# OSINT - Dark Social Web
## Challenge description:![dark_social_web](https://user-images.githubusercontent.com/70543460/94454704-dd1ad480-01ba-11eb-8193-c5f2eb87039d.png)
## Solution:
There is a username in the challenge description (**0xDarkArmy**)...
I checked all the social media sites for that username, and I found an interesting thing in **Reddit**!

(https://www.reddit.com/user/0xDarkArmy/)
![image](https://user-images.githubusercontent.com/70543460/94455063-54506880-01bb-11eb-8858-0dd643ca1fd8.png)

I scanned that QR code and I got this link: (https://qrgo.page.link/zCLGd), which redirects to this link: (http://cwpi3mxjk7toz7i4.onion/)

For those who don't know what is **.onion**:
![image](https://user-images.githubusercontent.com/70543460/94455578-e9536180-01bb-11eb-9b41-c27b32140399.png)

I opened TOR browser, then I opened that link and I got this website:
![site](https://user-images.githubusercontent.com/70543460/94456114-19026980-01bc-11eb-8ab9-95f62c7ce80f.png)

**I checked the source code, the CSS files and the JS files and I didn't find anything special...**

![source](https://user-images.githubusercontent.com/70543460/94456729-48b17180-01bc-11eb-8c68-3299a9fce1d3.png)![source2](https://user-images.githubusercontent.com/70543460/94456731-49e29e80-01bc-11eb-82ca-8a487e9dbf95.png)

Then I checked **/robots.txt** and I found a part of the flag:
![robots txt](https://user-images.githubusercontent.com/70543460/94456993-a645be00-01bc-11eb-8e63-4f56f1c85ec6.png)

To make a long story short ?, I found the other part of the flag in a header of a GET request:
![request](https://user-images.githubusercontent.com/70543460/94457570-6a5f2880-01bd-11eb-9e74-015ed3f1151d.png)

**darkctf{S0c1a1_D04k_w3b_051n7}**