CTF | Challenges | Articles | Real cases
HelloWorld 2026 - Box 1
Tracking down a Spotify exploit hidden in a 4chan archive, leading to the compromise of a forum editor account via an ffuf bruteforce.
InterIUT 2026 (1) - The Man Who Knew Too Much
An AI engineer who vanished after doubting his employer: metadata analysis and human rights databases used to find his detention prison.
InterIUT 2026 (2) - Mapping where Google won't go
Precise location and timestamp of a photo in Tokyo, exploring alternatives to Google Street View.
InterIUT 2026 (3) - Was It An Intern Who Created This Channel?
Infiltrating a private MilSec Industries Discord server to find its creation date and the name of a secret project.
BreizhCTF 2026 (1) - Double Life
Tracking down a celebrity hiding behind an inactive YouTube account, through a password-protected Pastebin note and a Short found on the Wayback Machine.
BreizhCTF 2026 (2) - An Old Friend
Tracking down the city of residence of a BZH Mafia accomplice, from a book review platform username to decoding a UPS MaxiCode.
CTF Bleuet de France v5 - The Dissident Leaflet
Locating and timestamping to the hour a photo of resistance fighters distributing leaflets, based on shadow analysis with SunCalc.
MCTF2026 (1) - Where Was chine
A multi-platform challenge starting with the analysis of a username and ending in a Strava chase deep in the heart of China.
MCTF2026 (2) - My World
Metadata exploitation and dork-based search to identify a hidden Pastebin note, leading to a Roblox user.
MCTF2026 (3) - Chine Zhao
Complex localization of a building in China through semantic analysis of traditional texts and strategic use of Google Maps Plus Codes.
MCTF2026 (4) - Lin In Paris
Tracking a suspect in the French capital through Strava data analysis and identifying a venue via a bar's menu.
TBS - To Be Searched
Explanation and demonstration of a little-known Google Images feature.
Portrait Robot
Analyzing an urban poster to locate a specific metro station in Barcelona using Overpass Turbo.
The resources and techniques documented here are for educational purposes only. The author declines all responsibility for how you use this information. Respect the law: never test these methods on systems you don't own without authorization.