Project Sekai - ✅-osint-wannaflag-v-the-mastermind

Project Sekai

🔒 WolvCTF 2023 / ✅-osint-wannaflag-v-the-mastermind

WannaFlag V: The Mastermind - 500 points

Category: Osint Description: Alright, I don't know about you but I'm kinda sick of this WannaFlag group. I say we take them down once and for all. Maybe there's a way to figure out who is behind the whole operation... Consider all possible leads and clues so far. This challenge may be the most complex so far No games or programs need to be downloaded, or users messaged Files: No files. Tags: dree#0001

Sutx pinned a message to this channel. 03/17/2023 2:11 PM

@Deleted User wants to collaborate

@Legoclones wants to collaborate

Results/notes from WannaFlag II:

WannaFlag requested payment of 500,00 Goerli to address 0x08f5AF98610aE4B93cD0A856682E6319bF1be8a6
Money finally ends up at 0x79616b199c930a43f02efd5df767cfb6a32943d0

(edited)

16:54

Can you post all other links/notes/solves here?

sure

16:55

good idea to compile

1

17:00

WannaFlag I:

Google Lens on image results in The Cube, a statue in their university
netcat link in newest review hints at twitter
#YourFlagsBelongToUs is revealed in the ransomware message
https://twitter.com/JohnOSINT_/status/1634680651768270848

17:06

WannaFlag III:

Direct w4nn4_fl4g search on Google results in subreddit: https://www.reddit.com/r/w4nn4_fl4g/
Suspicious u/[deleted] hints at deleted posts and comments
Find the deleted user--query one of their comments, "sorry", under the scope of the subreddit on camas.unddit: https://camas.unddit.com/#{%22subreddit%22:%22w4nn4_fl4g%22,%22resultSize%22:100,%22query%22:%22sorry%22}. This reveals the user /u/Chemical_Bread1558
use camas.unddit to query Posts by this user: https://camas.unddit.com/#{%22author%22:%22Chemical_Bread1558%22,%22searchFor%22:1,%22resultSize%22:100} results in https://www.reddit.com/r/w4nn4_fl4g/comments/11p5w72/hiiiiiiiii_help/
use unddit to reveal deleted comments: https://www.unddit.com/r/w4nn4_fl4g/comments/11p5w72/hiiiiiiiii_help/
reveals website: https://wanna-flag-d60bf7cd-012a-4fcc-9a4c-e60eca6b653f-tlejfksioa-ul.a.run.app/ which has the flag

(edited)

17:11

WannaFlag IV:

https://wanna-flag-d60bf7cd-012a-4fcc-9a4c-e60eca6b653f-tlejfksioa-ul.a.run.app/data.html reveals an encrypted Excel spreadsheet
SRC of the spreadsheet reveals a GitHub user https://github.com/fl4gpwners, with a repo https://github.com/fl4gpwners/password-repo
the passwords_stub.lst contains a segment of the password list, which is hinted at by _stub
This implies that we need the full wordlist. I found the exact dataset which the names and populations were pulled from: https://www.census.gov/data/tables/time-series/demo/popest/2020s-total-cities-and-towns.html#ds
Imported into Google Sheets and used the command =SUBSTITUTE(SUBSTITUTE(LEFT(B5,FIND(",",B5)-1)," ","_"),",","")&"_"&SUBSTITUTE(C5,",","") to create a column with properly formatted passwords, which creates the wordlist
I got the password hash from the document with the program office2john.py
Hashed against the wordlist with john results in the password Great_Falls_city_60506, which reveals the flag

17:12

@Legoclones

17:12

this is what we have so far

cool

genuinely no clue where to start tho (edited)

no solve yet, could try the forensics first

nah i wanna do this one

17:24

lol

Gotcha, so the goal is to "figure out who is behind the whole operation". We currently have:

Name: WannaFlag
Username: w4nn4_fl4g
Subreddit: https://www.reddit.com/r/w4nn4_fl4g/
- Admin: https://www.reddit.com/user/w4nn4fl4g_admin/
- User RemarkableDiamond443: https://www.reddit.com/user/RemarkableDiamond443/
- User Chemical_Bread1558 (deleted profile)
Website: https://wanna-flag-d60bf7cd-012a-4fcc-9a4c-e60eca6b653f-tlejfksioa-ul.a.run.app/
- CTF list: https://wanna-flag-d60bf7cd-012a-4fcc-9a4c-e60eca6b653f-tlejfksioa-ul.a.run.app/ctfs.html
- Data list: https://wanna-flag-d60bf7cd-012a-4fcc-9a4c-e60eca6b653f-tlejfksioa-ul.a.run.app/data.html (which had excel file that we cracked pwd for)
- Prices list: https://wanna-flag-d60bf7cd-012a-4fcc-9a4c-e60eca6b653f-tlejfksioa-ul.a.run.app/prices.html (links to Eth address)
GitHub user fl4gpwners: https://github.com/fl4gpwners?tab=repositories
Ethernet addresses under WannaFlag control
- 0x08f5AF98610aE4B93cD0A856682E6319bF1be8a6
- 0x79616b199c930a43f02efd5df767cfb6a32943d0

(edited)

17:29

So the goal is to figure out the username of the person who set this all up, and find the flag posted on their social media somewhere. We need to find the username using some of the data above

right

Last line says "No games or programs need to be downloaded, or users messaged"... why games?? Is that a hint that it will have something to do with it?

maybe check from admin

Running sherlock on w4nn4_fl4g and fl4gpwners

17:35

didn't get anything new

yeah i did that too

office docs usually have author in metadata

17:38

ahh but not found in this one

17:38

Image attachment

ahh that would be smart

XLSX file has flags for dice and iris, but not listed on https://wanna-flag-d60bf7cd-012a-4fcc-9a4c-e60eca6b653f-tlejfksioa-ul.a.run.app/ctfs.html

17:40

dunno if important or not

maybe dirbuster on wannaflag website? (edited)

17:48

nothing new from dirb with .html extension

also not sure if thats allowed

prolly not

17:48

or at least intended

4. Use of automated tools like dirbuster or sqlmap are not allowed (and will not help anyway).

17:48

oops

17:48

is that bad

well it's done now so \o/

17:49

wondering about the domain they have

17:49

wanna-flag-d60bf7cd-012a-4fcc-9a4c-e60eca6b653f-tlejfksioa-ul.a.run.app

yeah definitely

17:50

i wonder where its from

looks like wanna-flag-uiud-??.a.run.app

random uuid

looks like netlify

17:50

Image attachment

17:50

maybe we could run whois

but where do the chars at the end come from?

netlify

ahh letters are randomly gen

17:50

not important then

ya

any netlify osint?

17:50

to try and see who reserved that DNS name?

it would probably be the organizers lol

17:51

Image attachment

17:51

its google

17:51

zany

well but it would be the organizers under the guise of the person behind "wannaflag"

it would probably be hard

17:52

https://www.netify.ai/resources/domains/run.app

run.app - Domain Info

This page provides notable hostnames associated with the run.app domain. The domain is associated with Google Hosted.

17:52

oops

17:52

sorry

17:52

its not netlify

Also note the website is running NodeJS

17:52

but haven't found anything notable on the website

its associated with Google Hosted

WannaFlag is also the name of a CTF chall in GACTF back in 2020 lol

Image attachment

Legoclones

WannaFlag is also the name of a CTF chall in GACTF back in 2020 lol

not relevant

lol the website content was made with ghatgpt

17:55

so the text isnt relevant

haha not surprising

i wanna solve this so badly

17:57

im gonna grind this all tonight

17:57

since my college acceptances came out

2

17:57

and now i dont have to think about anything anymore

nice!!

17:57

Let's get it then!

17:59

Running sherlock on w4nn4fl4g_admin, RemarkableDiamond443, and Chemical_Bread1558 (edited)

thanks

18:03

@Legoclones anything?

nothing on first 2

18:03

nah nothing on last one either

18:03

Although

yeah those are randomly generated by reddit

https://www.reddit.com/r/w4nn4_fl4g/comments/11p5nt6/help/jbw7ytw/?context=3

r/w4nn4_fl4g - Comment by u/w4nn4fl4g_admin on ”help”

1 vote and 4 comments so far on Reddit

so you wouldn't get anything regardless

this meme is about the password to the Eth wallet

i guess password into the wallet? yeah

we have the eth wallet, we know their password scheme

18:04

maybe useful?

18:04

although not sure logging into their eth wallet is what they'd want us to do

18:04

only thought I have

18:04

Other thought is just try osint with eth wallet

18:04

Other than that, I got no ideas

yeah definitely login to their wallet

18:10

dude's on fortnite

Bro when a cute girls gonna get on, you don't say no

no way you are duoing with a girl on fortnite instead of helping me on this osint chall

wait 4 hint

are you back yet @Legoclones

No not yet

@Violin wants to collaborate

Image attachment

Haha yeah that's exactly where we're at

did they reply u

20:15

@Deleted User

20:15

legit SE chall

sahuang

legit SE chall

Image attachment

20:15

they are tough (edited)

ok

20:16

wait for hint? or u wanna try more

try ofc

20:16

we need somewhere to start

20:16

so just find the first path

20:16

get some more heads in on it

20:16

who wants to osint

20:17

@Legoclones @sahuang ig start with the subreddit once again

20:17

we can try with the ethereum wallet

doing rev/crypto myself

20:18

no time for this i think, unless others all solved

they say hint on 2nd day

20:28

crypto private key?

20:28

https://www.myetherwallet.com/wallet/access/software?type=private-key

MyEtherWallet.com: Your Key to Ethereum

Free, open-source, client-side Ethereum wallet. Enabling you to interact with the blockchain easily & securely.

20:28

not sure how id get that tho

20:28

or a mnemonic phrase

A hint has been released for WannaFlag V: The Mastermind

22:24

Perhaps we can find the Mastermind's email...

nice

ah thats why they said "or users messaged"

22:24

no need to send email to them maybe

how to find email lol

yeah idk

sahuang pinned a message to this channel. 03/17/2023 10:26 PM

Image attachment

22:32

i have no idea how to find email lmao

22:32

@Violin any idea?

22:34

whats this

22:34

how you found this? (edited)

oh lol, not this

ok

sorry sorry

its indeed game relate

so we need find username?

pinned msg is all we have now, and hint is find that mastermind email

and got the email

22:36

okay nice

no idea where to find email tho

maybe under github

22:43

https://github.com/fl4gpwners/password-repo/commit/cb8495074b16abd13873ee1b397721799f191eb2.patch

22:43

rip

22:44

<civilianengi3421@proton.me>

22:44

found it

22:45

@sahuang @Legoclones

where

22:46

ah

Violin

oh lol, not this

this is correct

other commit

https://gamebanana.com/members/2530374

civilianengi3421 | Members

A Member submitted by civilianengi3421

https://github.com/fl4gpwners/flaglist/commit/9c689f4c2e0582d20577a951bf72ae243d65146a.patch

22:46

YES

22:46

THATS GOOD

Violin sent this before

THERE WAS TF2 REFERENCE EARLIER

22:46

YERS

game related

22:47

so its correct path then @Violin

22:47

and joined Mar 11

22:47

time matched

its related yes

22:48

there's discord link

where

Image attachment

where is this

https://gamebanana.com/wips/74502

jump_forklift [Team Fortress 2] [Works In Progress]

A Team Fortress 2 (TF2) Work In Progress in the Maps & Prefabs category, submitted by civilianengi3421

https://gamebanana.com/wips/74502 ?

jump_forklift [Team Fortress 2] [Works In Progress]

A Team Fortress 2 (TF2) Work In Progress in the Maps & Prefabs category, submitted by civilianengi3421

22:49

ah

22:49

yeah

22:49

need to guess last char

22:50

lol

"you dont need to download a game"

yeah

i see

22:51

that's why

need the url

22:51

discord.gg/aY4Wuy? right

yeah

22:51

brute

22:51

ez

22:51

no its ??

22:51

there's two unknown

oh

22:52

yeah

22:52

right

sahuang started a thread. 03/17/2023 10:53 PM

yeah i can brute all combinations

22:55

but i have message length limit

ok send me

22:58

i feel like there's an embed limit

yes

22:58

fuck lol

22:58

let me test and batch send

just do brute fetch

10 is the limit

22:58

no

22:58

fetch doesnt work

22:58

all 200 ok

doesnt have to be

22:58

just check content

actually first letter is a small range right

22:58

it has part side

idk

content doesnt work

22:59

e.g.

22:59

ur way of bruting doesnt work cuz 10 can be sent at a time

yeah

ill start from back

22:59

10 at a time

no

22:59

dont do that lol

22:59

omg

why

just

only 3800 in all

"only"

380 ctrl+c+v's

there's a way to do this

22:59

trust

u can figutre

23:00

actually i will determine first char

23:00

Image attachment

no thats impossible

23:00

you can fetch and parse content

23:00

and see if it is a redirect to server

"016bhklprABDEFGHIKLMNOPQRUW"

23:01

only possible first chars

ok

23:02

try

23:03

wait let me try discordpy

got a much smaller list

send

sahuang

this is correct

how did you get email violin

by github

@Deleted User help me do reverse order line by line

ok

23:06

send me the rest

lets goo

sahuang started a thread. 03/17/2023 11:07 PM

https://steamcommunity.com/sharedfiles/filedetails/changelog/2945817953

23:12

https://web.archive.org/web/20230000000000*/https://steamcommunity.com/sharedfiles/filedetails/changelog/2945817953

cant see changelog

needed login?

could have someone with tf2 try downloading

23:14

im logged in

steam?

23:15

cant see anything even after login?

yeah

23:15

same

tell admin we bruted all discord urls

23:15

ask him to check if link is still valid

23:15

so this we can confirm its the path

23:15

@Deleted User

ok

23:16

sent

wait

23:17

i have a qs

23:17

why that jump_forklift guys is related to rocketjumper3005 on steam

23:17

ah so civilianengi3421 released a game level called jump_forklift, but why rocketjumper3005 is involved

same guy

oh

23:18

right

Image attachment

@Guesslemonger wants to collaborate

discord.gg/aY4Wuy (edited)

maybe i can ask someone with tf2 to download the map

yeah its discord.gg/aY4Wuy??

we need 4 again?

we already bruted all

23:21

idk why none worked

23:21

bruted all 2-char combination where first char has a | on the left

i found someone with tf2

23:22

ill have them open the file

LOL

just in case run sherlock on rocketjumper3005

checked other maps, changelog wont have anything

doing now

Embedded image

23:24

there is a side on angle

yeah

friend says hes opening game in a bit

23:24

hold up

is that yW

23:24

UW

wtf

discord.gg/aY4WuyUW

how do you see that

no

Deleted User

how do you see that

https://steamcommunity.com/sharedfiles/filedetails/?id=2945817953

yeah ik

23:27

what i meant was that angle is hard lol

23:27

i think we got it

23:27

hes loading the map

what is it

lol

23:27

Image attachment

23:27

hold up

23:28

Image attachment

lmfao

23:28

wtf

23:28

discord.gg/aY4WuynAJ8

Image attachment

discord.gg/aY4WuynAJA

discord.gg/aY4WuynAJB

23:28

wtf

8

discord.gg/aYWuynAJA

how can it be 9

23:29

should be 8 digits

23:29

discord.gg/aY4WuynAJ

discord.gg/aY4WuynAJ8

discord.gg/aYWuynAJ8 (edited)

sahuang pinned a message to this channel. 03/17/2023 11:29 PM

?????????

9 in length

23:29

weird

23:29

#deleted-channel do brute here

23:29

if wanted

23:29

try the link

wtf,i am already in server

23:30

discord.gg/aY4WuynAJ8

23:30

just click this

Image attachment

23:30

didnt work

https://discord.gg/eH6HqXe4

23:30

click this

Image attachment

23:30

whats in the server

wtf

they dont match right?

Image attachment

Image attachment

23:30

4 is missing

no idea, i am in server

what server

23:31

screenshot

23:31

is there flag lol

but how can join

we are noclipping around the map

23:32

hold up

is that the edit he made to change url or sth, cuz there's no 4 in map

ok nothing

23:32

maybe wayback

wdym

wayback might have different image

23:33

do wayback on the other website

Violin

https://web.archive.org/web/20230000000000*/https://steamcommunity.com/sharedfiles/filedetails/changelog/2945817953

here's wayback

Image attachment

23:33

we're definitely on the right track

23:33

the url is changed

23:33

@Guesslemonger wdym ur already in the server

wayback shows this and it def doesnt look like AJ8

Image attachment

23:34

after they y

yeah its different

23:34

url is different

23:34

@Guesslemonger

23:35

wtf did you do

i just clicked invite link and joined server

what server

wtf, you gave the link

23:35

more people are joining

i didnt even know what link is that

send a screenshot bro

23:36

lmao

23:36

please

i invited you

its invalid

23:36

just screenshot

its invalid

the inv is invalid

BM is trolling uis

23:36

for sure

Guesslemonger

more people are joining

who is joining

23:37

SCREENSHOTS. PLEASE.

Image attachment

its the author

23:38

dree

23:38

def correct

23:38

but why icant join

hurry

23:38

before blood

http://discord.gg/aY4WuynAJ8

Invite to join a server

rocketjumper3005's jump maps

general

check flag

23:38

lmao

definitely two ppl above are sus

discord.gg/aY4WuynAJ8

23:39

invalid

Image attachment

idk why

i think they disabled invites

both threads have random bullshit, 1 guy s0lly joined and left

yes

23:39

ping author

23:39

lmao

23:39

send flagh

they said no dms required

yes i think they disabled join

1 guy joined 4 minutes back

itoid is in server

so not disabled

wolvCTF server

"s0llym41n3006"

23:40

try inviting pls

try see the profile

yes the profiles are important lol

s0llym41n3006 is paqoo guy, he is already in server

wdym

23:42

he looks differnet

Image attachment

23:42

different pfp

@Deleted User

23:43

did u join the server

i cant

23:43

invite me please lol

why i still cant join

same lol

bm respond

23:43

this is frustrating

what is the original URL

23:43

confused

i guess it only works once

wtf

sahuang

discord.gg/aY4WuynAJ8

this the original (edited)

Image attachment

@Deleted User dm admin

23:44

tell them link is invalid now

you do it please

23:44

i already talked to them enough

Image attachment

@crazyman ai wants to collaborate

it still works for me, idk

WTF

WTF?

23:45

cache?

????????????

discord.com/invite/aY4WuynAJ8 (edited)

23:45

invalid

crazyman joined lmao

bruh

wtff

so bad

23:46

region locked

23:46

someone screenshare

23:46

lmao

that's a thing in discord?

maybe its region locked?

also work for me

didnt work for me wtf

wtf

23:47

dming admin

23:47

yeah

23:47

maybe this is an issue

it's not a thing, region lock

idk then

23:47

send useful info then

im talking to admin

no useful info

23:48

betterdiscord maybe

its the only lead we have

23:48

should utilize it

23:48

i did epeios on the email

23:48

only accounts its registered on is discord.com and github.com

its from email

23:49

this should be the step to flag

no hidden channels, installed betterdiscord

23:49

just no clip in map maybe, some flag

i did

23:50

nothing

disassemble it or some shit

they created this discord server for a reason lol

remember you dont need to download game for flag

https://discord.gg/zSX4dx6J

still invalid

i join

bruh

lol

LOL

23:50

how the fuck

Image attachment

im so pissed

????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

23:50

?????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

make 0 sense

23:50

discord.gg/aY4WuynAJ8

23:50

https://discord.gg/zSX4dx6J

23:51

oh wait

restart your router

what the fuck???????????????

wtf

23:51

i tried my alt still cant see

trying steg on server profile pic lmao

Image attachment

23:52

Image attachment

or using proxy

might be cooldown

23:52

or something

ah'

23:52

we spammed urls

lmao

prob banned by discord

23:53

IP

23:53

>It happened to me when I spam clicked on a invite. I recommend using a vpn to change your ip address and join the server. I think it's a kind of IP limitation to join the server

rate limited

bruh

where did you get that

discord TSG

what is tsg

trouble shooting

https://cdn.discordapp.com/icons/1084364118867325039/eaf883c3e2664f586f85bc4bf139a673.webp?size=160 profile pic

Embedded image

23:53

ip got banned for bruting maybe

yeah

23:53

lmfao

just change ip

dont have vpn lmao

Guesslemonger

https://cdn.discordapp.com/icons/1084364118867325039/eaf883c3e2664f586f85bc4bf139a673.webp?size=160 profile pic

someone's pfp?

23:54

or just workshop

23:54

@sahuang try deleting threads

23:54

might help

alr deleted

gonna join on 4g mobile

23:54

lmao

no its account too

on alt

server pfp

idk if steg is involved in OSINT

no its not steg

23:55

lol

check all person and all other channels

23:56

can u send screenshot

23:56

what are other 2 channels for

23:56

no topic?

join with phone 5g no?

civilianengi3421 ROCKETJUMPER3005

it's a different ip

account

23:57

attached to acc

yeah account too

just use an alt and phone (edited)

oh

23:58

i joined

23:58

rate limit is cancelled

23:58

joined on main

23:58

@Deleted User

ok

23:58

discord.gg/aY4WuynAJ8

23:58

bruh

23:58

Image attachment

sahuang

joined on main

how

phone + data

23:59

cant see it on PC still

ok it its working on mobile

yeah

but it is slow

00:00

my 4g

00:00

lol

00:00

i see the metadata but no page

bruh

Image attachment

fuck

ok there are hidden channels

they are catching up

00:01

nice

dree — Today at 12:01 AM @everyone there is an issue with the last part of the chal, please wait 10 mins before proceeding

00:01

lmfao

00:01

last part of the series was good until discord part

s0llym41n3006 #6515

00:02

osint this guy'

chall has issue

00:02

they announced it

Image attachment

00:02

imgs has messages

oh

00:02

cant see them tho

00:02

what image has msg

imgs channel has messages

00:03

need betterdiscord and this plugin

o ok

https://github.com/JustOptimize/return-ShowHiddenChannels

the fuck

not gonna download thats against tos

00:03

bro who the fuck is corey

00:03

i thnk that's all we need

Image attachment

can you increase the tab size

00:03

so we can see

00:04

the full size

00:04

"tniso university"

00:04

not a real school

Deleted User

"tniso university"

it's just osint university lol

prob they gonna fix the images stuff

00:06

can that plugin see topic

oh

00:07

we need to find corey lol

idts

00:08

dont even know any handle

00:09

bruh no way

00:09

twitter sucks lol

00:09

i clicked BM link on better discord and this is what showed me when opened twitter

00:09

Image attachment

00:10

never saw BD tweet on my timeline before

doesn't happen to me

00:10

they don't secretly subscribe you

no idea

https://pastebin.com/GYJvaUNe

"rocket jumper" dude uses lame rocket jumping server for schoolwork...

Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.

00:13

@here

00:13

lead

00:13

lol we were on the right track

00:13

regardless

yeah

00:13

where you found this url

where did you get it?

Image attachment

how did we check hidden channel?

sherlcok

crazyman ai

how did we check hidden channel?

betterdiscord

oh

00:14

sherlock

00:14

whats coil one

broken link

00:14

dw

00:14

some websites just return false positive

k then, tniso university

sherlock "tniso university"

lol no

"tniso univeristy"

ok

00:15

let me try

00:15

it will not return anythign lol

hmm

yeah empty

can't find anything with this, no linkedin page (edited)

lol nsfw website

Image attachment

00:18

wtf

ask if "univeristy" typo is intended

nah they wont provide anything (edited)

wut

ask if challenge is still working, cuz they said wait for 10 minutes for update @Deleted User

00:19

ah

00:19

changed wording

00:19

there is an issue with the last part of the chal, please wait until this msg is deleted before proceeding

if they don't provide then it is intended

wait till msg deleted lol

00:19

gonna sleep

wasting so much life on these shit challs, meh

yeah lmfao

00:20

first part is ok

00:20

u come in at worst part

Guesslemonger

wasting so much life on these shit challs, meh

$$$$$$$

00:20

yeah other parts are crazy good (edited)

00:20

this one idk

00:20

pretty sneaky

they have too many challs

but once it gets to discord it goes from like 8/10 to 4/10

00:20

and requires plugins

ye

is there anything in channel topic?

00:21

probably important

no

00:22

wait till they delete the msg lol

https://www.youtube.com/watch?v=EayT0D66Z9w

How to view Hidden Channels on Discord (WORKING 2023)

pretty sure not solvable from here

ok

00:22

ill wait for thing to disappear

hmmm

00:33

i have an easy question

00:33

if i have a discord bot but it's not me

00:33

how to invite it to my own discord group

@Deleted User

00:35

he deleted the msg

ok

00:35

@Guesslemonger check threads

check hidden channels and topics

ye

there is nothing changed in server

topics in hidden thread?

you can't see any content in hidden channels

not content

00:38

topics

yeah

00:38

topic

these

00:38

Image attachment

00:38

"Central chat..."

00:39

@Guesslemonger anything?

00:42

bruh

00:43

dude's out eating lunch

00:43

hell do you want me to install betterdiscord

hmmm

that's the only lead we have rn

00:43

it's prboblaby only path from here

i install betterdiscord and install the plugin

00:43

but nothing work to me

let me see?

00:43

i mean battlemonger has it working he just doesnt reply

Image attachment

did you follow tutorial?

00:44

https://www.youtube.com/watch?v=EayT0D66Z9w

How to view Hidden Channels on Discord (WORKING 2023)

Image attachment

try ctrl + r

worked

00:45

but seems nothing

content?

00:45

screenshot

00:45

#imgs is new

00:45

from screenshot on pastebin (edited)

Image attachment

00:45

it seems blocked

yes

00:46

Image attachment

00:46

look at the top

00:46

does it say anything

00:46

over here

Image attachment

Image attachment

up at the top

00:46

lol

00:47

there should be something

00:47

@crazyman ai ?

Image attachment

00:48

seems Nothing

i installed too

lmao

nothing

they updated it to not show topics

yeah

it should

i think so

we need channel topic

00:49

that's our only lead

dont think its in topic

i think so

Image attachment

00:49

see how it doesnt have this lock on the right

00:50

they're using different version of betterdiscord plugin (edited)

00:50

i think neil has it

00:50

oh nvm

Image attachment

00:50

it has no topic then

00:50

wtf

00:50

@sahuang can you try making a dummy channel with topic

00:50

to see if it works

k

00:51

Image attachment

00:52

under bookmark

screenshot the hidden channel section

Image attachment

lol

00:52

make a topic (edited)

00:52

pls

00:53

and screenshot the page

i did

Embedded image

00:53

this

Image attachment

00:53

i think discord disabled viewing topic

00:53

patched that

no

00:53

its beacuse you have permission

00:53

to view that

00:53

lmao

00:54

here

00:54

make dummy server

wdym lol

where ur not admin

00:54

here ill take away your role in the aresx server

00:54

and try to view the channel (edited)

i mean u have better discord, no?

i dont

00:54

thats why im asking you

i cant see topic on the chall server

00:54

i have bd

00:54

Image attachment

00:54

what u need

go to aresx

sahuang

i cant see topic on the chall server

thats because there is no topic

yeah

there is a channel called test

00:55

screenshot ur discord when you view it

Image attachment

00:55

oh ok

00:55

yeah i can see topic

see

00:55

there is no topic

00:56

is there topic in any of the three?

00:56

if there isnt then we are lost lol

no

https://cdn.discordapp.com/attachments/1085911652085551114/1085911678811643964/Screenshot_2023-03-16_075249.png

00:56

this is what they put

only imgs channel has

Image attachment

1085911652085551114 this is channelid

last msg

00:57

also ask if univeristy is typo

1085911678811643964 is messageId

sahuang

only imgs channel has

can you right click the channel

00:57

and do copy id

00:57

to see which channel the Screenshot is in

1085911652085551114 is imgs channel

what are other channels

ah ok so they put that screenshot in imgs

00:58

make sense

1084397220113166417

so it has discord url link

1084401641601638430

other 2 channels have no message

00:59

i think

00:59

no last msg sent reminder

yeah

Screenshot_2023-03-16_075249.png

so the only important one is imgs

given that pastebin, our goal is to reseatch on those 2 channel names

now we're stuck lol

that imgs contains the pastebin url

00:59

not useful

is it data is 2023/3/16 6:05:19 AM?

and corey lol

not needed

01:00

it is for that pastebin

wdym

the #imgs channel is useless

01:00

author needs a place to put the discord url inside pastebin so he created one

ok

01:00

so research osint university

and it is not even in pastebin url

with misspell

can you send the pastebin url

and corey

the url inside

https://pastebin.com/GYJvaUNe

"rocket jumper" dude uses lame rocket jumping server for schoolwork...

Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.

01:01

https://cdn.discordapp.com/attachments/1085911652085551114/1085911678811643964/Screenshot_2023-03-16_075249.png

(edited)

Embedded image

sahuang pinned a message to this channel. 03/18/2023 1:01 AM

pretty sure this is the info we need for next step

01:01

no distractions

01:02

author was fixing the last step

01:02

lmao its blooded

wtf

01:02

rip

we only need those 3 strings

01:03

corey, tniso univeristy (edited)

01:03

probably

oh

01:03

those are not real words

yeah

not what3words lol

@rubiya wants to collaborate

no results found for any

01:04

on google and yandex

that wolf guy is on server, he blooded it so pretty sure we on right track

ofc

and that img is the key

01:05

cuz betterdiscord not useful

01:05

they gave us info needed

true

01:05

they said we dont need to download anything

Maybe we need to check the relationship between msgid and time

No games or programs need to be downloaded, or users messaged

01:06

no programs

01:06

so thats all we need

if 2023/3/16 6:05:19 AM can equal to 1084397220113166417

thats taken with snipping tool

01:06

it has that specific screenshot thingy

01:06

figure out the last string

yeah its a screenshot

01:06

not useful

Image attachment

01:06

last numbers represent time of some sorts

01:06

i guess seconds?

yeah something like that

01:07

dont think its needed to solve this one

Maybe we can construct the corresponding image and then access

??

01:07

wdym

01:07

brute url?

prob not

not

impossible because msg id (edited)

01:07

rip

01:09

Image attachment

01:09

maybe this is it

01:09

not sure

01:09

lol

01:09

Image attachment

19 bits (nanoseconds)

ok not relevant

01:10

idk why it has TNISO university

01:10

wtf

01:11

ok gn

01:11

gl @Guesslemonger @crazyman ai

yeah no idea

01:18

@Violin any idea on pinned img

solved

hmmmm

02:17

how?

crazyman ai

used /ctf solve

✅ Challenge solved.

02:18

✅ Challenge unsolved.

i searched in linkedin filter corey and michigan university

02:24

sutx is dead, rate limited

Guesslemonger

used /ctf solve

✅ Challenge solved.

hmmmm

linkedin wtf

looking at linkedin if company/uni info is given is natural

i tried that

05:16

but thought its tniso uni

05:16

05:16

so no result

Wow that was smart looking at git commit

1

@Legoclones could you help me find this linkedin that BM is talking about lol

14:39

for the writeup

we are doing unsolved challs lol

lmao later ofc (edited)

yeah, just ping me after

https://www.linkedin.com/in/corey-jacobs-37a49426a

00:58

it is indeed TNISO

00:58

didnt search on linkedin yesterday

ty

Exported 925 message(s)