sameer fakhoury
  • Home
  • CTF Writeups
  • Course Summaries
  • Cyber Reports
  • Articles
  • Event Notes
  • About Me
Lankdoon

Lankdoon

Category
OSINT
Content Type
-
Level
WarmUp
Wave
Onlinev2

Challenge Description

As an author for this competition, I was creating numerous accounts and pages. Unfortunately, mistakes happened one of which was accidentally making a flag visible to the public. This occurred while I was trying to add a volunteer section to reflect my role as an author. It felt like a race between you and me, who can get to it first either you grab it, or I do and remove the flag. Who’s quicker?

Challenge Solution

If we search for the username in google we can see that he have a website https://sameerfakhoury.com/ and LinkedIn account https://linkedin.com/in/sameer-fakhoury-67217426a

image

As per question, he said that he wanted to add a “volunteer section” and that’s common within LinkedIn platform, also the question name is some how related to LinkedIn as “Lankdoon“

Going to his profile https://www.linkedin.com/in/sameer-fakhoury-67217426a/, and moving forward to the “volunteer section”.

image
image

We can see the NCSC section and the flag presented NCSC{L1nk3d1n_S3m0_H@v3_Th3_Fl@G_L0L_h3_1s_Dump}

Challenge Idea

Player will search for the author name in the browser and go to his LinkedIn account to check the volunteering section, based on that he can take capture the flag, also the question name is some how related to LinkedIn

©sameer fakhoury

GitHubLinkedIn