# OSINT - Bob L'éponge

## OSINT Challenge: Bob L'éponge

<figure><img src="https://382757542-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FfAxmqRz869b0dQQ6DjHW%2Fuploads%2F7o9gTx5SRIz5YLSueSGZ%2FScreenshot%202024-11-17%20at%2012.00.25%E2%80%AFAM.png?alt=media&#x26;token=f285e44e-4374-4391-85c7-0afc89731eab" alt="" width="375"><figcaption></figcaption></figure>

In this writeup, we’ll walk through solving an OSINT challenge involving a YouTube video link. The task was to find a hidden flag without any obvious clues in the video or its description.

### Analyzing the YouTube Video

The first step was to check the YouTube video link provided in the challenge. I looked into the following aspects:

* **Video Description**: No flag or useful information found.
* **Comments**: There were no hints or flags present in the comments.
* **Uploader’s Profile**: I checked the profile of the uploader, including the bio, but didn’t find anything useful.

### Checking the Playlists

Noticing that the uploader had some public playlists, I decided to investigate them:

* I checked each video in the playlists, but there were no visible flags or links.
* This made me suspect that the flag could be hidden in a less obvious place, which is common in OSINT challenges.

### Extracting YouTube Metadata

Since the flag wasn’t visible in the video content, description, or playlists, I turned to YouTube metadata analysis. I used the following website for this:

[YouTube Metadata Tool](https://mattw.io/youtube-metadata)

<figure><img src="https://382757542-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FfAxmqRz869b0dQQ6DjHW%2Fuploads%2FRAVkDVg0G6kfatEbJCtI%2FScreenshot%202024-11-17%20at%2012.03.20%E2%80%AFAM.png?alt=media&#x26;token=b567ba2b-c337-4cac-b8b3-cc4801da6218" alt=""><figcaption></figcaption></figure>

This tool allows you to extract hidden metadata from YouTube videos, including tags, which are often used by creators but are not visible directly on the YouTube platform.

### Finding the Hidden Flag

After inputting the YouTube video link into the metadata tool, I reviewed the extracted metadata. Among the various tags, I found the hidden flag:

<figure><img src="https://382757542-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FfAxmqRz869b0dQQ6DjHW%2Fuploads%2F6xWRVOws0xqFmllRSRaw%2FScreenshot%202024-11-16%20at%2011.14.54%E2%80%AFAM.png?alt=media&#x26;token=30275831-443b-4c3b-b7e5-5e24c4aa897f" alt=""><figcaption></figcaption></figure>