STORY DRIVEN OSINT CTF

easy
medium
hard
insane

PeePeeKun

Briefing

Greetings, Special Agent.

For now, Kotova and Schneider are on the back burner, as they’re under active surveillance. The case is under control, meaning your unit has time to participate in our yearly April training exercise. This year we’ve chosen to partner with the S.I.S.U. group. An elite group of analysts, roughly the size of one of our ASIC cells.

They’re skilled and only use their skills for good. This year, they’ve agreed to partner with the Tiberian Order on a training exercise. We’ve prepared a training event for them, and they’ve done the same for us. Creating a series of intricate puzzles and exercises to get through.

Now I’m not saying this is a match, but obviously there will be some inter-agency rivalry involved. It’s your team’s task to complete the assignment as quickly as possible. Or not, but I know you couldn’t stand the other teams beating you. Also, what the hell does “peepeekun” mean?!

As always, Special Agent, the contract is yours, if your choose to accept.

Materials

Download Starting File

Download The Vault

Answer Instruction

Use the answer to unlock the flagfile, this will reward you with your badge.

To open the vault file: Use the first word of each what3words location.

Example: ball.sky.book

The flag will be a secret you extract from an image, you will know it when you see it.

Flagfile

Be advised, the flagfile is an encrypted ZIP. Make sure your OS supports the ZIP format. Ensure the password contains no hidden characters or formatting, paste in Notepad first if the password doesn’t seem to work.

Download Flagfile here

PS: Don’t forget to claim your Coins and XP, by posting your card in the #card-brag channel in Discord.

Official Write-up

Provided here is the official write-up, it does contain the answer. Use this if you’re stuck, or want to verify if you got the answer correct.

PeePeeKun

An April Fools-themed challenge involving multiple stages of puzzles, starting with an online jigsaw and leading to hidden what3words locations.

Stage 1: Initial Access

  1. Navigate to the online jigsaw puzzle
  • URL: puzzel.org/en/jigsaw/play?p=-NQp9exKMXWnGm0AyXzw
  • Complete the puzzle to reveal next step

Stage 2: Dropbox Investigation

  1. Access Dropbox folder revealed by puzzle
  • URL: dropbox.com/sh/9u4fbo0xgd41hr7/AADm_X4B-_b834YzlsGtqdsra
  1. Find images containing what3words locations

Stage 3: Location Analysis

Identify three what3words locations:

  1. case.shift.hush
  2. thrillers.recline.annoys
  3. jams.banana.canines

Stage 4: Password Construction

Create vault password using first words from each location:

case.thrillers.jams

Stage 5: Final Discovery

  1. Access vault with constructed password
  2. Search through Easter-themed images
  3. Locate image containing final password:
D94KF932409KGL09324

Common Pitfalls to Avoid

  1. Missing locations in images
  2. Wrong word order in password
  3. Skipping puzzle steps
  4. Overlooking image details
  5. Incorrect password formatting

Tools Needed

  1. Web browser
  2. what3words website/app
  3. Image viewer
  4. Note-taking tool
  5. Puzzle-solving patience

Remember: Follow the sequence exactly – jigsaw → Dropbox → locations → vault → final password. Each step leads precisely to the next.

Creator: Frank Diepmaat