I wanted to do something else than hacking this time around and found a site called sourcing.games. Apparently “sourcing” is HR slang for OSINT or something like that. 😂 So I tried to try cracking some of the puzzles offered by the site. Let’s dive in!
Level 1
1. In the first puzzle we need to find a password to enter the next level. 
Clicking the button leads us to a new site, which only has this simple, discouraging message written to it. 
2. As there is nothing interactive on this site, we’ll open the source code in browser by pressing Ctrl+U in Chrome.
3. And what do we find? The password, of course: 
4. Enter the password on the first site and click the link to enter the next level.
Level 2
1. The second puzzle is a bit different. This time we’re given a .docx file that is password protected, a link to a GitHub page and a clue on what we’re supposed to be looking for: the person’s company email address. 
2. Let’s head on to the GitHub page. 
3. A home page is linked in the profile, we’ll head on to that site.
4. I don’t know if this site is this person’s personal one or if he’s working as a freelancer, but we find an email on his site that sounds promising. 
5. Maybe we got a bit lucky, but it seems that the email address we found was the right one. Let’s grab the password and head on to the next level! 
Level 3
1. Oh no, this challenge was way too easy. Just do a reverse image search and you’ll find the answer in 10 seconds. The correct answer is this man’s last name.
Level 4
1. In the 4th challenge we’re given a link to a StackOverflow account. We’re supposed to find out this guy’s first name. Luckily, he has his social media accounts linked on his profile, so figuring this one out was almost as fast as the guy’s last name on the previous level. 🙁 
Level 5
1. In the 5th challenge we’re tasked with finding out when a specific shortened url was created. This is a simple task, as the shortened url was created using Bitly. You can add a plus sign ‘+’ at the end of the shortened url and information about the link will be displayed to you. This includes the day it was created. Write down the password in the format of “jan-1” and proceed to the next level. 
Level 6
1. A folder of a site was indexed by Google. The answer is simple: just google the url. Another challenge that was way too easy. 🙄
Finish
And that’s it for the Game #1 on sourcing.games. The challenges were very easy, but I’m still intrigued. Currently there are 35 challenges listed on the site, so I’m hopeful that at least some of them will be harder to crack. I find OSINT very fascinating, and I hope to have enough time in the future to try out more of these challenges.