Just finished this challenge… got to say, it gave me a run for my money for a day where I went through the wrong rabbit hole xD - still, the ‘eureka’ moment that hit me was awesome…
As a hint of this, I’ve already seen it so far, maybe I can make it more explicit… think of the process you go through when connecting to ssh… then look closely at the folder structure of the zips (use tree if needed )
Keep in mind that this is OSINT … everything you find can give you some information… just look carefully through everything you find. Imagine this would be a real life scenario and those aren’t actual fake accounts with stock photos.
I’m stuck on finding the password.zip, I have the default password and information on the accounts looking for a pattern. Need a nudge on what more information I’m missing.
Edit: Got it, just needed to step away
I found the door, I got the username, all I need is the key.
I am not able to extract password.zip because it is corrupted due to missing archives. I don’t know what to do with the file. I am looking for something that I can use with SSH like a password or public key, but don’t see it on social media.
Could really use a hint or some help on the username.zip password… I believe I found the correct new user and the default password, but none of iterations I’m using seem to be working.
Stuck on password.zip. I have the profile and found the images, but I think I’m overthinking it. I also have never played ____, so if that’s assumed knowledge then I’ll really need a nudge in the right direction. I’d appreciate a PM and I can tell you what I have so far.
Finally! That was kind of a leap. I only was able to get there by completing Breach before this. PM me if you need a nudge. If you haven’t done so already, give Breach a shot. If you are stuck on password.zip like I was you probabaly are missing that same thing. Thank you @greenwolf
Stuck on password.zip. I have the profile and found the images, but I think I’m overthinking it. I also have never played ____, so if that’s assumed knowledge then I’ll really need a nudge in the right direction. I’d appreciate a PM and I can tell you what I have so far.
I just finished the challenge, I think you are overthinking like me. All you need is in SuperSecStartup twitter feed. If you still need a nudge to let me know.
i think im overthinking on username.zip
i look on twitter account and tried what ı found but cant open the zip
I’m in the same boat. Found 4 related twatter accounts (1 x corp, 3 user), and an email address but can’t join the dots from there… (Am I right in thinking the domain name from the email address isn’t related to the challenge, even though it resolves?)
edit - got it. The pieces seemed to fall into place after a night’s sleep!
I’m stuck on username.zip… I found the twitter pages of the company and 4 links to it. Got the mail address and default ssh pw. Can someone give me a nudge?