Pivot through a leak | Hunt the Flag

Labs need a computer

Open this page on a computer, or make the browser window larger.

Files

osint-leak.zip
Size: 1.0 KB
SHA-256
d422b13c4b30ea7f7967a841555eb6346f4d392b17fe576e1cb22e5056ad8cd6
Download

After downloading, compare the file SHA-256 with the value shown here to make sure it arrived intact.

Tools you may need

jq
To read profiles.json.
grep
To look up the email in the dump.

Scenario

Two fictional datasets: profiles tying handles to emails, and a fabricated credential dump. Pivot from the leader handle to his email, then to his reused password — the flag. The leader showdown.

What you are looking at

You download osint-leak.zip with profiles.json and breach_dump.csv, both invented and self-contained.

Goal

Pivot from the handle to the email to the leaked password and extract the flag.

What counts as solved

You enter the correct flag.

Method checklist

Tick each step as you work through it. The steps are the method, not the answer.

Open profiles.json and find the nightcrow email.
Open breach_dump.csv.
Look up the email in the dump.
Read the reused password, the flag.

Hints

You have not revealed a hint yet. Ask the falcon when you need one.