Write-ups
Personal WebsiteGithubLinkedIn
  • Home
  • Blue Team Labs Online
    • ATT&CK
    • D3FEND
    • Log Analysis - Privilege Escalation
    • Meta
    • Network Analysis – Web Shell
    • Shiba Insider
    • The Planet's Prestige
    • The Report
  • bWAPP
    • HTML Injection - Reflected (GET)
    • HTML Injection - Reflected (POST)
    • HTML Injection - Reflected (URL)
    • HTML Injection - Stored (Blog)
    • iFrame Injection
  • Command Challenge
    • Command Challenge
    • Oops I deleted my bin/ dir :(
    • Twelve Days of Shell
  • CryptoHack
    • General
      • Encoding
        • ASCII
        • Hex
        • Base64
        • Bytes and Big Integers
      • XOR
        • XOR Starter
        • XOR Properties
        • Favourite byte
      • Mathematics
        • Greatest Common Divisor
        • Extended GCD
  • CSAW 2023
    • Baby's First
    • Baby's Third
    • my_first_pwnie
    • target_practice
  • CTFLearn
    • Binary
      • Simple bof
    • Cryptography
      • 5x5 Crypto
      • Base 2 2 the 6
      • Character Encoding
      • Substitution Cipher
      • Tux!
    • Forensics
      • Forensics 101
      • Git Is Good
      • PDF by fdpumyp
      • Pho Is Tasty!
      • PikesPeak
      • Simple Steganography
      • Taking LS
      • WOW.... So Meta
  • CyberDefenders
    • BlackEnergy
    • Emprisa Maldoc
    • HawkEye
    • HoneyBOT
    • Insider
    • Obfuscated
    • PacketMaze
    • RE101
    • Redline
    • XLM Macros
  • DVWA
    • Brute Force
    • Command Injection
    • CSRF
    • SQL Injection
    • SQL Injection (Blind)
    • Weak Session IDs
    • XSS (DOM)
    • XSS (Reflected)
    • XSS (Stored)
  • Ethernaut
    • 00 - Hello Ethernaut
  • Exploit Education
    • Protostar
      • Stack Zero
      • Stack One
      • Stack Two
      • Stack Three
      • Stack Four
      • Format Zero
  • Google CTF - Beginner's Quest
    • 0000
    • 1837
    • 1943
    • 1965
    • 1987
    • 1988
    • 1989
    • 1990
    • 1994
  • Hacker101
    • Postbook
  • LetsDefend
    • DFIR
      • Phishing
        • Email Analysis
        • Phishing Email
  • Microcorruption
    • New Orleans
    • Sydney
    • Hanoi
    • Reykjavik
    • Cusco
  • NetGarage IO
    • level 1
    • level 2
  • OverTheWire
    • Bandit
  • PicoCTF
    • Forensics
      • information
    • Binary Exploitation
      • Stonks
    • Web Exploitation
      • Cookies
      • dont-use-client-side
      • GET aHEAD
      • Includes
      • Insp3ct0r
      • Insect HTML
      • login
      • where are the robots
  • PortSwigger labs
    • Client-side topics
      • Cross-site scripting (XSS)
        • Reflected XSS into HTML context with nothing encoded
        • Stored XSS into HTML context with nothing encoded
        • DOM XSS in document.write sink using source location.search
        • DOM XSS in innerHTML sink using source location.search
        • DOM XSS in jQuery anchor href attribute sink using location.search source
        • DOM XSS in jQuery selector sink using a hashchange event
        • Reflected XSS into attribute with angle brackets HTML-encoded
        • Stored XSS into anchor href attribute with double quotes HTML-encoded
    • Server-side topics
      • SQL injection
        • SQL injection vulnerability in WHERE clause allowing retrieval of hidden data
        • SQL injection vulnerability allowing login bypass
        • SQL injection attack, querying the database type and version on Oracle
        • SQL injection attack, querying the database type and version on MySQL and Microsoft
        • SQL injection attack, listing the database contents on non-Oracle databases
        • SQL injection attack, listing the database contents on Oracle
        • SQL injection UNION attack, determining the number of columns returned by the query
        • SQL injection UNION attack, finding a column containing text
        • SQL injection UNION attack, retrieving data from other tables
        • SQL injection UNION attack, retrieving multiple values in a single column
      • Authentication
        • Username enumeration via subtly different responses
        • Password reset broken logic
        • Username enumeration via different responses
        • 2FA simple bypass
      • Path traversal
        • File path traversal, traversal sequences stripped non-recursively
        • File path traversal, traversal sequences blocked with absolute path bypass
        • File path traversal, simple case
        • File path traversal, traversal sequences stripped with superfluous URL-decode
        • File path traversal, validation of start of path
        • File path traversal, validation of file extension with null byte bypass
      • Command injection
        • Blind OS command injection with output redirection
        • OS command injection, simple case
        • Blind OS command injection with time delays
      • Business logic vulnerabilities
        • Flawed enforcement of business rules
        • Excessive trust in client-side controls
        • Inconsistent security controls
        • High-level logic vulnerability
      • Information disclosure
        • Authentication bypass via information disclosure
        • Source code disclosure via backup files
        • Information disclosure on debug page
        • Information disclosure in error messages
      • Access control
        • Referer-based access control
        • Multi-step process with no access control on one step
        • Insecure direct object references
        • URL-based access control can be circumvented
        • Method-based access control can be circumvented
        • User ID controlled by request parameter with password disclosure
        • User ID controlled by request parameter with data leakage in redirect
        • User ID controlled by request parameter, with unpredictable user IDs
        • User ID controlled by request parameter
        • User role can be modified in user profile
        • Unprotected admin functionality with unpredictable URL
        • Unprotected admin functionality
        • User role controlled by request parameter
      • Server-side request forgery (SSRF)
        • Basic SSRF against another back-end system
        • Basic SSRF against the local server
        • SSRF with blacklist-based input filter
      • XXE injection
        • Exploiting XXE to perform SSRF attacks
        • Exploiting XXE using external entities to retrieve files
  • Pwn College
    • Assembly Crash Course
    • Building a Web Server
    • Cryptography
    • Debugging Refresher
    • Intercepting Communication
    • Memory Errors
    • Program Interaction
    • Program Misuse
    • Reverse Engineering
    • Sandboxing
    • Shellcode Injection
    • Talking Web
    • Web Security
  • pwanable.kr
    • fd
    • random
  • Root Me
    • App - System
      • ELF x86 - Stack buffer overflow basic 1
    • Web - Client
      • HTML-disabled buttons
      • Javascript - Authentication
      • Javascript - Source
      • Javascript - Authentication 2
      • Javascript - Obfuscation 1
      • Javascript - Obfuscation 2
      • Javascript - Native code
    • Web - Server
      • HTML - Source code
      • HTTP - IP restriction bypass
      • HTTP - Open redirect
      • HTTP - User-agent
      • PHP - Command injection
      • HTTP - Directory indexing
      • HTTP - Headers
      • HTTP - POST
      • HTTP - Improper redirection
      • HTTP - Verb tampering
      • Install files
  • ROP Emporium
    • ret2win
    • split
  • TryHackMe
    • Easy
      • Agent Sudo
      • Anthem
      • Archangel
      • Bounty Hacker
      • Brooklyn Nine Nine
      • Brute It
      • c4ptur3-th3-fl4g
      • Chill Hack
      • Crack the Hash
      • CTF collection Vol.1
      • Cyborg
      • Fowsniff CTF
      • GamingServer
      • h4cked
      • LazyAdmin
      • Lian_Yu
      • OhSINT
      • Overpass
      • Pickle Rick
      • RootMe
      • Searchlight - IMINT
      • Simple CTF
      • Startup
      • Sudo Security Bypass
      • tomghost
      • Wgel CTF
      • Year of the Rabbit
    • Medium
      • Anonymous
      • ConvertMyVideo
      • UltraTech
  • Under The Wire
    • Century
    • Cyborg
  • W3Challs
    • Web
      • Change your browser
  • Websec.fr
    • level01
    • level04
    • level17
    • level25
    • level28
Powered by GitBook
On this page
  • Task 1: Welcome to the Searchlight IMINT room!
  • Did you understand the flag format?
  • Answer
  • Task 2 Your first challenge!
  • What is the name of the street where this image was taken?
  • Answer
  • Task 3 Just Google it!
  • Which city is the tube station located in?
  • Answer
  • Which tube station do these stairs lead to?
  • Answer
  • Which year did this station open?
  • Answer
  • How many platforms are there in this station?
  • Answer
  • Task 4: Keep at it!
  • Which building is this photo taken in?
  • Answer
  • Which country is this building located in?
  • Answer
  • Which city is this building located in?
  • Answer
  • Task 5: Coffee and a light lunch
  • Which city is this coffee shop located in?
  • Answer
  • Which street is this coffee shop located in?
  • Answer
  • What is their phone number?
  • Answer
  • What is their email address?
  • What is the surname of the owners?
  • Answer
  • Task 6: Reverse your thinking
  • Which restaurant was this picture taken at?
  • Answer
  • What is the name of the Bon Appétit editor that worked 24 hours at this restaurant?
  • Answer
  • Task 7: Locate this sculpture
  • What is the name of this statue?
  • Answer
  • Who took this image?
  • Answer
  • Task 8: ...and justice for all
  • What is the name of the character that the statue depicts?
  • Answer
  • where is this statue located?
  • Answer
  • What is the name of the building opposite from this statue?
  • Answer
  • Task 9: The view from my hotel room
  • What is the name of the hotel that my friend stayed in a few years ago?
  • Answer

Was this helpful?

  1. TryHackMe
  2. Easy

Searchlight - IMINT

Last updated 1 year ago

Was this helpful?

Task 1: Welcome to the Searchlight IMINT room!

Did you understand the flag format?

Answer

sl{ready}

Task 2 Your first challenge!

What is the name of the street where this image was taken?

  • The image was taken at Carnaby Street, London.

Answer

sl{Carnaby Street}

Task 3 Just Google it!

Which city is the tube station located in?

  • On searching for underground Public Subway we can see a Wikipedia article that tells us the name of the city.

Answer

sl{London}

Which tube station do these stairs lead to?

  • The particular tube station is in Piccadily Circus.

Answer

sl{Piccadily Circus}

Which year did this station open?

  • The answer can be found pretty quickly on Google.

Answer

sl{1906}

How many platforms are there in this station?

Answer

sl{4}

Task 4: Keep at it!

Which building is this photo taken in?

  • We can see the phrase YVR on the board.

  • Let's see what that stands for.

Answer

sl{Vancouver International Airport}

Which country is this building located in?

Answer

sl{Canada}

Which city is this building located in?

  • Even though it is called Vancouver International Airport, it is not located in the city of Vancouver as seen in the image below:

Answer

sl{Richmond}

Task 5: Coffee and a light lunch

Which city is this coffee shop located in?

  • We know that the shop is located in Scotland and we can see that the shop right opposite to it is called Edinburgh Woollen Mill.

Answer

sl{Blairgowrie}

Which street is this coffee shop located in?

  • Let's open Google Maps and go to 3D view.

  • We can see the street name on the top of the coffee shop.

Answer

sl{Allan Street}

What is their phone number?

  • We can see the phone number listed.

Answer

sl{+447878839128}

What is their email address?

  • In order to find the email address, we have to go tot he Facebook page of the coffee shop.

sl{theweecoffeeshop@aol.com}

What is the surname of the owners?

  • There is an article by Barba.co.uk that lists out the names of the owners.

Answer

sl{Cochrane}

Task 6: Reverse your thinking

Which restaurant was this picture taken at?

  • Let's reverse image search using Google Lens.

Answer

sl{Katz's Deli}

What is the name of the Bon Appétit editor that worked 24 hours at this restaurant?

  • We can find the article that mentions the name of the editor.

Answer

sl{Andrew Knowlton}

Task 7: Locate this sculpture

What is the name of this statue?

  • If we search for motorcycle reindeer sculpture and click on the first article, we can find the name of the sculpture.

Answer

sl{Rudolph the Chrome Nosed Reindeer}

Who took this image?

  • On going to the VisitOslo site and searching for Rudolph the Chrome Nosed Reindeer, we can see the following article.

  • If we go to the article we can find an embedded map that shows all the sculptures in Oslo.

  • Let's look for Rudolph.

Answer

sl{Kjersti Stensrud}

Task 8: ...and justice for all

What is the name of the character that the statue depicts?

  • The image is depicting Lady Justice.

Answer

sl{Lady Justice}

where is this statue located?

  • Let's reverse image search using the image.

  • If we click on the article by the Public Art Archive, we get the following details:

  • So the sculpture is located at the Virginia Eastern District Court in Alexandria, Virginia.

Answer

sl{Alexandria, Virginia}

What is the name of the building opposite from this statue?

  • Let's view the court in Google Map's 3D view.

  • We can easily see the building opposite by turning the camera around.

Answer

sl{The Westin Alexandria Old Town}

Task 9: The view from my hotel room

What is the name of the hotel that my friend stayed in a few years ago?

  • If we take the 13th frame from the video we can see the following:

  • A quick reverse image search tells us that the picture is of the Riverside Point in Singapore.

  • On Google Maps we can find the name of the hotel from which the photo was take.

Answer

sl{Novotel Singapore Clarke Quay}
TryHackMe | Searchlight - IMINTTryHackMe
Logo