ID Exposed

Platform: HackTheBox | Category: OSINT | Difficulty: N/A | Author: D3v0o0Nu11 | Date: 2026-02-10

Description

We are looking for Sara Medson Cruz's last location, where she left a message. We need to find out what this message is! We only have her email: saramedsoncruz@gmail.com

Solution Approach

Core idea: Identify the weakness from source review or fingerprinting first. Iterate with incremental payloads instead of guessing.

Steps

1. Based on the challenge's title we can utilize this online tool to find the email's ID.

2. We can use the ID to track the person's location.

3. Open this link with the ID.

4. Open her reviews tab, then scroll down.

5. Got the flag!

Flag

(no flag captured)

Lessons Learned

1. Identify the weakness from source review or fingerprinting first.
2. Iterate with incremental payloads instead of guessing.
3. Reuse the same pattern in future engagements.