BalalaikaCr3w - recon

Get the message (recon 300)

azrael — Mon, 17 Mar 2014 11:01:12 +0000

Category:

Event:

RuCTF Quals 2014

In this task somebody is telegraphing Olimpiada strange messages with secret password and we need to find that.

We found on Olimpiada's VK.com avatar image her phone number +37255933368 and allusion to the fact that we must use Telegram Messenger. Because of a lot of login requests Telegram started to discard connections. Organizers published message that she "...don't like telegram messenger any more!(( Good old sms rulezzz!"

So we found a service to read sms from public phones and read her messages. We got flag RUCTF_THE_MOST_SECRET_PA$$_3V3R from one of them.

affiliate tracking url | Vans Shoes That Change Color in the Sun: UV Era Ink Stacked & More – Pochta News

The Card (recon 500)

azrael — Mon, 17 Mar 2014 08:23:53 +0000

Category:

recon

Event:

RuCTF Quals 2014

In this task we need to find Olimpiada Balalaykina's bad ass friend credit card number.

We found a man with login bad_ass_guy@quals2014.ructf.org in Olimpiada's Gmail contacts list. We discovered his twitter account https://twitter.com/badassguy_2014 with a single tweet in it where he published link to Yandex.Disk yadi.sk/d/hyGxtX4tK9wWM. We saw a photo with his credit card after following a link:

We can get four last digits of card number 7200. But where get first twelve assuming that card number length is sixteen?

Easy to see that magnetic track was stripped and covered with something like ink so we can read track.

We had read available binary track and converted it to characters. Note: this track contain 7-bit alphanumeric characters and we should read from right to left (big-endian).

Thanks to Wiki we had known that we on the right way. % - start sentinel, B - format code, up to next 19 characters - primary account number (PAN) usually matches the credit card number.

Finally we've got card number 41725090307X7200. There are ten options (0 <= X <= 9). We solved task after some bruteforce with flag 4172509030767200.

jordan release date | Altra Timp 3 Review , Best Trail Running Shoes 2021

Stolen camera (recon 200)

azrael — Fri, 14 Mar 2014 14:27:54 +0000

Category:

recon

Event:

RuCTF Quals 2014

In this task we need to find city where Olimpiada Balalaykina's camera was stolen.

There are two photoalbums on her page at VK.com.

One album says that she had a trip through USA. Thanks to album's description we had known that camera was stolen after trip.

Another one told us that there was her Granny's birthday on last Sunday. Album was created on March, 5 so Granny's birthday on March, 2. One photo shows that Granny's age is 80 and now 2014 so her date of birth is 02.03.1934 (dd.MM.yyyy).

We can get her e-mail from personal info. E-mail is balalay_5524@quals2014.ructf.org. We also saw her post: "My friend always tells me not to use my relatives' birthdays as a password...". So we have login and password for some mailing service. There is no login form on quals2014.ructf.org and we assumed that this is Gmail account and tryed to login. We had a success with password 02031934.

We found her friend message with the Google mapsengine link on map of their trip. They were in Grand Junction at the last day of trip when her camera was stolen.

affiliate tracking url | 『アディダス』に分類された記事一覧

Favourite book (recon 100)

azrael — Fri, 14 Mar 2014 10:52:32 +0000

Category:

recon

Event:

RuCTF Quals 2014

All tasks from recon category are related to the search for information about Olimpiada Balalaykina. In this task we need to find her favourite book.

First, we found Olimpiada Balalaykina's VK.com page using task description. First post was small photo of bag with message "I've just bought a lovely bag with my favourive citations". We found big photo and could read citations with help Google image search. That was a book page extract from Jane Austen’s Pride and Prejudice.

Sports News | Saucony Lanzar JAV 2 - Unisex , Worldarchitecturefestival

Landlord (recon 400)

azrael — Fri, 14 Mar 2014 10:11:20 +0000

Category:

recon

Event:

RuCTF Quals 2014

In this task we need to find Olimpiada Balalaykina's landlord name.

We have already found her VK.com page. There we can see her location "garages.blocks.daisy Miami".

Organizers gave a hint:

That was reference to site http://what3words.com/. We easily found address 888 S Bayshore Ln, Coconut Grove, Miami, FL 33133 by use location information (garages.blocks.daisy). We found this house at zillow after some search. There we found a county website link that gave current owner's name JANE MARCUS. This is flag.

jordan Sneakers | Saucony Lanzar JAV 2 - Unisex , Worldarchitecturefestival