For full text search please use the '?' prefix. e.g. ? Onboarding

The Package

Challenge

We are provided with a text document with the following information:

INFO OBTAINED SO FAR FROM AUTHORITIES

Product: Wifi hacking device
Key word for finding the exact name of product: It is related to a fruit

INFO KNOWN OF HACKER

Profile name: jllerenac
Additional Info: He is known for being a good hacker and also a good developer. He has the location info stored somewhere.

Solution

  1. What is the name of the WiFi hacking device? (Format: Wifi X) (2 points)

    Search Terms: "wifi hacking" + "fruit"

    Answer: Wifi Pineapple

  2. What is the name of the website containing the information of delivery location? (Format: WebsiteName) (2 points)

    Search Terms: "jllerenac" + "location"

    The only website that seems remotely relevant to the username is GitHub, and trying that as the answer works.

    Answer: GitHub

  3. What is the name of the file containing the information of location? (Format: filename.extension) (2 points)

    Search Terms: site:github.com "jllerenac"

    The user's profile says that they don't have any gists, and that they're located in Cuenca. The repo at the top of his user profile on GitHub is jobsitychallenge. This provides us with the username josellerena, which is also a Twitter account that has been inactive since 2012. Another username we find is jose-llerena, as well as the email address josellerenacarpio@gmail.com. Pivoting the email through GitFive did not yield anything else useful.

    Pivoting off of the Twitter account got us a Cobalt account and a LinkedIn, but I think those are outside the scope of this challenge.

    There was nothing in the cardsdeck, URLbuilder, JoseGame... reporitories. We can see some secrets/passwords in the improved security commit on jobsitychallenge, but scrolling through all the other commits didn't yield anything else useful.

    I tried using the Wayback Machine to see if there were any visible deleted repositories, so I could look for any forks of deleted repositories that were now owned by other users, but the only two captures didn't show any repositories that were deleted.

    The jobsitychallenge.com domain no longer exists, but pivoting off of that information to look at possibly related repositories failed. One repository, rails-devise, is empty, which is strange.

    Answer: ``

  4. Enter the coordinates of the meeting (Format: value, -value) (2 points)

  5. Where is the delivery going to be? (Format: Location Name) (2 points)

Tags

  1. google (Private)
  2. dorking (Private)
  3. google dorks (Private)