Hacker Holidays Day 6: Overheard at Breakfast

A pure OSINT room. Read a leaked Discord chat, find a target’s profile by email, decode a string.

The room gives you a .png of a chat between Lambo and Ponzi. Lambo mentions he has an account on a site that links all your other accounts together, and that the name starts with a G.

Spoiler: the site and the email

That is Gravatar, which ties a public profile to an email address. Further down, Lambo gives his email: lambobytelotushotel@gmail.com.

Gravatar lets you look a profile up directly by email, which returns the profile URL. Opening it turned up a base64 string, which decoded in CyberChef straight to the flag. Redacted here.