[{"content":"","date":"1 November 2025","externalUrl":null,"permalink":"/","section":"✮Gitagia✮","summary":"","title":"✮Gitagia✮","type":"page"},{"content":"","date":"1 November 2025","externalUrl":null,"permalink":"/categories/","section":"Categories","summary":"","title":"Categories","type":"categories"},{"content":"","date":"1 November 2025","externalUrl":null,"permalink":"/categories/ctf/","section":"Categories","summary":"","title":"CTF","type":"categories"},{"content":"","date":"1 November 2025","externalUrl":null,"permalink":"/categories/easy/","section":"Categories","summary":"","title":"Easy","type":"categories"},{"content":" Description # Invincible is an easy-level OSINT challenge from CyberTalents designed to test how well you can trace digital footprints and recover hidden information.\nThe challenge is simple:\nOur threat intelligence team has noticed suspicious activity from a user named “soremanzo.”\nYour task? Find out what he’s hiding.\nThis challenge is a great warm-up for anyone new to open-source intelligence because it covers two fundamentals:\nUsername enumeration — tracking one username across many platforms under the same username. Web archives — retrieving previously deleted or hidden information Setting up My Workspace # Before diving in, I like keeping my environment clean. I opened up my terminal and created a Python virtual environment for any tool I’d need to install:\npython3 -m venv sherlock-env source sherlock-env/bin/activate This step saves you from dependency errors later (Kali users know this pain well).\nNext, I installed Sherlock, one of the most popular username search tools for OSINT:\ngit clone https://github.com/sherlock-project/sherlock.git cd sherlock pip install. Sherlock uses the usernames you provide to check their presence across hundreds of websites.\nTo make running it easier, I created a simple executable script:\necho \u0026#39;python3 -m sherlock_project.sherlock \u0026#34;$@\u0026#34;\u0026#39; \u0026gt; sherlock chmod +x sherlock Now I could just run:\n./sherlock soremanzo --timeout 10 Hunting “Soremanzo” # Sherlock scanned multiple platforms and returned around five profiles under the username soremanzo. I went through each manually, because relying on just one result can make you miss something crucial.\nMost profiles were inactive or generic placeholders, but the Disqus profile caught my attention. Disqus is often used for blog comments, and people tend to leave little traces behind there.\nA Clue in Plain Sight # On the Disqus profile’s “About” section, there was a short message that read:\n“Oh how you find me, Never mind I knew that you will find me anyway so I deleted your flag :D Not all what you need will be on your way back.”\n[Insert Disqus profile screenshot here]\nThe last sentence, “Not all what you need will be on your way back\u0026quot;\u0026hellip;WayBack Machine? The Wayback Machine (the Internet Archive) is is a digital archive that stores historical snapshots of websites over time, allowing you to access pages even after they’ve been edited or deleted. So if the flag was deleted, maybe it still existed in an older snapshot.\nLet\u0026rsquo;s Go Back in Time. # I headed to web.archive.org and pasted the Disqus profile URL: https://disqus.com/by/soremanzo/\nThe graphical interface (GUI) showed only 7 captures, but I’d read that the Wayback Machine sometimes hides additional snapshots. To dig deeper, I used the CDX API with curl, which lists all saved snapshots, even the ones not visible through the web interface.\ncurl -s \u0026#34;https://web.archive.org/cdx/search/cdx?url=https://disqus.com/by/soremanzo/\u0026amp;output=json\u0026#34; This command returned multiple timestamps.\nI browsed through them and picked the one from May 20, 2024: https://web.archive.org/web/20240520104532/https://disqus.com/by/soremanzo/\nOpening that URL took me to an archived version of the profile, and there it was! The missing flag!\nThe Flag # FLAG{4rch1v3_Usu4LLy_C0nt41n_Us3fuL_1nf0rm4t10n}\n","date":"1 November 2025","externalUrl":null,"permalink":"/posts/invincible/","section":"Posts","summary":"","title":"Invincible Write-up","type":"posts"},{"content":"","date":"1 November 2025","externalUrl":null,"permalink":"/categories/osint/","section":"Categories","summary":"","title":"OSINT","type":"categories"},{"content":"","date":"1 November 2025","externalUrl":null,"permalink":"/posts/","section":"Posts","summary":"","title":"Posts","type":"posts"},{"content":"","externalUrl":null,"permalink":"/authors/","section":"Authors","summary":"","title":"Authors","type":"authors"},{"content":"","externalUrl":null,"permalink":"/series/","section":"Series","summary":"","title":"Series","type":"series"},{"content":"","externalUrl":null,"permalink":"/tags/","section":"Tags","summary":"","title":"Tags","type":"tags"}]