> For the complete documentation index, see [llms.txt](https://writeups.adityadindi.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://writeups.adityadindi.com/tryhackme/untitled/ohsint.md).

# OhSINT

![](/files/-MbNN2XbRYo3a9D6IsAv)

Lets look at the image they gave us to download

![](/files/-MbNNd_Ob1dw00bcqtgW)

Its a WindowsXP Image. Lets use the tool called `exiftool` to find information on the image.

```
exiftool WindowsXP.jpg
```

![](/files/-MbNOE1CB7mEHVJ9Ykzo)

Looking through this, the image is copyrighted by a person called `OWoodflint`, lets search them up on Google.

![](/files/-MbNO_ommDvrdgh7PJzr)

Looks like they have a blog, `twitter` account and a `gitbhub` account, lets check each one of them starting with the blog.

![](/files/-MbNOqLyYUHfCQpt37PT)

Nothing of interest yet, lets check the source code. Looking through the source code, we find something interesting.

![](/files/-MbNPE9A31UesH_wDjWp)

There seems to be nothing more of interest, lets go to the twitter page.

![](/files/-MbNPfoLMCD063H8V0k9)

The profile picture is that of a cat, so we can answer the first question.

![](/files/-MbNPwHfG5zoJ-3ebrzf)

In one of his tweets he tweeted his BSSID for a Wifi point near where he lives. We can use wigle.com to get more information about his location.

![](/files/-MbNRSCdrIxBU6M6B15v)

We see that the location is `London`, which is the answer to the second question.

![](/files/-MbNReUDXp7zhnV5pJnJ)

To get the SSID , you have to keep zooming into the map.

![](/files/-MbNRqeQZ0NotyJPMgHN)

The answer is `UnileverWiFi`

![](/files/-MbNRzX9DdKvxdxMLL6y)

We can find his email on his `github` page.

![](/files/-MbNSCZVmq2PjMt3YxtX)

![](/files/-MbNSJfa-PBN2emHYhxk)

The answer to where he was right now, or where he has gone to a holiday, we can find the answer on the blog post.

![](/files/-MbNSfwnYJ9Ypuv19-c5)

![](/files/-MbNSkQhFLTL1gRf0svh)

For the last question which is the password, we found it in the start of the room which is `pennYDr0pper.!`

![](/files/-MbNT4b69EivWRb9NhBU)