WhiteHacks CTF Writeup - The Cake is Still Tick-Tocking

Category

OSINT

Flag

WH2021{*/}

Steps

Read the description. It reads:

Now that we found out when his birthday is, we need to find out his favourite cake! He might have other social media. Not really sure though, he never mentioned it to me. The only thing I know is that he said he often vlogged somewhere. Hint: Try checking out all the common social media platforms where he can do and submit vlogs. Note: Making any contact with the person is out of scope.

Filter keywords out. They are:

Now that we found out when his birthday is, we need to find out his favourite cake! He might have other social media. Not really sure though, he never mentioned it to me. The only thing I know is that he said he often vlogged somewhere. Hint: Try checking out all the common social media platforms where he can do and submit vlogs. Note: Making any contact with the person is out of scope.

Find the format of flag they want. It seems like it can be anything.

We are trying to find Andrew’s favourite cake. So it could be the design of cake, type of cake, flavour of cake, etc.

Andrew also vlogs. One vlogging platform that immediately comes to mind will be YouTube. But a quick search on YouTube and filtering for channels yields no favourable results. Screenshot is below:

Figure 1: Screenshot of YouTube search result

Let us revisit the title of the challenge. It is “The Cake Still Tick-Tocking''. Doesn’t this ring a bell? The adjective in the title “Tick-Tocking'' is used to describe people who use and make TikToks. Let us go to tiktok.com and search for Andrew’s account using his Twitter handle/username. Screenshot is below:

Figure 2: Andrew;s TikTOk Profile

That’s good! Now let’s see what video he has been making. It seems he only posted 1 public video. Screenshot is below:

Figure 3: Screenshot of Andrew's videos

Let us watch the video! I cannot attach a video here, I have hyperlinked the video here. Click and watch it closely!

Towards the end of the video, the flag shows up on the screen. Pause using the space key on your keyboard to decrease reaction speed. Screenshot is below:

Figure 4: Screenshot of the flag

Going back to the CTF website, key in the flag according to the given format - WH2021{Ch0c0_L4V4_1s_b3$t}.

Done! Flag captured :)

Beanary over and out!