Skip to main content

Meta Geo Stalking

Difficulty: 🌟🌟

Description: Determine the answer to John's security question by looking at an upload of him to the Photo Wall and use it to using his password via the Forgot Password mechanism.

Category: Sensitive Data Exposure

Tags: OSINT

Solution:

Go to Photo Wall and download John's photo (John aka J0hNny) image

Use the exiftool to look at the metadata of this photo, you can see the GPS Position image

Search this position on Google Maps (remember to replace deg with °), and find a place where you can hike image

It's Daniel Boone National Forest, go to Forgot Password and use email john@juice-sh.op and security question is Daniel Boone National Forest, give him a new password and click Change. We got this challenge! image