sameer fakhoury
  • Home
  • CTF Writeups
  • Course Summaries
  • Cyber Reports
  • Articles
  • Event Notes
  • About Me
Mama y Papa

Mama y Papa

  • Alejandro has been seen as an easy mark for DEADFACE. Do a sweep of his social media to see what information DEADFACE was able to gather on Alejandro. Scroll through Alejandros Social media to find out the name of his father and mother.
  • Submit the flag as: flag{father<3mother}. Example: flag{John<3Susan}.
  1. this question have taken some time with me to solve it → I used multiple google dorks and searched manually in many social media account but didn't get any result
  2. lastly i used this google search term → inurl:deadface intext:alejandro
    • i used this google search for the following reasons :
      • inurl:deadface → Do a sweep of his social media to see what information DEADFACE was able to gather
        • as we see in the question the information that is gathered is on social media publicly and DEADFACE gathered it
      • intext:alejandro → here i used it that by default the name will be in the body
      image
    • lets see this website
  3. lets open this website → https://ghosttown.deadface.io/t/tgri-and-lytton-labs/96
    1. image
    2. as we see it’s for DEADFACE members that is used to chat
  4. Search for Alejandro in the search bar
  5. image
    image
  6. lets visit his Facebook → https://www.facebook.com/people/Alejandro-Rodriguez/100092649204317/
    • i searched in his posts and saw this post that may be related
    • image
  7. going back to → https://ghosttown.deadface.io/t/tgri-and-lytton-labs/96
    1. image
    2. lets search in Instagram
  8. i used Alejandro Rodriguez but i have huge amount of users os i used this search term → Alejandro Ricardo Montoya de la Rosa Rodriguez the same in his Facebook Intro
  9. image
  10. lets search in his Instagram profile
    1. image
    2. 21 anniversary → is the same as in his Facebook post
  11. let’s check this photo
  12. image
  13. flag{Carmelo<3Delfina}

©sameer fakhoury

GitHubLinkedIn