529 words
3 minutes
The Benarroch File CTF Writeup

Challenge Brief#

The challenge is based on a real Interpol Red Notice and is intended strictly for legal OSINT training.

The task is:

  • Identify the target’s last known address in the year 2015
  • Use only open-source and legal research methods
  • Submit the answer in this exact format:
OSINT{[street number], [street name], [postal code] [city]}

The target named in the challenge is:

  • BENARROCH, INONE
  • Date of birth: 19/05/1978
  • Country link: Israel, France

The challenge also references the official Interpol Red Notice entry, so the first step is to verify the baseline information there before branching into deeper research.

Step 1: Start with the Official Interpol Record#

The Interpol notice confirms the target identity and the offenses associated with the case.

Interpol Red Notice entry

The listed charges include organized fraud, money laundering related to organized fraud, and participation in a criminal conspiracy. That matters because those kinds of offenses often connect to broader business structures, shell companies, associates, or corporate registrations rather than a single isolated individual.

In practical OSINT terms, this gives us a direction:

  • Verify the person first
  • Look for business ties
  • Focus on records close to 2015, since the challenge asks for the last known address in that year

Step 2: Search the Name in Public Sources#

The next move is a plain-name search to map the public footprint of the target.

Initial Google search results

The first result does not add much beyond what Interpol already provides.

First result with no useful extra data

So we move to the second result.

Second result showing company links

This result is much more useful. It suggests that the target is linked to two companies in France. That is the first major pivot point in the investigation.

Step 3: Choose the Most Relevant Corporate Lead#

Because the challenge specifically asks for the last known address in 2015, we should prioritize the company timeline that overlaps most closely with that date.

One of the companies listed is:

PRESTIGE CONSEIL HABITAT
Date de creation: 31/03/2014

This is a strong lead because:

  • It was created shortly before 2015
  • It may contain filings, registry records, or legal notices from the exact time window we need
  • Corporate paperwork often includes official addresses for directors, managers, or business-related contacts

That makes it the most logical branch to investigate first.

Step 4: Research the Company in Business Directories#

At this stage, the investigation shifts from person-based searching to company-based searching.

Searching for the company name

The search results point to business-directory style websites. These sources usually repeat each other, but they can still help us confirm company names, dates, legal events, and document links.

Business directory results for the company

Since our objective is tied to a specific year, the next step is not just to read the profile page, but to look for filings or notices dated around 2014-2015.

Step 5: Filter for 2015 Documents#

Looking through the company information leads to a document associated with 2015, related to an acquisition or transfer event involving the company.

Finding a 2015 document in the company records

This is the critical find. Historical legal or corporate documents are often the best evidence in OSINT investigations because they preserve addresses tied to a specific moment in time.

Opening that document reveals the information needed to answer the challenge.

The document containing the address details

Final Extraction#

From the document, we can extract:

  • Street number: 95
  • Street name: Rue Sedaine
  • Postal code: 75011
  • City: Paris

So the final flag is:

OSINT{95, Rue Sedaine, 75011 Paris}