2025-10-12
📦 Angler
[phisher@4rhdc6.onmicrosoft.com](mailto:phisher@4rhdc6.onmicrosoft.com):PhishingAllTheTime19273!!
My sea is made of data, my shore a glowing screen, I cast my line with careful code, in a vast and global scene.
My lure is not a worm or fly, but a name you trust, a prize, My hook is hid within a link, disguised before your eyes.
I do not fish for flesh or fin, but for a private key, reeling in the secrets you mistakenly give to me.
Send to that which is found within the above, to the destination you have yet to reveal, and the secret you seek will reveal.
flag{mczxals2amxc}
flag{2naxajsmcwijdm}
flag{02818nccnasd}260c4cbe-e9a8-4cf7-bb0e-2548c1d7525d,"2025-09-23T22:59:50.0000000Z ",8,Update Company Branding Locale.,ts.admin@4rhdc6.onmicrosoft.com,"{""CreationTime"":""2025-09-23T22:59:50"",""Id"":""260c4cbe-e9a8-4cf7-bb0e-2548c1d7525d"",""Operation"":""Update Company Branding Locale."",""OrganizationId"":""05985beb-42bc-4c24-bf49-c1730a825406"",""RecordType"":8,""ResultStatus"":""Success"",""UserKey"":""100320051FFF86B2@4rhdc6.onmicrosoft.com"",""UserType"":0,""Version"":1,""Workload"":""AzureActiveDirectory"",""ObjectId"":""Company_05985beb-42bc-4c24-bf49-c1730a825406"",""UserId"":""ts.admin@4rhdc6.onmicrosoft.com"",""AzureActiveDirectoryEventType"":1,""ExtendedProperties"":[{""Name"":""additionalDetails"",""Value"":""{\""User-Agent\"":\""Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/140.0.0.0 Safari\/537.36\""}""},{""Name"":""extendedAuditEventCategory"",""Value"":""Company""}],""ModifiedProperties"":[{""Name"":""Included Updated Properties"",""NewValue"":""Metadata, UserIdLabel, IsPrivacyAndCookiesTextHidden, IsTermsOfUseTextHidden, IsAccountResetCredentialsHidden, LoginTenantBranding"",""OldValue"":""""},{""Name"":""Metadata"",""NewValue"":""9\/23\/2025 10:59:49 PM"",""OldValue"":""9\/23\/2025 1:59:29 AM""},{""Name"":""UserIdLabel"",""NewValue"":""flag{928nzlasdu2}"",""OldValue"":""""},{""Name"":""IsPrivacyAndCookiesTextHidden"",""NewValue"":""False"",""OldValue"":""""},{""Name"":""IsTermsOfUseTextHidden"",""NewValue"":""False"",""OldValue"":""""},{""Name"":""IsAccountResetCredentialsHidden"",""NewValue"":""True"",""OldValue"":""""}],""Actor"":[{""ID"":""ts.admin@4rhdc6.onmicrosoft.com"",""Type"":5},{""ID"":""100320051FFF86B2"",""Type"":3},{""ID"":""User_e006cd69-6c71-4a26-9b68-2d72d0788c06"",""Type"":2},{""ID"":""e006cd69-6c71-4a26-9b68-2d72d0788c06"",""Type"":2},{""ID"":""User"",""Type"":2}],""ActorContextId"":""05985beb-42bc-4c24-bf49-c1730a825406"",""InterSystemsId"":""3e95fd08-bcb3-4f5d-8d27-e4c34e3e0277"",""IntraSystemId"":""31d78b50-efd8-41ba-95cf-00aa0afd0eb3"",""SupportTicketId"":"""",""Target"":[{""ID"":""Company_05985beb-42bc-4c24-bf49-c1730a825406"",""Type"":2},{""ID"":""05985beb-42bc-4c24-bf49-c1730a825406"",""Type"":2},{""ID"":""Directory"",""Type"":2},{""ID"":""HuntressCTF"",""Type"":1}],""TargetContextId"":""05985beb-42bc-4c24-bf49-c1730a825406""}",,
flag{928nzlasdu2}Think this was misdirection added from another player
flag{3mcnzxjaslwinca}
https://aadcdn.msftauthimages.net/dbd5a2dd-gxr7pydexmutvr4g08oatcsbfcjb9k5fivtbrao5u7i/logintenantbranding/0/customcss?ts=638941895688640393
Send email with subject or email body Blowfish and get this responseWas on the right path hours ago, sending ‘Blowfish” to the email was too big of stretch
flag{didsomeonesay..?}