OSINT
Mystery
Cipher/Password
Christmas
Coding
100

What is my middle name?

Joseph


if you go to the schools athletic page you can find it

100

What do these mean 


CSR

BGP

DEP

CYOD

Certificate Signing Request

Border Gateway Protocol

Data Execution Prevention

Choose Your Own Device


Google


100

VjFjd2VGWXdNVWhWV0d4UVYwZDRiMVJVUVRGak1XUlpXWHBzVVZWVU1Eaz0

networksec

Base64

100

What day was Christmas celebrated in 2002

Wednesday

100

Which company developed JavaScript?

Netscape Communications - OSINT

200

What rank is our schools entrepreneurship program undergrad?

31


Located either through google search or on the UTampa instagram

200

How many ports are open on

ports.cityinthe.cloud

5 ports are open

nmap ports.cityinthe.cloud

200

Hacker Nick seems to have messed with these characters, make it make sense, you will see


“csrhhyraaivsetmmear"

Have a Merry Christmas

I scrambled the position of the phrase above and used a caesar cipher - you would first need to try and decrypt it and realize that it had something to do with christmas then rearrange the letters by hand to figure out the message

200

Which popular Christmas beverage is also known as "milk punch"?

EggNog

200

Whats the second letter of this password


#!/usr/bin/python

import sys

def main():

  if len(sys.argv) != 2:

    print("Invalid args")

    return

  password = sys.argv[1]

  builder = 0

  for c in password:

    builder += ord(c)

  if builder == 1000 and len(password) == 10 and ord(password[1]) == 83:

    print("correct")

  else:

    print("incorrect")

if __name__ == "__main__":

  main()

S = 83 to ascii

300

What rank did I get on individual game NCL

416

My linkin - Go follow

300

Real-time confirmation in a pay-as-you-go Secrets Manager that any given request to perform an action is allowed by the various defined privileges refers to which of the following?

A - Accounting

B - Authentication

C - Approval

D - Authorization

In this case, the question is a more complicated form of asking what the difference is between authorization and authentication

Authorization


Dont overthink

300

6539bbb84fe2de2628fc5e4f2a31f23a

Crack it bro

ddmack

Rockyou.txt using hashcat

hashcat -a 0 -m 0 rockyou.txt wordlist.txt

300

In which Christmas movie does a young boy named Kevin

Home Alone

300

What number base is associated with this password?


import sys

def verify(submission):

    processed = [ ]

    if len(submission) % 2 != 0:

        return False

 for i in range(0, len(submission) / 2):

        processed.append(int(submission[i * 2] + submission[(i * 2) + 1], 16))

ekc = [ 0x53, 75, 0x59, 0x2D, 0110, 0x45, 88, 72, 0x2D, 0x35, 0x36, 0x38, 0x30 ]

    if len(processed) != len(ekc):

        return False

 for i in range(len(processed)):

        if ekc[i] != processed[i]:

            return False

base16 — look in the code

400

Hacker Nick was last seen around these coordinates 35.060845,-80.813937. We were able to find a note at his last hideout, see if it can help you find out where he is hiding.

I’m a traveler, but I never leave home,
I hide in a liquid, where I freely roam.
I can be black or white, though not quite a pearl,
My journey’s quite sweet in a swirling world.
What am I?


GongCha

There is a boba place called Gongcha around the area of the coordinates

400

When was the original date of the Tampa Police Memorial run?

Oct 12


This is located on the TampaPD instagram as well as googling

400

.-- .... . .-. . -.. .. -.. - .... --- -- .- … .. -. - . .-. -. .- -. -.. .-- .... .- - -.. .. -.. .... . -.. —

3 part

1. Where did thomas intern and what did he do

2. Connectwise

3. Product Management

Linkedin

400

What was the name of the department store in the movie Miracle on 34th Street?


Macys

400

What is this snippet of code being used for? 


def Find(self):
    f = open("logs/path.txt", "w")
        for root, dirs, files in os.walk("/"):
            # for root, dirs, files in os.walk("YOUR/TESTING/DIRECTORY"):
                if any(s in root for s in self.EXCLUDE_DIRECTORY):
                    pass
                else:
                    for file in files:
                        if file.endswith(self.EXTENSIONS):
                            TARGET = os.path.join(root, file)
                            f.write(TARGET+'\n')
                            print(root)
    f.close()

Ransomware

This function opens the text file path.txt, which the program uses to record all files found, and then loops over the three tuple -- the root directory, other directories and files -- returned by calling the os.walk() method.

500

Question Title - COO/CFO


Where does Nick Piscitelli work?

Zagwear

Not me, another Nick Piscitelli whose been a COO and CFO - google search

500

What was my most recent comment on “tampaspartans” instagram

Go Aidan Sims

Hint - I was a swimmer. You would need to do some more research for this one. Since I was a swimmer I would be more likely to comment on a post about swimming.

Its on a post of Aidan Sims on tampaspartans

500

IPHIUHEISNOTSF

Go for it

Skip cipher

ihopethisisfun

500

Which country did the tradition of the Christmas card originate in?


England

500

If you want to learn more...


I show you the secrets that code tries to hide,
With tools in your hand, I’m cracked open wide.
Static or dynamic, I’ll make you see,
The tricks of the trade, how deep they can be.

A guide to the art, for those who will dare,
To dissect and inspect what lurks in the air.
In analysis, I'm practical, and no task too small,
To unravel the malware, and stand tall.

What is the name of the book that teaches it all?

Practical Malware Analysis book


If you want to learn more…. = a book?

then solve the riddle by using key words inside to figure out the name of the book