│ Category: OSINT
│ Author: Imattas aka Zemi
│ Flag: byuctf{Chom_Arun}
│ Source Path: OSINT/LegoClones
────────────────────────────────────────────────────────────────────────────────
--[ Challenge Description ]--
-- text --
Title: Questionable Trip
Description: Every summer, BYU student LegoClones takes a trip somewhere in the world, for absolutely zero reason at all. Can you find where he took this picture?
Flag Format: byuctf{<name of business he is in>}
Example: byuctf{Costa_Coffee}
Files: [image.png]
────────────────────────────────────────────────────────────────────────────────
--[ Provided Materials ]--
- Repository folder
https://github.com/BYU-CSA/BYUCTF-2026/tree/main/OSINT/LegoClones
- OSINT/LegoClones/challenge.md
https://github.com/BYU-CSA/BYUCTF-2026/blob/main/OSINT/LegoClones/challenge.md
- OSINT/LegoClones/writeup.md
https://github.com/BYU-CSA/BYUCTF-2026/blob/main/OSINT/LegoClones/writeup.md
────────────────────────────────────────────────────────────────────────────────
--[ Recon / Initial Analysis ]--
This page imports the BYUCTF 2026 source material for the OSINT challenge
LegoClones. The prompt is kept separate from the solve notes, and upstream
artifacts are linked so the challenge can be replayed from the original
repository.
────────────────────────────────────────────────────────────────────────────────
--[ Vulnerability / Observation ]--
The useful observation comes from the imported solve notes below. I kept the
original technical path intact while normalizing the page metadata, challenge
grouping, and author attribution for the Volume 2 writeup archive.
────────────────────────────────────────────────────────────────────────────────
--[ Exploitation / Solution ]--
Source: OSINT/LegoClones/writeup.md
https://github.com/BYU-CSA/BYUCTF-2026/blob/main/OSINT/LegoClones/writeup.md
The Wat Arun on the left side of the image should make it pretty easy to figure
out roughly where we are in Bangkok. From there, you just need to play around on
Google Earth until you get the framing right. Going into street view tells you
immediately where the right business is. I stole a screenshot off the internet.
LegoClones doesn't actually go to Thailand apparently.
Flag: byuctf{Chom_Arun}
────────────────────────────────────────────────────────────────────────────────
--[ Full Exploit Script ]--
No standalone exploit script was present in the selected source material.
────────────────────────────────────────────────────────────────────────────────
--[ Key Takeaways ]--
- The BYUCTF 2026 challenge material is preserved with local archive formatting.
- The page author is normalized to Imattas aka Zemi.
- The source repository remains linked for handouts, services, and solve
artifacts.