capture-the-flag

No Country for Old Keys

#osint

The Clues

We need to find the API Key of someone named Anthony McConnolly

I use DuckDuckGo as my default search engine so I looked up “Anthony McConnolly” and found this GitHub

alt text

Alternatively you can also search for his name on GitHub and filter by users

For some reason I could not find his GitHub on the first page of Google.

alt text

He only has one repo with a single main.c file with a macro API_KEY, but it seems like he has changed it to a placeholder.

alt text

Back to the Past

Let’s view the revision history of main.c

alt text

Seems like the API Key was changed, lets look at the change

alt text

There’s our key!