menu arrow_back 湛蓝安全空间 |狂野湛蓝,暴躁每天 chevron_right All_wiki chevron_right CTF-Writeup chevron_right GrabCON CTF 2021 chevron_right OSINT chevron_right Tour (2)
  • home 首页
  • brightness_4 暗黑模式
  • cloud
    xLIYhHS7e34ez7Ma
    cloud
    湛蓝安全
    code
    Github
    lightbulb_outline README

    Tour (2)

    Description

    Can you find the flight number and the flight operator of the last flight that took her to the final destination?

    E.g. GrabCON{AF226_Air_France}

    required to solve The Tour (1) first.

    Solution

    From the previous task "The Tour (1)" , we see some interest clue : airline ticket and the car that came to the airport to receive her

    Investigation :

    1. What is Let's go! CAMPER which is on the car?
    2. The barcode was leaked on that airline ticket picture so what that barcode is about?

    So now we try to find Let's go! CAMPER and we get their website.

    enter image description here

    We can define her airline ticket now. The last location that she have a food is at Serbia and the car that came to the airport to receive her is in Antalya, Turkey . So it means that she fly from Serbia to Turkey. Here is an serbia ticket example:

    enter image description here

    Look at the example once, The ticket is very similar to her ticket. So We can detect that:

    1. Her flight operator is : AirSERBIA
    2. Flight No : JU XXXX

    How we find Flight Number?

    First we try find the type of barcode.

    enter image description here

    We see that it's a PDF417 barcode which according to IATA (wiki) standard. Easier way, we use online tool to read the barcode.

    https://online-barcode-reader.inliteresearch.com/

    Look at the result, we can detect a pattern which look like Flight No. but what is BEGIST which stand before JU 0802? Base on IATA's code search:

    • the 2-letter code of an airline or identify to which airline a 2-letter code corresponds
    • the 3-letter code of an airport location or identify which airport uses a particular code

    So BEGIST which means Origin to Destination. We can find the 3-letter code using this airport code list:

    BEG = Belgrad (Beograd) - Belgrade Nikola Tesla International IST = Istanbul - Istanbul Atatürk Airport

    Let's merge our info to get a flag base on example flag in description above:

    1. JU 0802 = JU802
    2. AirSerbia = Air_Serbia

    flag = GrabCON{JU802_Air_Serbia}

    Learn more : What’s contained in a boarding pass barcode?