<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>DIVER OSINT CTF on yag.xyz</title>
    <link>https://yag.xyz/en/competitions/diver-osint-ctf/</link>
    <description>Recent content in DIVER OSINT CTF on yag.xyz</description>
    <generator>Hugo</generator>
    <language>en</language>
    <copyright>© 2024, Yuki Okuda</copyright>
    <lastBuildDate>Sat, 05 Sep 2026 12:53:05 +0900</lastBuildDate>
    <atom:link href="https://yag.xyz/en/competitions/diver-osint-ctf/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>DIVER OSINT CTF 2026 &#34;F3&#34; Writeup</title>
      <link>https://yag.xyz/en/osint/f3/</link>
      <pubDate>Sat, 05 Sep 2026 12:53:05 +0900</pubDate>
      <guid>https://yag.xyz/en/osint/f3/</guid>
      <description>&lt;p&gt;&lt;em&gt;This article was automatically translated from Japanese by AI.&lt;/em&gt;&lt;/p&gt;&#xA;&lt;h2 id=&#34;challenge&#34;&gt;Challenge&lt;/h2&gt;&#xA;&lt;p&gt;&lt;a href=&#34;https://github.com/diver-osint-ctf/writeups/tree/main/diver2026/geo/F3&#34;&gt;DIVER OSINT CTF 2026 &amp;ldquo;F3&amp;rdquo;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;h2 id=&#34;solution&#34;&gt;Solution&lt;/h2&gt;&#xA;&lt;p&gt;A Google reverse image search did not reveal any promising clues. Searching for &lt;code&gt;&amp;quot;竜巻災害 博物館&amp;quot;&lt;/code&gt; (tornado disaster museum) led to a &lt;a href=&#34;https://www.yomiuri.co.jp/local/kyushu/news/20220219-OYTNT50066/&#34;&gt;Yomiuri Shimbun article about a museum in Kitakyushu&lt;/a&gt;. The article did not give the facility’s exact name, so I searched for &lt;code&gt;&amp;quot;北九州 竜巻 博物館&amp;quot;&lt;/code&gt; (Kitakyushu tornado museum), which led to the &lt;a href=&#34;https://www.kitakyushuspacelabo.jp/&#34;&gt;official website of Space LABO, the Kitakyushu City Science Museum&lt;/a&gt;.&lt;/p&gt;</description>
    </item>
    <item>
      <title>DIVER OSINT CTF 2026 &#34;stable&#34; Writeup</title>
      <link>https://yag.xyz/en/osint/stable/</link>
      <pubDate>Sat, 05 Sep 2026 08:53:06 +0900</pubDate>
      <guid>https://yag.xyz/en/osint/stable/</guid>
      <description>&lt;p&gt;&lt;em&gt;This article was automatically translated from Japanese by AI.&lt;/em&gt;&lt;/p&gt;&#xA;&lt;h2 id=&#34;challenge&#34;&gt;Challenge&lt;/h2&gt;&#xA;&lt;p&gt;&lt;a href=&#34;https://github.com/diver-osint-ctf/writeups/blob/main/diver2026/crypto/stable/README.md&#34;&gt;DIVER OSINT CTF 2026 &amp;ldquo;stable&amp;rdquo;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;h2 id=&#34;solution&#34;&gt;Solution&lt;/h2&gt;&#xA;&lt;p&gt;Searching for the complete string returned only existing writeups. Assuming the identifier-like prefix might be a useful clue, I tried searching for just the beginning with queries such as &lt;code&gt;&amp;quot;0x5Ec2bb2D&amp;quot; -writeup&lt;/code&gt;. This returned a PolygonScan address page, showing that the string is an address on Polygon.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&#34;https://polygonscan.com/address/0x5Ec2bb2D56FC8CC4d05110211EcaBDC8fAe3B128&#34;&gt;https://polygonscan.com/address/0x5Ec2bb2D56FC8CC4d05110211EcaBDC8fAe3B128&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;img src=&#34;https://yag.xyz/images/stable-polygonscan-address-search.webp&#34; alt=&#34;Search results for the beginning of the address&#34;&gt;&lt;/p&gt;</description>
    </item>
    <item>
      <title>DIVER OSINT CTF 2026 &#34;druk&#34; Writeup</title>
      <link>https://yag.xyz/en/osint/druk/</link>
      <pubDate>Fri, 04 Sep 2026 17:35:23 +0900</pubDate>
      <guid>https://yag.xyz/en/osint/druk/</guid>
      <description>&lt;p&gt;&lt;em&gt;This article was automatically translated from Japanese by AI.&lt;/em&gt;&lt;/p&gt;&#xA;&lt;h2 id=&#34;challenge&#34;&gt;Challenge&lt;/h2&gt;&#xA;&lt;p&gt;&lt;a href=&#34;https://github.com/diver-osint-ctf/writeups/tree/main/diver2026/crypto/druk&#34;&gt;Challenge page&lt;/a&gt;&lt;/p&gt;&#xA;&lt;h2 id=&#34;solution&#34;&gt;Solution&lt;/h2&gt;&#xA;&lt;p&gt;Searching for &lt;code&gt;&amp;quot;Dagana bitcoin&amp;quot;&lt;/code&gt; led to a &lt;a href=&#34;https://www.forbes.com/sites/iainmartin/2023/11/22/bhutan-secret-bitcoin-mine-locations/&#34;&gt;Forbes article&lt;/a&gt;. It includes satellite imagery of the Bitcoin mining site in Dagana and describes the facility as being near a middle school serving a rural community.&lt;/p&gt;&#xA;&lt;p&gt;Searching Google Maps for &lt;code&gt;&amp;quot;Dagana Bhutan middle school&amp;quot;&lt;/code&gt; did not reveal the location directly, so I examined schools around Dagana one by one. This led to the mining facility near &lt;a href=&#34;https://maps.app.goo.gl/TJUZkuz5vUq63sYt6&#34;&gt;Gesarling Central School&lt;/a&gt;.&lt;/p&gt;</description>
    </item>
    <item>
      <title>DIVER OSINT CTF 2026 &#34;arctic&#34; Writeup</title>
      <link>https://yag.xyz/en/osint/arctic/</link>
      <pubDate>Fri, 04 Sep 2026 17:08:18 +0900</pubDate>
      <guid>https://yag.xyz/en/osint/arctic/</guid>
      <description>&lt;p&gt;&lt;em&gt;This article was automatically translated from Japanese by AI.&lt;/em&gt;&lt;/p&gt;&#xA;&lt;h2 id=&#34;challenge&#34;&gt;Challenge&lt;/h2&gt;&#xA;&lt;p&gt;&lt;a href=&#34;https://github.com/diver-osint-ctf/writeups/blob/main/diver2026/company/arctic/README.md&#34;&gt;DIVER OSINT CTF 2026 &amp;ldquo;arctic&amp;rdquo;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;h2 id=&#34;solution&#34;&gt;Solution&lt;/h2&gt;&#xA;&lt;p&gt;Two license plates appear in the article. Searching them on &lt;a href=&#34;https://vahandetails.com/vehicle-info&#34;&gt;Vahan Details&lt;/a&gt; returns the following masked owner names:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;DL 1CR 6887&lt;/code&gt;: &lt;code&gt;B*****H K***R D***R&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;DL 4CR 8559&lt;/code&gt;: &lt;code&gt;I****A B******S (*****) P**.&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;A &lt;a href=&#34;https://timesofindia.indiatimes.com/city/noida/fake-ghaziabad-diplomat-partnered-with-uk-bizman-to-set-up-brokerage-firms-stf/articleshow/122866564.cms&#34;&gt;Times of India article&lt;/a&gt; covering the same case reports that the two seized cars with diplomatic registration plates were owned by Bhavesh Dugar of Delhi and Indra Business Private Limited, respectively. Comparing this report with the Vahan Details results suggests that the second car was owned by &lt;code&gt;INDIRA BUSINESS (*****) PVT.&lt;/code&gt;&lt;/p&gt;</description>
    </item>
    <item>
      <title>DIVER OSINT CTF 2026 &#34;cooking&#34; Writeup</title>
      <link>https://yag.xyz/en/osint/cooking/</link>
      <pubDate>Fri, 04 Sep 2026 16:45:43 +0900</pubDate>
      <guid>https://yag.xyz/en/osint/cooking/</guid>
      <description>&lt;p&gt;&lt;em&gt;This article was automatically translated from Japanese by AI.&lt;/em&gt;&lt;/p&gt;&#xA;&lt;h2 id=&#34;challenge&#34;&gt;Challenge&lt;/h2&gt;&#xA;&lt;p&gt;&lt;a href=&#34;https://github.com/diver-osint-ctf/writeups/blob/main/diver2026/company/cooking/README.md&#34;&gt;DIVER OSINT CTF 2026 &amp;ldquo;cooking&amp;rdquo;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;h2 id=&#34;solution&#34;&gt;Solution&lt;/h2&gt;&#xA;&lt;p&gt;Searching for &lt;code&gt;&amp;quot;ボリス・ジョンソン 来日 料理&amp;quot;&lt;/code&gt; leads to a &lt;a href=&#34;https://www.facebook.com/fujitanzm/posts/12%E6%9C%88%E3%81%AE%E3%81%82%E3%82%8B%E6%97%A5%E3%82%A4%E3%82%AE%E3%83%AA%E3%82%B9%E3%81%AE%E5%85%83%E9%A6%96%E7%9B%B8%E3%83%9C%E3%83%AA%E3%82%B9%E3%82%B8%E3%83%A7%E3%83%B3%E3%82%BD%E3%83%B3%E3%81%95%E3%82%93%E3%81%8C%E4%BA%AC%E9%83%BD%E3%81%AB%E3%81%8A%E8%B6%8A%E3%81%97%E3%81%AB%E3%81%AA%E3%82%89%E3%82%8C%E3%81%BE%E3%81%97%E3%81%9F%E9%8C%A6%E5%B8%82%E5%A0%B4%E3%81%A7%E9%AD%9A%E3%82%92%E8%AA%BF%E9%81%94%E3%81%97%E3%81%9F%E3%81%82%E3%81%A8%E5%BC%8A%E7%A4%BE%E3%81%A7%E9%81%8B%E5%96%B6%E3%81%97%E3%81%A6%E3%81%84%E3%82%8B%E6%96%99%E7%90%86%E3%82%B9%E3%82%BF%E3%82%B8%E3%82%AAsushi-lab%E3%81%A7%E5%AF%BF%E5%8F%B8%E3%81%AE%E3%81%AB/25767296076228983/&#34;&gt;Facebook post by the cooking school’s operator&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;The Facebook profile identifies the company as Kyoto-based &lt;code&gt;株式会社のぞみ&lt;/code&gt; (Nozomi Co., Ltd.). A Google search leads to its &lt;a href=&#34;https://info.gbiz.go.jp/hojin/ichiran?hojinBango=5130001026308&#34;&gt;gBizINFO company profile&lt;/a&gt;, while the &lt;a href=&#34;https://www.houjin-bangou.nta.go.jp/&#34;&gt;National Tax Agency Corporate Number Publication Site&lt;/a&gt; confirms the unique 13-digit Corporate Number &lt;code&gt;5130001026308&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;According to the &lt;a href=&#34;https://www.houjin-bangou.nta.go.jp/setsumei/shinsetsuoss/index.html&#34;&gt;National Tax Agency’s explanation&lt;/a&gt;, a 13-digit Corporate Number consists of a leading check digit followed by the 12-digit Corporate Identification Number. Removing the leading &lt;code&gt;5&lt;/code&gt; from &lt;code&gt;5130001026308&lt;/code&gt; gives &lt;code&gt;130001026308&lt;/code&gt;.&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
