WriteUp OSINT Challenge SecurityBlue.Team

Solving OSINT challenge

Initial information
Twitter handle used by actor: @sp1ritfyre

Googling with keyword “Sp1ritFyre” and found redhunt.net domain

Domain redhunt.net got the same picture as on sp1ritfyre Twitter account

In contact page (redhunt.net/contact/) there is a password protected content

Look for redhunt.net historical TXT data using securitytrails.com and found this hexadecimal 70 61 73 73 3a 32 71 33 34 73 65 72 64 74 66 79 76 67 75 68 62 30 30 39 69 75 68 6a 62

Convert that hexadecimal to text and found p a s s : 2 q 3 4 s e r d t f y v g u h b 0 0 9 i u h j b

So the password is 2q34serdtfyvguhb009iuhjb

Enter that password to redhunt.net/contact/ and found email d1ved33p@gmail.com

Googling with keyword “d1ved33p@gmail.com” and found a blogspot page called sammiewoodsec.blogspot.com

The complete profile url
https://www.blogger.com/profile/16540060306570410038

On the blogspot there is an article about the blog author here
https://sammiewoodsec.blogspot.com/2019/06/how-i-got-into-cyber-security-hey.html

Input that informations to the challenge form

Terima kasih :)