0xnhl

journey

/ Update
2 min read

Challenge#

  • Name: Journey
  • Category: OSINT
  • Author: makeki
  • Prompt: “Well the author of this challenge uses discord.”
  • Flag format: apoorvctf{first_part_second_part_third_part}

Checking out the Apoorvctf discord, channel we find the author
journey-a5dd27cb-cf28-4e0c-b7ec-c152426cdeca
journey-5e777b44-8aab-41bf-b134-3654af537317

journey-aa88a2d1-56fa-4d36-901a-08fd6cde6796
from reddit found this

apk mlqf fgmminbvrwtftr? ecqpegf mi otw mnwn lh jqtygw mlqf scw hyb vj ngn hwa'x aaoi qa e rsoi. Ab ztyxxi vw xf mlm smawl :(, ixfxtag kwg e bsbp nesb s webvrv kbxm. Smgkm tiex dx mlm sppy bw nvvhl ymdr gwskekgigk hj bui hmunmpx dx mlig ibsbp.
plaintext

vigenere cipher decode

KEY: EPSTEIN
was this bruteforceable? anyways it was easy to figure this one out if you don't live in a cave. So vegeta is in the files :(, epstein got a mail from a dating site. First part of the flag is first five characters of the subject of that email.
plaintext

journey-969e514b-4827-443f-a234-c28ecd95027c

first part of flag is : gggeb

From reddit i got roblox username
journey-7e042730-760f-431e-94a6-eff912f00b23
There i found a community
journey-16db043f-934c-4cb9-a933-12d568d4809f
And got codeforces username: MughliGhutti https://codeforces.com/profile/MughliGhutti
journey-81dbb978-ca8a-44c5-ba32-ea03c5d6a312
The QR gives link https://www.youtube.com/watch?v=tg8Jahz6RM4
journey-e6a79ba9-8e25-43ec-b8a3-067deae945aa

Part 2:_C0d3_f0rc3s_

Also from we get to know about a blog
https://m4k3k1.blogspot.com/
journey-3cea2969-b631-4d38-acbc-e4f333720f14
journey-d41c0fee-397a-4384-88b9-0d6b80cf1cf7
found this from the blog

aWYgeW91IGFyZSBsb29raW5nIGZvciBhIGZsYWcgaGVyZSwgY29uZ3JhdHMuIFRoZSBsYXN0IHBhcnQgb2YgdGhlIGZsYWcgaXMgdGhlIG1vYmlsZSBudW1iZXIgKDEwIGRpZ3RzKSBvZiB0aGUgc3RheSB3ZSBzdGF5ZWQgYXQuIFlvdSBjb3VsZCBmaW5kIGl0IG9uIHRoZSBzb2NpYWxzIG9mIHRoYXQgc3RheS4=
plaintext

b64 decrypt gave

if you are looking for a flag here, congrats. The last part of the flag is the mobile number (10 digts) of the stay we stayed at. You could find it on the socials of that stay.
plaintext

google image search on the image indicated it was chokramudi peak.
journey-9f8bfc5a-81a5-4d29-9472-1d4a4696d77f
The blog said something about “pine” and also described features of a church. and also 1 km from the chokramudi trekking point
journey-cd3f276e-b345-4df3-a32f-33224f22221a
With some trial and error we find skylark homes as the correct stay. And we can find their mobile no there.
third part of flag is : 9447332138

Tip

Final flag is : apoorvctf{gggeb_C0d3_f0rc3s_9447332138}

journey
https://nahil.xyz/vault/writeups/apoorvctf2026/osint/journey/
AuthorNahil Rasheed
Published atMarch 24, 2026
CopyrightCC BY 4.0
DisclaimerThis content is provided strictly for educational purposes only.