The Best TryHackMe OSINT CTF Challenges

Summary

In this video, the host introduces viewers to the best CTF challenges on TryHackMe for enhancing OSINT skills. The video covers challenges that teach how to extract information from images, geolocate photos, gather data on websites, and uncover details about specific data. The host also mentions an upcoming OSINT course in collaboration with Z Security and encourages viewers to subscribe for updates.

Takeaways

• 🌐 The video is aimed at improving cybersecurity skills through CTF (Capture The Flag) challenges.
• 🎥 The presenter, S from Cyber Sudu, introduces a new YouTube channel after the old one was deleted.
• 🔒 The video emphasizes the importance of participating in CTF challenges to gain exposure to various cybersecurity techniques.
• 🔎 It suggests that beginners should watch YouTube videos, take courses, and solve CTF challenges to get started in cybersecurity.
• 🌍 The first challenge mentioned teaches how to search for images and geolocate them to find more information.
• 🌐 The second challenge, 'Web ENT', focuses on gathering information about a website, including DNS records and historical snapshots.
• 🌸 The 'Sakura' challenge, created by Osen Dujo, teaches multiple techniques for finding information.
• 🔍 The 'ENT' challenge involves downloading a file containing an image and extracting information from it.
• 📚 For those new to cybersecurity, the video recommends trying challenges first and then referring to write-ups for solutions.
• 🎓 The presenter is working on a cybersecurity course with Zsa from Z Security, which will be announced on both channels.

Q & A

What is the main focus of today's video?

The main focus of the video is to showcase the best TryHackMe OSINT (Open Source Intelligence) CTF challenges that can help viewers improve their OSINT skills.

Why did the presenter's old YouTube channel get deleted?

The script does not specify the reason for the deletion of the presenter's old YouTube channel.

What is the presenter's recommendation for someone new to OSINT?

The presenter recommends that newcomers watch YouTube videos, take courses, and participate in OSINT challenges to get started in the field.

What is the significance of the presenter's initial experience with OSINT?

The presenter's initial experience with OSINT was significant because it led to a realization of the amount of personal information that can be found online, prompting them to take steps to protect their own and their family's information.

What is the first challenge discussed in the video and what skills does it aim to teach?

The first challenge discussed is one that teaches how to search for images to gather more information about them, including where they have been posted, and how to geolocate images to find out where a picture was taken.

What is the second challenge mentioned and what does it cover?

The second challenge is called 'Web OSINT' and it covers how to gather information about a specific website, including DNS records, whois records, and using the Wayback Machine to see how a website looked in the past.

Who created the 'Sakura' challenge and what does it teach?

The 'Sakura' challenge was created by osen dujo and it teaches multiple OSINT techniques to find information about something.

What is the final challenge presented in the video?

The final challenge is called 'OSINT' and it teaches a variety of OSINT techniques to find information about specific data by requiring participants to download a file containing an image and extract information from it.

What resource does the presenter recommend for those who are unable to solve the challenges?

The presenter recommends looking at write-ups by people who have solved the challenges to understand different methods and techniques used to gather information.

What project has the presenter been working on with Zsa from Z Security?

The presenter has been working on an advanced OSINT course with Zsa from Z Security, which will involve real-life OSINT investigations using multiple techniques and methods.

What should viewers do to get notified about the release of the new OSINT course?

Viewers should subscribe to both Cyber Sudu and Z Security's YouTube channels to get notified as soon as the course is released.