0 pts 0 solved
โ† Back to Mission Control

๐Ÿ•ต๏ธ OSINT: Fake Social Media

A fictional character named Alex Riley has been careless online. Everything below is a fake profile created for this CTF. Investigate Alex's posts to answer the challenges.

0/6 solved ยท 0/120 pts
โš ๏ธ Remember: Alex Riley is a fictional character made up for this challenge. The social media platform below is fake โ€” it is not based on any real service. Never post personal information like this on real social media.
๐Ÿ˜Š
Alex Riley
@alexriley_official
Year 6 at Oakfield Primary ๐Ÿซ
Football โšฝ ยท Minecraft ๐ŸŽฎ ยท Dogs ๐Ÿ•
Born: 2014 ยท Lives in Maplewood
๐Ÿ“š OAKFIELD PRIMARY
47
Posts
138
Friends
12
Photos
๐Ÿ˜Š
๐Ÿ•
๐ŸŒณ Riverside Park walk
Me and Biscuit at the park! She absolutely loves chasing squirrels ๐Ÿฟ๏ธ My little fluffball is the best dog in the world! ๐Ÿ•โค๏ธ
๐Ÿ‘ฆ
Jordan T. Biscuit is so cute!!
๐Ÿ‘ฉ
Mia K. I love how fluffy she is ๐Ÿ˜
๐Ÿ˜Š
๐Ÿ‘•
OAKFIELD PRIMARY
School Uniform
๐Ÿ“ธ School Day!
Last day of term at Oakfield Primary! Can't believe Year 6 is nearly over ๐Ÿ˜ข Going to miss everyone SO much. Best class ever!!! ๐ŸŽ’
๐Ÿ˜Š
๐ŸŽ‚
ONE WEEK TO GO!!
Only one week until my birthday!!! ๐ŸŽ‰๐ŸŽŠ Party is going to be AMAZING. Mum is making my favourite cake ๐ŸŽ‚ Can't believe I'm going to be 11!!
๐Ÿ‘ฉ
Mia K. Can't wait!! What day is the party?
๐Ÿ˜Š
Alex Riley Saturday the 14th!! ๐ŸŽ‰ See you there!
๐Ÿ˜Š
๐Ÿ“ฆ
DELIVERY ADDRESS:
Alex Riley
42 Oak Avenue
Maplewood
New Minecraft merch has arrived!! ๐ŸŽฎ Finally delivered to 42 Oak Avenue after two weeks waiting haha. The postman always gets confused finding our house on Oak Avenue! Worth the wait tho ๐Ÿ“ฆ๐ŸŽ‰
๐Ÿ˜Š
Just got my new school account login! The teacher said to use something memorable for the password. I used my dog's name and the year I was born ๐Ÿ• Easy to remember!!
๐Ÿ‘ฉ
Mia K. haha that's so obvious Alex ๐Ÿ˜‚
๐Ÿ˜Š
๐Ÿ‘จโ€๐Ÿ‘ฉโ€๐Ÿ‘ฆ
STAFF ID
City General Hospital
Senior Nurse ยท Ward 4
Visiting mum at work today!! The nurses at City General Hospital are SO cool. Mum showed me where she works on Ward 4 ๐Ÿฅ She's the best! And they have amazing vending machines ๐Ÿ˜‚
๐Ÿ‘ง
Sam P. Your mum is amazing!!! Tell her I said hi ๐Ÿฅ
1
What is Alex's Pet's Name?
Easy 10 pts โ–ผ
Alex has a dog. Look through Alex's posts above to find the dog's name. Enter it as the flag: agent{pet-name}.
โœ“ Biscuit! Alex posted the dog's name publicly โ€” anyone can see it.
2
What School Does Alex Go To?
Easy 10 pts โ–ผ
Alex's school is visible in the profile and in a post. What is the full school name? Enter it as the flag with hyphens between words: agent{school-name}.
โœ“ Oakfield Primary! This information is visible to everyone who views Alex's profile.
3
When is Alex's Birthday?
Medium 20 pts โ–ผ
Alex's birthday isn't given directly โ€” you need to work it out from the clues in the posts. Look at post dates and what Alex says about the birthday.

Enter the date as: agent{day-month} using numbers and the full month name (e.g. agent{3-january}).
โœ“ 14th March! By tracking post dates and clues, you worked out Alex's birthday โ€” just like a real OSINT investigator would.
4
What is Alex's Address?
Medium 20 pts โ–ผ
Alex's full address is visible across the posts โ€” look carefully. Enter the address as a flag with hyphens: agent{number-street-name}.
โœ“ 42 Oak Avenue! Alex literally shared their home address on social media. A real person should never do this.
5
What Might Alex's Password Be?
Hard 30 pts โ–ผ
Alex posted about creating a password using "my dog's name and the year I was born". Using what you've already discovered about Alex, work out what that password most likely is.

Enter it as: agent{password-guess} (all lowercase, no spaces).
โœ“ Biscuit2014! Alex told everyone their password formula. Anyone who follows Alex could guess this immediately.
6
Where Does Alex's Parent Work?
Hard 30 pts โ–ผ
Alex posted a family photo from a workplace visit. Look carefully at the photo โ€” there's a staff lanyard visible. What is the name of the workplace?

Enter the full workplace name as a flag with hyphens: agent{workplace-name}.
โœ“ City General Hospital! A stranger could now visit the hospital, know which ward to find Alex's mum, and pretend to know the family. This is why oversharing is dangerous.
๐Ÿ›ก๏ธ Think About It: Online Safety Debrief
Everything you just found about Alex โ€” a real stranger could find the same information about a real person in minutes. Alex shared all of this publicly on social media without realising how much it revealed.
Discuss with your team:
  • What was the most dangerous piece of information Alex shared? Why?
  • What could someone do with Alex's password? And their home address?
  • How could Alex have shared photos without giving away personal information?
  • Look at your own social media (or your family's). What information is visible to strangers?
๐ŸŽ‰ Mission Complete!
You've uncovered everything about Alex. Now think about what you'd want a stranger to find about YOU.
โ†’ Back to Mission Control