0xnhl

journey

/ Update
2 min read

Description#

Well the author of this challenge uses discord.
flag format: apoorvctf{first_part_second_part_third_part}
Author : makeki

Checking out the Apoorvctf discord, channel we find the author
attachments/journey-a5dd27cb-cf28-4e0c-b7ec-c152426cdeca
attachments/journey-5e777b44-8aab-41bf-b134-3654af537317

attachments/journey-aa88a2d1-56fa-4d36-901a-08fd6cde6796
from reddit found this

apk mlqf fgmminbvrwtftr? ecqpegf mi otw mnwn lh jqtygw mlqf scw hyb vj ngn hwa'x aaoi qa e rsoi. Ab ztyxxi vw xf mlm smawl :(, ixfxtag kwg e bsbp nesb s webvrv kbxm. Smgkm tiex dx mlm sppy bw nvvhl ymdr gwskekgigk hj bui hmunmpx dx mlig ibsbp.
plaintext

vigenere cipher decode

KEY: EPSTEIN
was this bruteforceable? anyways it was easy to figure this one out if you don't live in a cave. So vegeta is in the files :(, epstein got a mail from a dating site. First part of the flag is first five characters of the subject of that email.
plaintext

attachments/journey-969e514b-4827-443f-a234-c28ecd95027c

first part of flag is : gggeb

From reddit i got roblox username
attachments/journey-7e042730-760f-431e-94a6-eff912f00b23
There i found a community
attachments/journey-16db043f-934c-4cb9-a933-12d568d4809f
And got codeforces username: MughliGhutti https://codeforces.com/profile/MughliGhutti
attachments/journey-81dbb978-ca8a-44c5-ba32-ea03c5d6a312
The QR gives link https://www.youtube.com/watch?v=tg8Jahz6RM4
attachments/journey-e6a79ba9-8e25-43ec-b8a3-067deae945aa

Part 2:_C0d3_f0rc3s_

Also from we get to know about a blog
https://m4k3k1.blogspot.com/
attachments/journey-3cea2969-b631-4d38-acbc-e4f333720f14
attachments/journey-d41c0fee-397a-4384-88b9-0d6b80cf1cf7
found this from the blog

aWYgeW91IGFyZSBsb29raW5nIGZvciBhIGZsYWcgaGVyZSwgY29uZ3JhdHMuIFRoZSBsYXN0IHBhcnQgb2YgdGhlIGZsYWcgaXMgdGhlIG1vYmlsZSBudW1iZXIgKDEwIGRpZ3RzKSBvZiB0aGUgc3RheSB3ZSBzdGF5ZWQgYXQuIFlvdSBjb3VsZCBmaW5kIGl0IG9uIHRoZSBzb2NpYWxzIG9mIHRoYXQgc3RheS4=
plaintext

b64 decrypt gave

if you are looking for a flag here, congrats. The last part of the flag is the mobile number (10 digts) of the stay we stayed at. You could find it on the socials of that stay.
plaintext

google image search on the image indicated it was chokramudi peak.
attachments/journey-9f8bfc5a-81a5-4d29-9472-1d4a4696d77f
The blog said something about “pine” and also described features of a church. and also 1 km from the chokramudi trekking point
attachments/journey-cd3f276e-b345-4df3-a32f-33224f22221a
With some trial and error we find skylark homes as the correct stay. And we can find their mobile no there.
third part of flag is : 9447332138

Tip

Final flag is : apoorvctf{gggeb_C0d3_f0rc3s_9447332138}

journey
https://nahil.xyz/vault/writeups/apoorvctf2026/osint/journey/
Author Nahil Rasheed
Published at March 24, 2026
Disclaimer This content is provided strictly for educational purposes only.