# OhSINT

![](/files/-MbNN2XbRYo3a9D6IsAv)

Lets look at the image they gave us to download

![](/files/-MbNNd_Ob1dw00bcqtgW)

Its a WindowsXP Image. Lets use the tool called `exiftool` to find information on the image.

```
exiftool WindowsXP.jpg
```

![](/files/-MbNOE1CB7mEHVJ9Ykzo)

Looking through this, the image is copyrighted by a person called `OWoodflint`, lets search them up on Google.

![](/files/-MbNO_ommDvrdgh7PJzr)

Looks like they have a blog, `twitter` account and a `gitbhub` account, lets check each one of them starting with the blog.

![](/files/-MbNOqLyYUHfCQpt37PT)

Nothing of interest yet, lets check the source code. Looking through the source code, we find something interesting.

![](/files/-MbNPE9A31UesH_wDjWp)

There seems to be nothing more of interest, lets go to the twitter page.

![](/files/-MbNPfoLMCD063H8V0k9)

The profile picture is that of a cat, so we can answer the first question.

![](/files/-MbNPwHfG5zoJ-3ebrzf)

In one of his tweets he tweeted his BSSID for a Wifi point near where he lives. We can use wigle.com to get more information about his location.

![](/files/-MbNRSCdrIxBU6M6B15v)

We see that the location is `London`, which is the answer to the second question.

![](/files/-MbNReUDXp7zhnV5pJnJ)

To get the SSID , you have to keep zooming into the map.

![](/files/-MbNRqeQZ0NotyJPMgHN)

The answer is `UnileverWiFi`

![](/files/-MbNRzX9DdKvxdxMLL6y)

We can find his email on his `github` page.

![](/files/-MbNSCZVmq2PjMt3YxtX)

![](/files/-MbNSJfa-PBN2emHYhxk)

The answer to where he was right now, or where he has gone to a holiday, we can find the answer on the blog post.

![](/files/-MbNSfwnYJ9Ypuv19-c5)

![](/files/-MbNSkQhFLTL1gRf0svh)

For the last question which is the password, we found it in the start of the room which is `pennYDr0pper.!`

![](/files/-MbNT4b69EivWRb9NhBU)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://writeups.adityadindi.com/tryhackme/untitled/ohsint.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.