Juniors CTF 2016 :: Stop Thief!

hello everybody and welcome back in the YouTube video my name is John Hammond and I'm still showing off some of the junior CTF capture a flag game went on this this past weekend so this next challenge I wanted to showcase for you was called stop thief it was supposedly a trivial recon but still five hundred points so not too many people solved it all credit and kudos really goes to a really cool friend of mine that I met while I was playing the game that kind of helped drag me through this this challenge I admittedly like a thousand percent would not have been able to solve this challenge without his help so extreme shout out and thanks to that individual regardless I want to showcase and demonstrate what the challenge is and consisted of it was a terrible challenge really really shitty a whole lot of guessing and it's all in Russian which I do not know so ok so challenge from here is as Wendy someone has stolen her uncle's Xerox I think I know who could do it dipper really look I found this photo I mentioned something suspicious about the fun to look it up on VK and now everything is absolutely obvious tell me who it is try to find out yourself dipper so here's the image which I'm assuming this X is the 0 X log oh they're referring to someone who stole in the Xerox and they reference VK in the challenge description which I don't know if you had known or not known about before it is the largest European online social networking service apparently is like the equivalent of of Facebook so you can go to it and I ended up creating a web an account so I am logged in because I wanted to be able to help search and find and solve this challenge so I'm creating an account for it but what you do here is there's some things you can do to actually translate this this Russian text out of the image if if you wanted to because obviously you can't copy and paste this because it's an image so you'd have to type it out but you don't have a Russian keyboard so you can use like some tools Russian keyboard I think yeah yeah Russian online Russian keyboard and that could work for you if you want to type things out and you could pump the MiG with translate and stuff like that I actually have some of those files tool here I think so I'll showcase what I have cyber right up see online juniors he stop thief so the sign I had typed it out took that each part of it that was visible and when you translate this and it's photocopy read tower / red 10 which apparently is an address it's it's it's a location and there's there's a there's a greater hint with this too if you actually download this image so let's say this image in our juniors page or folder and if you check this out exit tool you look at the metadata for that image and there is actually a GPS position and a latitude and longitude in here so if you wanted to what you could do is you could look for this GPS position in like Google Maps or Google Earth or Google Street View so that I ended up actually doing that I took this location this GPS location I also wanted to convert it to like degree symbol so I could actually have a real string that Google Maps would probably be able to find and look through so I copied and pasted the degrees symbol because I don't know the alt key code for it and then we have this lake little location this GPS coordinates latitude and longitude coordinate so you can you can find it you can search Google Maps for this and it will bring you not to Salem Connecticut it will instead okay it is east-west it will bring you to 155 whatever this street is lenin avenue 155 london have another if you can read that perfectly right here but this house is 155 lenin avenue where though i actually try to click on some other things to determine okay where am i i am in Tomsk russia and lenin avenue 155 there so yeah that's the location again you can look this in street view if you wanted to and you'd literally get an image of the house and you can see the the sign on there you can see this xerox sign on the house if you wanted to but it's a picture of that 155 one an avenue so what you end up doing is now that you have this information and apparently if you look this up on VK you can find news that you can see if someone has actually stolen something you can look in the news section of it and this is completely obscure and again a lot of guessing that I again would not have been able to figure out without some awesome individuals help so kudos goes to him all credit for this video goes to that individual but here's what we do in VK you can search from news and you should be able to search by news and [Music] trying to get more properties out of this okay I think I got if you go to search it should give you some search parameters you can expand and you can look by location so you can specify that 1:55 lenin ave in Tomsk russia and ideally we'll be able to find it honestly even just like stole one of the addresses that I got out of Google Maps and I tried to work with it there and zoom in on that location because you want to have them cursor where it actually is so it looks like it's at a fine place if you go into the satellite you could like move around the actual location zoom in a bit more again I actually ended up dragging this and like zooming out to a point where I could see what the map look like and if I change the map you can get the house numbers so I knew I needed to be further up to get 155 right here so I just left it there and that matches what I see in Google Maps and 120 right across the street 155 right here and 120 on the other side so I know I'm in the right place so I search nearby posts for this and I get a bunch of things and what I ended up doing is I actually just looked at the location that these pictures are from because apparently you can like look and search for more images or more pictures from that location so I try to show more pictures and we see in our photos nearby oh there are some of the images and I click on some of these to take a look at them and I see it's from this account laughing my ass off LMFAO so I click on that guy to see if it brings me anything interesting not particularly that might have been someone's random account there's nothing interesting here there's no other information other than that image but there are other images that I saw right you can click on more of these and you get Pavel volkoff's which is another individual we can look at he has a lot of photos so maybe not for the purpose of the CTF whatever are there anymore click on some of these other ones Pavel again Pavel again Pavel again all Pavel what the heck so we'll scroll down to see if there were any more I keep showing more pictures because at this point you're I'm pretty desperate I'm hoping to see like oh ok more pictures more pictures of the sign again Pavel I see his user name the top right here again lmao again Pavel again Pavel and again what the heck is there anymore I keep looking for more pictures in this area more signs of L Pavelka fil Pavelka fell again Pavel and this is actually the solution by the way so like that's why I'm still continued looking through here I don't know why I keep seeing ovals post but not the ones that I'm looking for though am I going to looking through the same pictures over and over again right now I'm pretty sure VK is just like showing me the same pictures again oh hey you see some gravity falls stuff and that is curious so I go to this individual's dipper as i7e and oh he has a picture of the sign as well and there's some Russian text here so what I did is like google translate this and it says you are on the right track okay awesome so this individual this this page their username jam underscore dipper is what the flag is you submit jam underscore Dipper as the flag I guess the the challenge prompt does say tell me who is it so I guess you would to submit the username if that's the interpretation you ended up having but I wish it were something a bit more clear like oh this is the flag or you found me here's a flag whatever but no the you are on the right track is that all you end up getting with the images and some gravity falls pictures so jam underscore dipper is what you submit and you get 500 points for that but holy crap I I spent way too many hours on this with the guessing and looking around in the Google Street View and trying to explore that that address and then again just looking through random pictures of other individuals um on VK so that's it again kudos to an individual for helping me get this challenge because of what the heck this would never have been something that I would have been able to gotten on my own not knowing Russian and not knowing VK and not knowing what the heck do I do with this picture so okay that's that's that that's how you solve the stop thief for Junior CTF hope you guys enjoyed that video um it's really it currently and I'll show you hopefully a little bit more some other challenges and demonstrate and showcase those in a later video so see you that