$#osint

2 writeups

Pink ghost mascot wearing sunglasses and holding a phone

TryHackMeEasy01 Aug 2026

Hacker Holidays — Day 6: Overheard at Breakfast

A screenshotted chat reveals an email address and a hint about a "free profile linker starting with G" — hashing the email for Gravatar and pulling its JSON profile surfaces a hidden bio with the flag.

#hacker-holidays
#osint

Illustrated mailbox with a letter inside

TryHackMeMedium25 Jul 2026

TryHackMe: You Got Mail

OSINT-harvested employee emails feed a credential spray against an hMailServer instance, and the resulting SMTP access is used to phish a reverse-shell payload straight to the mail server itself.

#osint
#phishing
#credential-access
#privesc