you live and your current occupation." Probably means it's Wikia who allowed ppl to put occupation section But fandom removed it

10:46

its somewhere in his profile

10:47

i tend to think we need to look into this path lol, since fandom page has nothing

another profile

10:47

https://starwars.fandom.com/wiki/User:Legoclones

yeah i checked all 10+ profiles

10:48

this is empty profile

sahuang

As description said "Back in the day, Wikia (aka Fandom) allowed each person to put some data in their profile such as where you live and your current occupation." Probably means it's Wikia who allowed ppl to put occupation section But fandom removed it

this

10:48

none of other chals mentioned Wikia right

10:49

and seems Fandom cant put occulation in profile

sahuang

this is empty profile

check history, lot of extra stuff enough for 10,000 osint challs

i checked all commits

10:51

on all profiles on fandom

10:51

also it cant be in this history if it doesn't matter which profile

10:51

pretty sure its in wikia

10:51

before 2016

wikia is fandom

10:52

where is wikia old site?

yes but url changed

10:52

Image attachment

10:52

im just trying to get url lol

10:52

https://wikia.com will redirect to fandom now

o ok

but only after 2016

Image attachment

10:53

consider ALL his history are before 2016 (2011-2014 or sth)

10:53

it must be on old url

10:54

@Legoclones we on right track?

legoclones is not archived here though

what url?

10:54

is clonetrooper archived

10:55

hold on i can get url from browsing

all of them are 301 error

10:56

can't even browse

they will redirect to http://www.wikia.com/Wikia

10:57

https://web.archive.org/web/20110201230839/http://callofduty.wikia.com/wiki/Call_of_Duty_Wiki

Call of Duty Wiki - The Call of Duty Wiki - Characters, Weapons, Ma...

The Call of Duty Wiki is a Call of Duty database that anyone can edit. It covers Modern Warfare 2, Call of Duty 4, Call of Duty 2, and more.

10:57

see

10:58

im just trying to find what is user profile url

it is same

https://web.archive.org/web/20111004173915/http://callofduty.wikia.com/wiki/User:Bibliomaniac15

You can find me on Wikipedia. I'm here to improve coverage of Call of Duty, United Offensive, and Ca

11:00

sth like this

http://www.wikia.com/wikia/User:legoclones for example

11:01

https://web.archive.org/web/20230000000000*/https://clonetrooper.wikia.com/wiki/User:legoclones

oh shit that was it

you sure?

jayden

used /ctf solve

✅ Challenge solved.

didnt see any occupation

11:01

oh

shit

lmao it is??

yeah

wikia one?

Editing Clone Trooper Wiki

https://web.archive.org/web/20130731033244/http://clonetrooper.wikia.com/wiki/User:Legoclones

User:Legoclones

I'm the administrator and bureaucrat of Clone Trooper Wiki (this wiki) and I run it. I'm an...

lol ok

byuctf{Editing Clone Trooper Wiki}

ah

11:02

ok

11:02

so im right

11:02

nice

bruh

pro

xd

11:02

nah the hint is helpful "all profiles are the same"

11:02

so hinting to wikia

11:02

ok i think good to rest lmao

11:03

2nd place got Paleontology but we have the pyjail

11:03

so its fine

Guesslemonger

check history, lot of extra stuff enough for 10,000 osint challs

Yeah getting it down to just 5 was hard

so much attack surface

11:10

Haha nice catch on the Wikia url change! Originally I had this as medium bc I knew it was different, didn't even think about it

11:11

Ohcoz was playtesting and could NOT get it lol then I discovered that's why

11:11

Tricky twist but it actually happened

11:11

Occupation was displayed on the profile regardless of the wiki, they took it out before switching to fandom

yeah noticed that too late

how is it too late?

would prob spend more time on the foren if we got this yesterday lmao

Exported 312 message(s)