purple · Easy · 280 XP · 30 minutes
OSINT
Learn how public information can reveal an organization’s digital footprint through passive research, metadata analysis, and responsible exposure mapping.
Tactical attack scenario
A rogue threat actor leaked confidential source code on GitHub. Use OSINT techniques to map out their digital footprint and identify their real identity.
Learning objectives
- Perform passive intel harvesting on specific domains
- Analyze image and document metadata to extract coordinates
- Query public registries and leaked credentials repositories
- Formulate corporate profile exposure maps safely
Recommended background
No prior security experience is expected; basic computer use is enough to begin.
Estimated duration: 30 minutes.
This public overview contains no flags, credentials, or solution steps. Practise only in the provided authorized environment.