blog

downunderctf 2024

osint is gooood :))) More details


1. tldr pls summarise (Misc)

We are given a word document. After unzip EmuWar.docx, we get

emu1

In word/document.xml where they usually store/ tinker hard with stuff, we see something interesting. When we decode it base 64, we see

emu2

emu3


2. offtheramp (osint)

exiftool offtheramp.jpg

We get the GPS coordinates, which we can plonk them in google maps to see it’s in Nepean Hwy, Frankston South VIC 3199, Australia.

ramp1

The structure is this ramp.

ramp2


3. backtothejungle (osint)

Lesson learnt: open your eyes wide~

monkey1

monkey2

monkey3


4. cityviews (osint)

We were given a picture with the backdrop 3AW’s. It is located in Melbourne, Australia.

city

I’ve never stared at google maps so hard before.