osint

Challenges

The Insider 1

Someone from our support team has leaked some confidential information. Can you find out who?

The Insider 2

You found out the insider, but can you find what they leaked on GitHub and put it to use? Continue where you left off...

  • Scroll down from his bio

  • scriptCTF{scriptCTF_2026_leaked?!!}

The Insider 3

It's a tradition at this point. Continue where you left off...

  • Do another github search, click the repositories and see the repo.

  • scriptCTF{2026_fl4g_f0und_1n_2025}

The Insider 4 (upsolve)

Good luck! Note: max flag limit is 6 for a reason, you should be able to get it in less than that. If not, open a ticket. Flag is case insensitive

  • Flag Format: scriptCTF{HOTEL_ADDRESS_ROOMNUMBER}

  • The embargo has been lifted, lets go...๐Ÿ’จ๐Ÿ’จ๐Ÿƒโ€โ™‚๏ธโ€โžก๏ธ

This is again, an upsolve due to I couldn't find the room number in time, and I was going crazy over a different challenge (modulo) so when I woke up from my slumber, the ctf is already ended ๐Ÿ˜ญ, so lets go...

  • The same repo from insider 3 also have all the challenge files

  • First...from the image, we simply exiftool to extract the comment that the

โฏ exiftool fireworks.jpg
ExifTool Version Number         : 12.76
File Name                       : fireworks.jpg
...
Comment                         : Great fireworks! Thanks to the Wendell family for organizing these!
Image Width                     : 4032
Image Height                    : 3024
...
  • Straight up โ€” paste that comment into google.

  • Immediately spotted the location, we can narrow the location of the hotel now. It is in Rockport, Texas.

  • Another links also verified our search about the location of the challenge

From that, you can use the image the challenge gave and start cross-comparing the hotels in the area THAT CONNECTED WITH WENDELL FAMILY that have water in between and buildings across the water. After about 30 minutes of searching and agonizing on Google Maps (which was a decent amount of time), I came across this hotel: Days Inn by Wyndham Rockport, Texas

  • Andddddddddddd..... that right there, my friend, is the exact location of the hotel.

  • So the hotel address is 901 Hwy 35 N, Rockport, TX 78382. We just need to find the room number

I think the smart move is that you can simply check the images of the hotel from Google Maps....We have to make some assumptions here: first, that the room is on the ground floor (based on evidence from the challenge images), and second, that the hotel follows a standard American numbering convention. To verify our ground floor hypothesis, I decided to methodically scroll through every available image on Google Maps - down and down and down - to finally see the complete range of room numbers.

So my first clue is that they have a 3-digit numbering system for the room numbers, as depicted in the screenshot. Given that our target room is on the ground floor our guess can be 1XX

Now let's check what we have so far for the flag construction. From the description.

  • Flag format is scriptCTF{HOTEL_ADDRESS_ROOMNUMBER}.

  • Example: scriptCTF{1337_elite_Hwy_S_9999} Have fun!"

Put them side by side we have

  • scriptCTF{HOTEL_ADDRESS_ROOMNUMBER}

  • scriptCTF{901_Hwy_35_N_???}

Scrolling even more through the photos, and voilร , the range is from 1-20 (they can't have that many rooms, can they???? ๐Ÿ’€). We have to make some educated guesses here, but let's approach this systematically rather than randomly. If the hint said we shouldn't need more than 6 (later updated to 7) guesses?

Then from the image...our range is 106 +- 6 The answer ultimately is 111. But I would really want to see the intended solution of how we can ACCURATELY PINPOINT it is 111 without tanking our accuracy by guessing. I guess we can do some geography reflection? Like comparing where the picture was taken compare to the room and count it.

  • scriptCTF{901_Hwy_35_N_111}

Last updated