Cyber Apocalypse 2025 Writeups

This is a writeup for the OSINT challenges from Cyber Apocalypse CTF 2025.

OSINT

Echoes in Stone

Challenge: In the twilight archives of Eldoria, Nyla studies an image of an ancient Celtic cross. Her enchanted crystals illuminate the intricate carvings as she searches through forgotten tomes. The cross stands at a crossroads of realms and time, its weathered surface telling tales older than Eldoria itself. As her magical threads of knowledge connect across centuries, the true name of the monument emerges in glowing script before her eyes. Another mystery solved by the realm’s most skilled information seeker, who knows that even stone can speak to those who know how to listen.

Author: Joey

We are given this image:

We performed a reverse image search and found this location on Wikipedia:

Flag: HTB{Muiredach_High_Cross}

The Stone That Whispers

Challenge: In the twilight archives of Eldoria, Nyla studies an image of a mysterious monument. Her enchanted crystals glow as she traces ancient maps with rune-covered fingers. The stone atop the hill of kings calls to her, its secrets hidden in scattered records across realms. As her magical threads of knowledge connect, the true name emerges in glowing script: “The Stone of Destiny.” Another mystery solved by the realm’s most skilled information seeker, who knows that every artifact leaves traces for those who can read the signs.

Author: Joey

Similar to the first challenge, we reversed the image and found this Wikipedia page:

From the challenge description, we know there are no special characters, so the flag is:

Flag: HTB{Lia_Fail}

The Mechanical Bird’s Nest

Challenge: In the highest tower of Eldoria’s archives, Nyla manipulates a crystal scrying glass, focusing on a forbidden fortress in the desert kingdoms. The Queen’s agents have discovered a strange mechanical bird within the fortress walls—an unusual flying machine whose exact position could reveal strategic secrets. Nyla’s fingers trace precise measurement runes across the crystal’s surface as the aerial image sharpens. Her magical lattice grid overlays the vision, calculating exact distances and positions. The blue runes along her sleeves pulse rhythmically as coordinates appear in glowing script. Another hidden truth uncovered by the realm’s premier information seeker, who knows that even the most distant secrets cannot hide from one who sees with magical precision.

The Mechanical Bird’s Nest: HTB{XX.XXX_-XXX.XXX}
Example: HTB{48.858_-222.294} Latitude and longitude format with a dash separating the coordinates

Author: Joey

We reverse searched the image and found that the place is in Area 51. Using Google Maps, we found the coordinates:

Flag: HTB{37.247_-115.812}

The Shadowed Sigi

Challenge: In the central chamber of Eldoria’s Arcane Archives, Nyla studies a glowing sigil captured by the royal wardens. The ethereal marking—”139.5.177.205”—pulsates with malicious energy, having appeared in multiple magical breaches across the realm. Her fingers trace the sigil’s unique pattern as her network of crystals begins to search through records of known dark covens and their magical signatures. The runes along her sleeves flash with recognition as connections form between seemingly unrelated incidents. Each magical attack bears the same underlying pattern, the same arcane origin. Her enchanted sight follows the magical threads backward through time and space until the name of a notorious cabal of shadow mages materializes in glowing script. Another dangerous secret revealed by Eldoria’s master information seeker, who knows that even the most elusive malefactors leave traces of their magic for those skilled enough to recognize their unique signature.

HTB{APTNumber}

Author: Joey

My first approach was to look up the IP address, which led me to a monument in Kuala Lumpur. After the author clarified that we should look for the APT group related to this IP address, I checked VirusTotal and found the APT group:

Flag: HTB{APT28}

The Poisoned Scroll

Challenge: In her crystal-lit sanctum, Nyla examines reports of a series of magical attacks against the ruling council of Germinia, Eldoria’s eastern ally. The attacks all bear the signature of the Shadow Ravens, a notorious cabal of dark mages known for their espionage across the realms. Her fingers trace connections between affected scrolls and contaminated artifacts, seeking the specific enchantment weapon deployed against the Germinian leaders. The runes along her sleeves pulse rhythmically as she sifts through intercepted messages and magical residue analyses from the attack sites. Her network of information crystals glows brighter as patterns emerge in the magical attacks—each victim touched by the same corrupting spell, though disguised under different manifestations. Finally, the name of the specific dark enchantment materializes in glowing script above her central crystal. Another dangerous threat identified by Eldoria’s master information seeker, who knows that even the most sophisticated magical weapons leave distinctive traces for those who know how to read the patterns of corruption.

Poisoned Scroll: HTB{MalwareName}

Author: Joey

FIRSTLY, I thought this challenge was related to the previous one. I searched for malware from the APT28 group that targeted German people or politicians but found nothing. After 12 hours, I searched directly for malware targeting German politicians and found this article:

https://duo.com/decipher/apt29-phishing-attack-targets-german-political-parties

The group was actually APT29, not APT28. From the report, we found that the malware name was WINELOADER.

Flag: HTB{WineLoader}

The Ancient Citadel

Challenge: Deep in her sanctum beneath Eldoria’s streets, Nyla arranges seven crystalline orbs in a perfect circle. Each contains a different vision of stone battlements and weathered walls—possible matches for the mysterious fortress the Queen seeks in the southern kingdoms of Chile. The image in her central crystal pulses with ancient power, showing a majestic citadel hidden among the distant Chilean mountains. Her fingers dance across each comparison crystal, her enchanted sight noting subtle architectural differences between the visions. The runes along her sleeves glow more intensely with each elimination until only one crystal remains illuminated. As she focuses her magical threads on this final vision, precise location runes appear in glowing script around the orb. Nyla smiles in satisfaction as the fortress reveals not just its position, but its true name and history. A more challenging mystery solved by Eldoria’s premier information seeker, who knows that even the most distant fortifications cannot hide their secrets from one who compares the patterns of stone and shadow.

HTB{street_number_exactzipcode_city_with_underscores_region}
Example: HTB{Libertad_102_2520000_Viña_del_Mar_Valparaíso} Use underscores between words and include special characters where appropriate

Author: Joey

We are given this image:

After reversing the image and focusing on the castle, we found the location:

Following the exact format (it was annoying), we obtained our flag.

Flag: HTB{Iberia_104_2571409_Viña_del_Mar_Valparaíso}

The Hillside Haven

Challenge: Nyla stands before her largest crystal, hands weaving intricate patterns as she conjures an aerial view of the Western Hills district. A noble family’s ancestral home must be located precisely—its entrance marked with a numerical rune that could unlock valuable diplomatic secrets. The crystalline vision floats above her palms, revealing winding roads and nestled dwellings along the hillsides. Her enchanted sight zooms closer as she traces the hidden pathways between estates. The magical markers on her map pulse brighter as she narrows her search, until finally, the numerical sigil above one particular doorway glows with confirmation. Another secret revealed by Eldoria’s master information seeker, who knows that even among a thousand similar dwellings, each bears a unique magical signature for those with eyes to see.

Author: Joey

This was the final OSINT challenge. After carefully examining the image and reading the description for hours, I discovered that the location was in California.

I noticed the word “thousand” in the description and found a place called Thousand Oaks in California. The author confirmed I was on the right track in the ticket.

so i spend 2 days trying finding the house and yeah after all that nothingg found man !

after thas i found another Thousand Oaks in Berkeley. Using street maps, I finally located it outside the area of oaks in burkley

Flag: HTB{CoventryRoad}

Me after solving The Hillside Haven: