Rating: 5.0

> # Data Breach
> ## Points 175
> Oh no! Geno’s email was involved in a data breach! What was his password?
>
> Author: t0uc4n

## Solution

First we need to know what was Geno's email.
He didn't add it to contact info on linkedin, but he linked [about.me](http://about.me/genoikonomov) page.
We can find there links to his social media accounts. On his [github](https://github.com/incogeno) page we can see his email which is:

```
[email protected]
```

Using [](https://haveibeenpwned.com/) doesn't show anything useful.
Having email we can use [google dorking](https://medium.com/infosec/exploring-google-hacking-techniques-using-google-dork-6df5d79796cf) to search for data leaks containing his email.

Looking this up:

```
allintext: [email protected]
```

We are prompted with [this](https://nss.ackaria.xyz/index.html) data breach.
Quick `ctrl+f` to search for Geno's email and we have results:

```
[email protected]:password=StartedFromTheBottom!
```

So flag is: `RS{StartedFromTheBottom!}`

Original writeup (https://github.com/a1eaiactaest/writeups/blob/main/ritsec2021/osint/data-breach.md).