│ Category: OSINT
│ Author: Imattas aka Zemi
│ Flag: byuctf{Park_Elementary}
│ Source Path: OSINT/Hometown_Hero/Hometown_Hero_2
────────────────────────────────────────────────────────────────────────────────
--[ Challenge Description ]--
-- text --
Title: Hometown Hero 2
Description: That was pretty easy, right? Lets bump it up a notch. Can you tell me what Elementary School (https://en.wikipedia.org/wiki/Primary_school for the non-Americans) Cameron went to as a child? It shouldn't be too hard to figure out
Format: byuctf{School_Name}
Example: byuctf{Wasatch_Elementary}
────────────────────────────────────────────────────────────────────────────────
--[ Provided Materials ]--
- Repository folder https://github.com/BYU-CSA/BYUCTF-2026/tree/main/OSINT/Homet
own_Hero/Hometown_Hero_2
- OSINT/HometownHero/HometownHero_2/challenge.md https://github.com/BYU-CSA/BYUC
TF-2026/blob/main/OSINT/Hometown_Hero/Hometown_Hero_2/challenge.md
- OSINT/HometownHero/HometownHero_2/writeup.md https://github.com/BYU-CSA/BYUCTF
-2026/blob/main/OSINT/Hometown_Hero/Hometown_Hero_2/writeup.md
────────────────────────────────────────────────────────────────────────────────
--[ Recon / Initial Analysis ]--
This page imports the BYUCTF 2026 source material for the OSINT challenge
Hometown Hero 2. The prompt is kept separate from the solve notes, and upstream
artifacts are linked so the challenge can be replayed from the original
repository.
────────────────────────────────────────────────────────────────────────────────
--[ Vulnerability / Observation ]--
The useful observation comes from the imported solve notes below. I kept the
original technical path intact while normalizing the page metadata, challenge
grouping, and author attribution for the Volume 2 writeup archive.
────────────────────────────────────────────────────────────────────────────────
--[ Exploitation / Solution ]--
Source: OSINT/HometownHero/HometownHero_2/writeup.md https://github.com/BYU-CSA/
BYUCTF-2026/blob/main/OSINT/Hometown_Hero/Hometown_Hero_2/writeup.md
This one needs a small amount of brute forcing, but should be decently easy to
get. A good search that returns results is something like this in Chrome
"cameron snider" "park elementary". Brings up a picture of me as a child: https:
//kearneyhub.com/news/local/second-graders-brighten-holiday-for-military/article
_82ca6492-022d-11e0-bce3-001cc4c03286.html
THe brute forcing happens in the google dorking side, not the CTFd side...
Flag: byuctf{Park_Elementary}
────────────────────────────────────────────────────────────────────────────────
--[ Full Exploit Script ]--
No standalone exploit script was present in the selected source material.
────────────────────────────────────────────────────────────────────────────────
--[ Key Takeaways ]--
- The BYUCTF 2026 challenge material is preserved with local archive formatting.
- The page author is normalized to Imattas aka Zemi.
- The source repository remains linked for handouts, services, and solve
artifacts.