Infiltration

Platform: HackTheBox | Category: OSINT | Difficulty: Easy | Author: D3v0o0Nu11 | Date: 2026-02-10

Description

Can you find something to help you break into the company 'Evil Corp LLC'. Recon social media sites to see if you can find any useful information.

Solution Approach

Core idea: Identify the weakness from source review or fingerprinting first. Iterate with incremental payloads instead of guessing.

Steps

1. Based from the description, let's google Evil Corp LLC.

2. We found the LinkedIn.

3. On their profile looks like there's A base64 encoding text, let's decode it.

4. When i tried to submit the flag, it says the flag is incorrect.

5. At the about tab, i found their website's link, let's jump there.

6. I tried to check one of the machine, but i think it's not the right way (?)

7. So i go back the the LinkedIn page.

8. Let's check all the employees that are working on this company.

9. When i tried to check a profile with LinkedIn member as the username, i got this message.

10. So i googled again Evil Corp LLC.

11. And got this instagram page.

12. After checked every post, every comments.

13. Finally got a post that shows the flag.

14. Got the flag!

Flag

REDACTED

Lessons Learned

1. Identify the weakness from source review or fingerprinting first.
2. Iterate with incremental payloads instead of guessing.
3. Reuse the same pattern in future engagements.