Post cover image

August 5, 2026

Overheard at Breakfast (THM) Tryhackme Walkthrough Hacker Holidays Day 6

Description : Two strangers. One conversation. One profile they never meant to reveal.

By Lawvye

2 min read

Difficutly : Easy

Category : OSINT

Note : All of the content and images are from https://tryhackme.com/

Room : https://tryhackme.com/room/hh-overheardatbreakfast-6f01793c

Enjoy.

Task 1 Hacker Holidays : Day 6

Overheard at Breakfast

Points : 60

Category : OSINT

Difficulty : Easy

🛎️ Concierge Briefing

The breakfast terrace is loud this morning, clinking cutlery, espresso machines, the usual chatter. One guest couldn't help but linger at a nearby table, seeing more of a conversation than they were meant to.

When the table's occupant stepped away for a refill, they seized the moment and grabbed a screenshot before it could disappear. Somewhere in that conversation is enough to track down an account nobody was supposed to find.

🗝️ ROOM ACCESS

Download Task Files

🏖️ TODAY'S ITINERARY

Analyze the provided conversation for identifying details

Extract the relevant clues

Locate the hidden account

Submit the flag

📸 @0xMia's STORY

@0xMia· posted 40 min after room unlock

"the breakfast crowd really said the quiet part out loud this morning 😭 y'all need to actually READ what they said, not just skim it #HackerHolidays"

OSINTSocial MediaHashing

Answer the questions below

Q1.) What is the flag?

Step 1: Analyze the Conversation

  • Read the provided screenshot carefully to find key details.
  • Extract target username (Lambo), location (Byte Lotus Hotel), and email (lambobytelotushotel@gmail.com).
  • Note the mention of a free profile-linking service starting with the letter G (Gravatar).

Step 2: Normalize and Hash the Email

  • Normalize the email by lowercasing and trimming spaces: lambobytelotushotel@gmail.com.
  • Generate the SHA-256 hash of the email address.
  • The resulting hash is d43faafe9d7f056793bd037b8d6e321acad985c222d83775b10d6539e301e931.

Step 3: Query Gravatar and Extract the Flag

  • Request the public profile via endpoint https://gravatar.com/<hash>.json.
  • Inspect the JSON response fields, specifically looking at the aboutMe section.
  • Decode the hidden string to retrieve your final flag.
None

URL : https://gravatar.com/d43faafe9d7f056793bd037b8d6e321acad985c222d83775b10d6539e301e931.json

{"entry":[{"hash":"d43faafe9d7f056793bd037b8d6e321acad985c222d83775b10d6539e301e931","requestHash":"d43faafe9d7f056793bd037b8d6e321acad985c222d83775b10d6539e301e931","profileUrl":"https:\/\/gravatar.com\/cheerfullysongf28e3c3716","preferredUsername":"cheerfullysongf28e3c3716","thumbnailUrl":"https:\/\/1.gravatar.com\/avatar\/d43faafe9d7f056793bd037b8d6e321acad985c222d83775b10d6539e301e931","photos":[{"value":"https:\/\/1.gravatar.com\/avatar\/d4a5fc5d3128890778667e24617d7cc0","type":"thumbnail"}],"displayName":"Lambo","pronunciation":"Lam-boh","aboutMe":"Funny thing about email hashes, they follow you places you didn't expect. Glad you found the right corner of the internet! Here is your prize: VEhNe1MzY3JlVF9QcjBmaWwzX0g0c19iMzNuX0lkZW50MWZpM2R9","currentLocation":"Byte Lotus Hotel","profileBackground":{"color":"#1a1a2e","opacity":1,"size":100,"primary_color":"#ff4dfd","surface_color":"#16213e"},"header_image":{"fill":"full","size":100,"position_x":50,"position_y":51,"image_id":"d3c241f3c8328135a408744da25b07b2","hide_default_image":false}}]}

Inspect Element Sources :

None 
{
    "entry": [
        {
            "hash": "d43faafe9d7f056793bd037b8d6e321acad985c222d83775b10d6539e301e931",
            "requestHash": "d43faafe9d7f056793bd037b8d6e321acad985c222d83775b10d6539e301e931",
            "profileUrl": "https:\/\/gravatar.com\/cheerfullysongf28e3c3716",
            "preferredUsername": "cheerfullysongf28e3c3716",
            "thumbnailUrl": "https:\/\/1.gravatar.com\/avatar\/d43faafe9d7f056793bd037b8d6e321acad985c222d83775b10d6539e301e931",
            "photos": [
                {
                    "value": "https:\/\/1.gravatar.com\/avatar\/d4a5fc5d3128890778667e24617d7cc0",
                    "type": "thumbnail"
                }
            ],
            "displayName": "Lambo",
            "pronunciation": "Lam-boh",
            "aboutMe": "Funny thing about email hashes, they follow you places you didn't expect. Glad you found the right corner of the internet! Here is your prize: VEhNe1MzY3JlVF9QcjBmaWwzX0g0c19iMzNuX0lkZW50MWZpM2R9",
            "currentLocation": "Byte Lotus Hotel",
            "profileBackground": {
                "color": "#1a1a2e",
                "opacity": 1,
                "size": 100,
                "primary_color": "#ff4dfd",
                "surface_color": "#16213e"
            },
            "header_image": {
                "fill": "full",
                "size": 100,
                "position_x": 50,
                "position_y": 51,
                "image_id": "d3c241f3c8328135a408744da25b07b2",
                "hide_default_image": false
            }
        }
    ]
}

looking at aboutMe value and we got :

VEhNe1MzY3JlVF9QcjBmaWwzX0g0c19iMzNuX0lkZW50MWZpM2R9

ofcourse it's base64, the use this command for base64 decode

echo "VEhNe1MzY3JlVF9QcjBmaWwzX0g0c19iMzNuX0lkZW50MWZpM2R9" | base64 -d
None 
~$ echo "VEhNe1MzY3JlVF9QcjBmaWwzX0g0c19iMzNuX0lkZW50MWZpM2R9" | base64 -d
THM{S3creT_Pr0fil3_H4s_b33n_Ident1fi3d}

Answer : THM{S3creT_Pr0fil3_H4s_b33n_Ident1fi3d}

None None None

I hope you enjoyed reading this post as much as I enjoyed writing it. Thanks for reading my blog sir ;) Lawvye