2.OhSINT

WindowsXP_1551719014755
题目给了一张图片

1. What is this user's avatar of?

┌──(root㉿kali)-[~/Desktop/THM/OhSINT]
└─# exiftool WindowsXP_1551719014755.jpg 
ExifTool Version Number         : 13.10
File Name                       : WindowsXP_1551719014755.jpg
Directory                       : .
File Size                       : 234 kB
File Modification Date/Time     : 2025:03:09 00:29:12-05:00
File Access Date/Time           : 2025:03:09 00:34:02-05:00
File Inode Change Date/Time     : 2025:03:09 00:34:01-05:00
File Permissions                : -rw-------
File Type                       : JPEG
File Type Extension             : jpg
MIME Type                       : image/jpeg
XMP Toolkit                     : Image::ExifTool 11.27
GPS Latitude                    : 54 deg 17' 41.27" N
GPS Longitude                   : 2 deg 15' 1.33" W
Copyright                       : OWoodflint
Image Width                     : 1920
Image Height                    : 1080
Encoding Process                : Baseline DCT, Huffman coding
Bits Per Sample                 : 8
Color Components                : 3
Y Cb Cr Sub Sampling            : YCbCr4:2:0 (2 2)
Image Size                      : 1920x1080
Megapixels                      : 2.1
GPS Latitude Ref                : North
GPS Longitude Ref               : West
GPS Position                    : 54 deg 17' 41.27" N, 2 deg 15' 1.33" W

发现版权所有者是 OWoodflint
谷歌搜索后可以发现作者的X账户
Pasted image 20250309135943
查看用户头像可以发现是一只 哈吉米

2. What city is this person in?

查看说说
Pasted image 20250309140137
获取到了一个wifi的Bssid
到这个网站查找位置
Title Unavailable | Site Unreachable

在谷歌搜索的时候还发现他有一个Github账户
Pasted image 20250309145215
这里提到他来自London

3. What is the SSID of the WAP he connected to?

使用BSSID 到wigle上去进行高级查找即可
Pasted image 20250309151219

4. What is his personal email address?

github上面有

5. What site did you find his email address on?

github

6. Where has he gone on holiday?

github上发现了他的一个wordpress网站
Pasted image 20250309150632
提到了他在纽约

7. What is the person's password?

发现他把密码用白色字体写在了主页上
选中可以发现
Pasted image 20250309150805