Simple OSINT treasure hunt challenge

I created a simple treasure hunt challenge for young InfoSec enthusiasts and professionals. It's mainly OSINT with some very basic crypto and a tactical story. No real prize except bragging rights and mentions if you choose so. 

No details collected and you can choose whether to submit the final solution.
The challenge starts on my Linkedin profile https://www.linkedin.com/in/spirovskibozidar/

The challenge will be active until the end of October 2018, after which a full writeup will follow.

Also, ideas for the next challenges are greatly appreciated :)

Popular posts from this blog

Essential Management Semantics - Responsible vs Accountable

I've had a discussion at the office about who is responsible for a certain activity. And as expected, the junior colleagues got into a discussion of who is more and who is less responsible for the activity. The Information Technology Infrastructure Library ( ITIL ) defines two distinct roles:  Responsible and Accountable If you open Websters dictionary ( www.websters.com ) and look up the adjective " responsible " you get the following description: answerable or accountable, as for something within one's power, control, or management If you do the same for " accountable " here is what you get: subject to the obligation to report, explain, or justify something; responsible; answerable . It is a common sense to assume that "accountable" and "responsible" are synonyms. But both in Management and IT their meaning differs slightly and that makes all the difference: Accountable is the PERSON  (singular) who answers for
Read more

Steganography - Passing through the defenses

Image
Steganography is still considered to be a part of the obscure tools of secret agents and corporate spies. However, steganography tools are widely available, and anyone can use them. Most of these tools are now available online. But a lot of systems currently perform some form of resampling or filtering of images. This poses an interesting challenge -  how survivable is steganography in filters? This also gave us a great reason to publish another set of pictures (albeit cropped) of Lena Söderberg ;) Here is our original image Proposed Counter-Steganography System The filter system will need to be cost-effective, minimally intrusive and not prone to error. Since there may be many different steganography alghorithms, the filter system should not try to read such messages. Doing so will require an entire farm of filter servers. Instead, the systems will resort to a much simpler mechanism: Modify all passing images so that the original hidden data is compromised. Use only minute c
Read more

Cracking a TrueCrypt Container

Image
This week i tried to open an old TrueCrypt container. It turned out that i had forgotten the password. So I endeavored into the realm cracking the TrueCrypt container. Here are my experiences The problem I have a TrueCrypt container in which i hold my personal documents. The container is created with TrueCrypt 6.1a. Since i haven't been using the documents for a while, the password slipped from my mind. I a moment of desperation I tried to crack the password. The preparation To automate the process, I used the true.crypt.brute tool in version 1.9b. It is a very straightforward tool to use, but it has one drawback - it tries to crack based only on a pregenerated wordlist. That means that you need to generate your possible passwords list and let it rip. First, i created a simple encrypted volume with a 2 character password to check the software. It went through 819 passwords within 45 seconds and decrypted the password. This would mean that the brute force crack would run
Read more