Post

Overheard at Breakfast

Two strangers. One conversation. One profile they never meant to reveal.

Overheard at Breakfast

image-1409

Scenario

image-1410

image-1411

Question

image-1412


Inspect file

After downloading the file and unzipping it, we get an image of a conversation between Ponzi and Lambo

image-1413

image-1414

This conversation hints at something for us. He mentioned a free tool that starts with G, and it allows you to upload a profile and link other media accounts.

and I think this relates to Gravatar, which allows platforms to display profile pictures by creating a unique MD5 hash of a user’s lowercase email address.

So, all we need to do is create an MD5 hash of Lambo’s email lambobytelotushotel@gmail.com and use it in the gravatar url.

image-1415

image-1416

image-1417

and we found Lambo’s profile

we got this from Lambo’s profile as a prize, so let’s decode it with base64

image-1418

and we got the flag!

DONE!!!


This post is licensed under CC BY 4.0 by the author.