Sourcing Game 7 — Writeups

Level 1: API Reconnaissance & Object Enumeration

Research about github rest api and use that to find the details

View Solution

2300056

Level 2: Text Stream Processing & Automated Directory Fuzzing

Process the text file and use fuzzer to check the response code

Process it using the command: sed 's|http://inovace.eu/url/||' url.txt > output.txt

Now use fuzzer to check it: ffuf -u 'http://inovace.eu/url/FUZZ' -w output.txt -r -mc 200

Correct Path: vkeb6uz6.html

View Solution

solution47

Level 3: Cryptographic Hash Analysis & De-hashing

hashcat and john the ripper could be used to crack it, while there are other online tools which are faster than these tools

Go to CrackStation

View Solution

games

Level 4: Breach Data Triage & Credential Intelligence

simply search on google and find it

Most common passwords: Common Passwords

View Solution

sunshine

Level 5: Advanced Search Operators (Google Dorking) — Profile Targeting

Don't use the experience (years of experience increase every year) and city parameters in a google dork

Dork Used: site:freelancer.com/u/ AND "Network+Engineer" AND "February 2017"

Profile Link: Freelancer

View Solution

lawrence37

Level 6: Advanced Search Operators (Google Dorking) — Asset Identification

Use the characterstics of the person for framing the google dork instead of using Austin in the dork

Dork Used: site:airbnb.com/rooms/ "San Francisco" AND "14 years hosting" AND "outdoor enthusiast"

Listing Link: AirBnB

View Solution

adam

Level 7: Niche Domain Profiling & Identity Sourcing

Reverse search for the type of image processing and frame a google dork to find him

Dork Used: site:stackoverflow.com/users/ "France" "hyperspectral image processing" "developer"

Profile Link: StackOverflow Profile

View Solution

6093326

Level 8: Programmatic Identity Resolution & API Querying

Use the previously used github rest api to find the username

Link Used: https://api.github.com/user/2314988

Checkout the login parameter of the returned JSON payload.

View Solution

vastrolorde