← Back to home

UIUCTF 2024 — The Weakest Link

LISA and the secret business partner have a secret Spotify collaboration planned together. Unfortunately, neither of them have the opsec to keep it private. See if you can figure out what it is!

This is part three of a three-part OSINT suite including Hip With the Youth, An Unlikely Partnership, and The Weakest Link. I recommend starting with the other two challenges!

In UIUC-chan's LinkedIn contact info, we can find a link to her Spotify:

image

image

Unfortunately, UIUC-chan only has one public playlist, and no clues with saved playlists or followers.

image

Indeed, searching anything related to LISA or UIUC-Chan return no relevant results.

image

Instead, we can follow UIUC-Chan, then inspect their recent activity via "Friend activity" in the Spotify app.

image

Looking at this recently played playlist, we get the flag:

image