Why don’t we all just take a break from hacking and enjoy some music on my webpage? https://0xcafe.neocities.org/
One of the OSINTs of all time.
We're given a "chill radio cafe" website, which cycles through a selected playlist of music.
Within the playlist array, we can find a "secret" YouTube link
["https://www.youtube.com/embed/3399f835EJ4?si=Owp_ilGj80Shdqwa&controls=0&autoplay=1", "shh", "keep this a secret"],bringing us to this video:
i bet there's a flagpole on that mountain... or maybe they're just radio towers... where are those groovy tunes coming from?
We can reverse engineer the first shot in the video to be from around this angle through these two buildings on UCSD campus:
The FOV from that shot, plus a quick search of radio towers near UCSD, confirms the "magic" mountain referenced in the video to be Mount Soledad to the south of UCSD campus.
Indeed, we can see the referenced radio towers on Google maps and street view right by that area:
We can then look up radio stations in San Diego online, filtering for those broadcasting out of Mount Soledad.
This is where I got lost in the weeds looking up Google reviews for every pin on the mountain, clicking through Wikipedia talk pages and edit histories for every radio station broadcasting from the tower, etc.
Turns out, you just need to connect the salad GIF in the video (and the name of the channel, ilovesalad) to the "Groove Salad" station broadcasting on KPBS's frequency.
With this, we can find Groove Salad's official online streaming site here:
In the guestbook on that website, we find the flag.
sdctf{0xc0ff3-FM}