OSINT: Where am I? (100pts)

Challenge Description

A wanted threat actor has made a recent Instagram post. Intelligence suggests that they may be somewhere in Victoria.

Our goal is to identify which suburb the pictures were taken in.

Approach

We’re given an instagram handle, @jriscman so let’s start there. We discover a single post, which has three photos. Additionally, it is tagged with #melbourne, so we can assume the photo was taken in/near Melbourne.

Taking a look at the images we notice the following:

• Beach, as mentioned.
• There are bath boxes/beach shacks near the shoreline.
• The shacks have greenery behind them.

Search on google reveals that there are two well known suburbs in Melbourne which have beach boxes, namely:

• Brighton
• Mornington

Additionally, some knowledge of the land (or better googling) would tell you that there are also some in Frankston and St Kilda.

Regardless, at this point head to Google Maps and look at the candidate beaches. To figure out which one it is, we take note of the third observation from before - the greenery behind the beach huts. Looking at our four candidates, there is one, and only one suburb that matches this description, being Mornington.

At this point, we can check by submitting it as the flag:

RISC{Mornington}

Solved!