The Suspicious Reviewer
1 minuto de lectura
Tenemos esta descripción del reto:
A suspicious social media profile has been flagged for potential astroturfing and fake review manipulation. The profile “TechReviewer2024” on SocialConnect appears to be artificially created to spread negative reviews about specific technology companies. Your task is to investigate this profile and uncover the contact information hidden within their social media presence. “Trainee, We’ve identified a potentially fraudulent social media profile that may be part of a larger astroturfing campaign. The profile “TechReviewer2024” on SocialConnect shows several red flags indicating artificial creation and coordinated inauthentic behavior. Your mission is to investigate this profile thoroughly and extract any contact information that could lead to the real person behind this fake account. Submit your findings in the (case insensitive) format:
HTB{contactemail}. Example:HTB{Gonzalo.Ramirez@email.com}. – Training Division Digital Forensics Unit”
Enumeración
Se nos proporciona la siguiente página web con el perfil del usuario TechReviewer2024:

Hay muchas publicaciones y comentarios, pero todo parece de relleno. Según la descripción del reto, necesitamos encontrar su información de contacto, así que vamos a “About”:

Bien, podemos ver un enlace para “Show Contact”. Si pinchamos en él, veremos su dirección de correo electrónico:

Flag
Y eso es todo, la flag es:
HTB{alex.morgan@tempmail.com}