sameer fakhoury
  • Home
  • CTF Writeups
  • Course Summaries
  • Cyber Reports
  • Articles
  • Event Notes
  • About Me
Ramallah

Ramallah

Tags
  • I went on a vacation and visited one of the local restaurants it wasn't so bad so when I decided to visit this place again, I couldn't remember its name because it was written in Arabic, but I was so lucky I found a photo in my gallery of the place near that restaurant so can help me find that restaurant?
  • hint 1 → Password of the Flag.rar: ID of the restaurant
  • hint 2 → Find the restaurant profile ID on social media 
  • the question gave us a picture as shown down bellow and a .zip file that contains the flag so we need to answer the upper question to unlock the .zip file and grab the flag
  1. the first thing i did is to upload the image to google lens and check any related image but nothing worked
  2. then i tried to use the same methodology as in 0xl4ughCTF OSINT | CTF - Khan Yunis question to see related texts or elements in the same image
  3. image
  4. as we se we have بيتزا الملك related to a restaurant
  5. went to google maps to see related names but we had a lot of restaurant names with the same name
  6. but let’s go back to the same image as we see we have a train Infront of it and that's a good indication
  7. went back to the google maps to see a restaurant بيتزا الملك near a train
  8. image
  9. as we see i found a restaurant near a train → بنها شارع سعد زعلول امام محطه القطار، 13514, Egypt and it had the Facebook link that's a win
  10. going to the Facebook link we have → https://www.facebook.com/PitzaElmalek
  11. image
  12. the URL didn’t have the ID so i tried manually accessing the page source and check my results using this website https://findidfb.com/#
  13. image
  14. but didn’t work tried other restaurants or anything related but also failed so i open a ticket and said i need the profile ID not the page ID and the hint said → Find the restaurant profile ID on social media 
  15. so going to Facebook and checking people button to see profile by the Add friend button
  16. image
  17. here i went to see related images in each profile for the image we had in the question till i found the below image that it’s a profile not a page also it had features as the question image
  18. image
  19. let’s use that ID as the password for the .zip file → 100074221443968
  20. image
  21. flag → OSINT0xL4ugh{W0w_Malek_Elp1zz4_1s_am4z1n9}

©sameer fakhoury

GitHubLinkedIn