Boblox

~# cat Question

You are part of the secret service. An Enemy Spy disguised as a Roblox Developer was entrusted to keep his countrys nuclear launch code a secret, but he suffers from short term memory loss.

So he decided to stash it away!!!. After you caught him , he failed to provide any information upon background research you find this.

FILE: challengescenario.txt

challengescenario.txt

Challenge Scenario
You are part of the secret service.
An Enemy Spy disguised as a Roblox Developer was entrusted to keep his country's nuclear launch code a secret, but he suffers from short term memory loss. 
So he decided to stash it away!!!. 
After you caught him , he failed to provide any information upon background research you find this.

https://www.roblox.com/games/15966463305/LNC4RobloxDevSpys-Place

Finding the diary

The link provided will bring us to a roblox user's profile page. Looking at his about section, we see ascii. Converting it to plain text using an online decoder will give us a pastebin link.

112 97 115 116 101 98 105 110 46 99 111 109 47 69 90 50 55 81 119 89 110

pastebin.com/EZ27QwYn

Going to the link, we will see a diary entry. The last diary entry tells us that we need to find 3 different roblox accounts with IDs 544787XXXX with the description LagNCrash.

~ My Dairy ~
 
Entry: 1
Timestamp: 24 November 2059
Message: The doctor told me I am suffering from memory loss, 
so I am writing jotting my everyday events to keep myself from forgetting of stuff. 
So far so good , no one seems to suspect me as a spy.
 
Entry: 2
Timestamp: 29 November 2059
Message: Seems that the war against my homeland is heating up and i almost 
lost the paper with the nuclear launch code i was entrusted with due to my memory loss. 
 
Entry: 3
Timestamp: 7 December 2059
Message: Danger!! It seems like theres someone on my tail this past few days , 
i cant tell definitively but I burned the paper with the nuclear launch codes after 
hiding it away in pieces on my many roblox accounts description. The roblox accounts 
are 544787XXXX , 544787XXXX , 544787XXXX. I've censored them out but remembered it 
magically and made sure the description of the roblox accounts start with LagNCrash 
so i dont forget which one is my account , I hope they dont find it.

Finding the 3 roblox accounts

We can use the roblox api to loop through roblox IDs and find if they have the LagNCrash description.

import requests

descriptions = []
for i in range(2000):
    robloxid = 5447870120 + i
    print(robloxid)
    response = requests.get(f'https://users.roblox.com/v1/users/{robloxid}', headers={'Content-Type': 'application/json'})
    response_json = response.json()
    try:
        if response_json['description'].startswith("LagNCrash"):
            descriptions.append(response_json['description'])
            print(response_json['description'])
            print(descriptions)
    except:
        continue

print(descriptions)

The output of the script will present us with the 3 IDs.

https://users.roblox.com/v1/users/5447870123 
https://users.roblox.com/v1/users/5447870850 
https://users.roblox.com/v1/users/5447871690 

In these roblox accounts, we are provided binary that is split into 3 parts (for each account), combining it would gives us a github link.

https://github.com/poopoopeepeesauce

Navigating to the github, when we go to the repository telegraphmsg, and see its commit history, we will find a wix website link.

https://soraalt2.wixsite.com/mysecretwebsite/about

Finding the email

When we scroll down the website we will see a email 4 flag. However, the email has been REDACTED. We can use the wayback machine to view archives of the website. Doing so we bring us to an archive of the website on 16th Jan 2024. Scrolling down once again, will reveal the email. We can then send an email to "receive a flag".

[e-mail]

Response:
1197367899883589703

seems like some sort of ID for Discord?

Osint is Fun :D

Finding the discord guild

We did not get the flag but a discord ID. Looking at this ID, it is too long for a normal discord user ID. We can use a guild look up for discord as the ID matches those of discord guilds. Doing so will bring us to a server where the flag is displayed.

Discord guild link: discord.gg/3UxC4yav 

Flag: LNC24{ln54n3_051nt_Ch4ll3ng3}