OSINT training ground
Welcome to the Lab.
This is home to the fictional companies, social networks and tools of your TraceHunt investigations. Any resemblance to real people or companies is coincidental.
The tools speak English. The fictional websites are French, like the companies in the investigations: reading them is part of the game, and your browser's translator can help. Always give your answers exactly as they appear in the Lab.
A fictional website such as https://www.exemple.example lives at the address /www.exemple.example/. Its root files (robots.txt, sitemap.xml…) are in the same place: /www.exemple.example/robots.txt. A subdomain is a separate site: intranet.exemple.example → /intranet.exemple.example/.
🌐 Social networks
Microblog: short posts, replies, account search.
📸LumigramPhoto network: profiles, captions, search through posts.
💼LinkoraProfessional network: careers, recommendations, company pages.
🚲Forum Vélo PassionCycling forum: threads, member profiles.
🏃FouléeRunning app: athlete profiles, activities and GPS tracks.
⚒️ForgeoCode forge: repositories, commit history, developer profiles.
🔍FouineurSearch engine: advanced operators site:, filetype:, intitle:…
📋CollebinAnonymous text sharing: what leaks often ends up here.
🧰 Investigation tools
Who registered a domain name, and when.
In real life: whois, ICANN Lookup
Old versions of a website's pages.
In real life: Wayback Machine
Public logs of HTTPS certificates: they reveal subdomains.
In real life: crt.sh
On which Lab platforms does a username exist?
In real life: WhatsMyName, Sherlock
Camera, date and GPS position hidden in a photo (EXIF).
In real life: exiftool, Jeffrey's Image Metadata Viewer
Officers, filed documents and links between companies.
In real life: Annuaire des entreprises, Pappers, OpenCorporates
A domain's records: mail, verifications, subdomains.
In real life: dig, DNSDumpster, SecurityTrails
Base64, hexadecimal, binary, ROT13, Caesar, Vigenère.
In real life: CyberChef, dCode
A message hidden in an image's pixels (LSB).
In real life: zsteg, StegOnline, Aperi'Solve
What a sound hides in its frequencies.
In real life: Audacity, Sonic Visualiser
All the readable text hidden in a file.
In real life: strings, binwalk
Has an address or a username leaked?
In real life: Have I Been Pwned, DeHashed
Watermarks hidden in a text (zero-width spaces).
In real life: dCode, hex editor
City and provider of an IP address.
In real life: ipinfo.io, IP whois
A plane's flight history from its registration.
In real life: Flightradar24, FlightAware
Follow the money on a blockchain.
In real life: mempool.space, Blockchair
The websites that share the same analytics identifier.
In real life: DNSlytics, SpyOnWeb, BuiltWith
MD5, SHA-1 and SHA-256 of a list of texts.
In real life: CyberChef, md5sum
Where does an image appear, even cropped?
In real life: Google Lens, TinEye, Yandex Images
Location of a Wi-Fi access point from its name or MAC address.
In real life: WiGLE
Sun position and cast shadows: date a photo.
In real life: SunCalc, PeakVisor
The starting point of each investigation is given in its briefing, on TraceHunt.