#osintindustries
7 writeups ·all writeups
A Taste of Influence, Part 1 — The Flag in the Avatar
A ten-second solve of the OSINT challenge A Taste of Influence Part 1: the flag was in the Gronda profile picture, and the stylised logo pins the year.
A Taste of Influence, Part 2 — Name to Registrant Record
Part 2 of the A Taste of Influence OSINT challenge: name to city to business project to a pre-GDPR WHOIS record, and why the phone number is the part that matters.
A Taste of Influence, Part 4 — Finding the Strava Account
The final part of the A Taste of Influence OSINT challenge: finding a subject's Strava account through public athlete search, and disambiguating on the profile photo.
READONLY — The Man Who Escaped Reality
A hand-drawn QR code carries two payloads: one is the vault, the other is the keys. The chain opens as a supermax jailbreak and closes somewhere much stranger.
Holehe & The Secret Email — Dating a ProtonMail Account via Its PGP Key
ProtonMail never publishes account creation dates. It publishes a PGP key for every address, and that key carries a timestamp — one HKP query away.
Nothing To See Here — PDF → Mastodon → SSTV → QR
A passive-OSINT challenge that chains white-on-white PDF text, an emoji substitution cipher, a Morse-tagged Robot 36 SSTV transmission and a QR code into a physical meeting location.
packet.bspak — Three Channels, Two Decoys, One Stereogram
Breaking a layered OSINT packet: binary-ASCII JSON, a QR code that isn't a QR code, and a Vocaroo spectrogram that hands you a Google Maps pin.