[NeoQuest2017] "MULTIPSPORT!" And pink spacesuit

Continuing a series of rantas assignments from the past cybersecurity competition NeoQuest2017
This time we will look at the fifth task: ESPION

The task contained as many as 3 (over200 points) key! For this reason, this assignment has become a must have for those who desired to be "higher"

“MULTIPASPORT!”

In the midst of exploring the planet, our instruments signaled an approaching storm! We did not have time to get to the ship to wait there, there was no one to ask for help - the planet was uninhabited. However, we found a shelter built, apparently, by someone from the last expedition. To log in, you need to confirm that you are its creator by filling out a virtual form. We could not find out anything about this mysterious tenant, but, having rummaged in the dustbin near the house (and that, in war, all means are good!), We found an SD-card with photos. Maybe they will help us answer the questionnaire? All hope for them, and also for the fact that the owner was registered at least in some earthly social networks, they are just a storehouse of information!

To the task we are given a site where you need to fill out a questionnaire about a person: name, place of residence, profession, dog's name, etc. Along with the link, there is an archive containing 200 different photos from various Internet sources: completely on different topics: from food to nature; from animals to spacecraft.

What are we supposed to find here? First of all, I uploaded all the photos to Picasa: scrolling through most of them, a very interesting photo was noticed - it contained EXIF ​​GPS:
')


This is clearly a sign! Quickly using the utility (thanks to Betepok ) for finding accounts in social networks (VK, Instagram) containing photos with GeoTag:

python3 ./photobygeo.py -d 200 28.5233 -80.6819 1486512191 1486555391 

A necessary character was found!
After thoroughly studying his page, the following data was obtained:

 :  :   : 09.03.1994 

Long thinking “What the hell is this ?! it is necessary to do further? ”a message on the sale was noticed on the wall:“ I will sell space equipment from NeoSpace, a new one, model SNQ-17 (of this year)! ”with a corresponding photo of pink (“ You don't see that ?! You are the same!) (c) any girl) spacesuit.

Search by image in the search engines did not give results => indexing was still done. However, a search by text found this ad:



From here we learn the place of residence, metro and telephone:

 :   :   :  : +7(996)7861065 

Further, by phone number we punch it through the other social networks and first stumble upon this page. We get:

 Nickname: NeoSpaceHacker : 130 : Massachusetts Institute of Technology (MIT) :  

Quote from the profile " I am a programmer, I like to code in esoteric programming languages. I spread my projects on publicly available resources! " As if hinting to us that our path lies on SourceForge, or GitHub: there is no such user on the first, but on the second - IS .

Inside lies BestProgrammEver , created on an esoteric PL - Brainfuck:

   : Space is never ends! 

Further in this direction there was a dead end: it is unlikely that a search on IT forums will give us the nickname of his pet :)

Recalling that there was a large number of photos on the lost SD-card (Yes-Yes!) We are going to the following “network”: BINGO

After viewing all the photo cards we get the remaining information:

   :    :  (    )   : 4024 0071 2387 4108 

So, in fact, OSINT and obeyed earthlings!