 Hello everybody and welcome back to the YouTube video. My name is John Hammond, and I'm still showing off some of the junior CTF Capture the flag game that went on this this past weekend. So this next challenge I wanted to showcase for you was called stop thief. It was supposedly a trivial recon, but still 500 points So not too many people solved it All credit and kudos really goes to a really cool friend of mine that I met while I was playing the game that Kind of helped drag me through this this challenge. I admittedly Like a thousand percent would not have been able to solve this challenge without his help So extreme shout out and thanks to that individual Regardless, I want to showcase and demonstrate what the challenge is and consisted of it was a terrible challenge really really shitty a Whole lot of guessing and it's all in Russian, which I do not know So okay The challenge from here is as Wendy some of the stolen grunkles is you rocks? I think I know we could do it dipper really look. I found this photo I mentioned something suspicious about to find to look it up on VK and now everything is absolutely obvious Tell me who it is try to find out yourself dipper. So here's the image, which I'm assuming this X is The Xerox logo they're referring to you someone is stolen the Xerox And they reference VK in the challenge description which I don't know if you had known or not known about Before it is the largest European online social networking service, which I apparently is like the equivalent of our of a Facebook So you can go to it and I ended up creating a web an account So I am logged in Because I wanted to be able to help the search and find and solve this challenge. So I ended up creating an account for it But what you do here is Is There's some things you can do to actually translate this this Russian text out of the image if you wanted to because um Obviously you can't copy and paste this because it's an image so you'd have to type it out But you don't have a Russian keyboard so you can use like some tools Russian keyboard. I think Keyboard yeah, yeah Russian Online Russian keyboard and That could work for you if you want to type things out and you could pump them in a Google translate and stuff like that I actually have some of those files still here. I think So I'll showcase what I have cyber write-up CD online juniors CD stop thief So the sign I had typed it out took that each part of it that was visible and Won't you translate this it is photocopy a red tower per red ten which? Apparently is an address. It's it's it's a location And there's there's there's a greater hint with this too if you actually download this image So let's say this image in our juniors page our folder and if you check this out exit tool you look at the metadata for that image and There is actually a GPS position and latitude and longitude in here So if you wanted to what you could do is you could look for this GPS position in like Google Maps or Google Earth or Google Street view so that ended up actually doing that I took this Location this GPS location. I also wanted to convert it to like the agree symbol So I could actually have a real string that Google Maps would probably be able to find and look through so I copied and pasted the degrees symbol Because I don't know the alt key code for it And then we have this like little location this GPS coordinates latitude and longitude coordinates. You can you can find it You can search Google Maps for this and it will bring you not to Salem Connecticut it will instead Okay, that is East it is East my bad not not West it will bring you to 155 Whatever the street is Lenin Avenue what at 155 Lenin Avenue? I don't know if you can read that particularly right here, but this house is 155 Lenin Avenue Where though I actually try to click on some other things to determine Okay, where am I I am in Tomsk, Russia and Lenin Avenue 155 there So yeah That's the location Again, you can look this in Street view if you wanted to and you literally get an image of the house and you can see the The sign on there you can see this Xerox sign on the house if you wanted to but it's a picture of that 155 Lenin Avenue so what you end up doing is now that you have this information and Apparently if you look this up on VK you can find news like you can see if someone has actually stolen something you can look in the news section of it and This is completely obscure and again a lot of guessing that I again would not have been able to figure out without some Awesome individuals help so kudos goes to him. I'll credit for this video goes to that individual but here's what we do in VK you can search from news and And You should be able to search by news trying to get more Properties out of this Okay, I think if you go to search It should give you some search parameters. You can expand and you can look by location So you can specify That one five five Lenin Ave in Thompson Russia And ideally we'll be able to find it I honestly even just like stole one of the addresses that I got out of Google Maps And then I tried to Work with it there and zoom in on that location Because you want to have them cursor Where it actually is So it looks like it's at a fine place if you go into the satellite You could like move around the actual location. I mean a bit more again. I Actually ended up dragging this and Like zooming out to a point where I could see what the map looked like and if I changed the map You can get this house numbers So I knew I needed to be further up to get 155 right here So I just left it there and that matches What I see in Google Maps in 120 right across the street 155 right here and 120 on the other side. So I know I'm in the right place so I searched nearby posts for this and I get a bunch of things and What I ended up doing is I actually just Looked at the location that these pictures are from Because apparently you can like look and search for more images or more pictures from that location so I tried to show more pictures and We seen our photos nearby. Oh, there are some of the images and I click on some of these to take a look at them And I see it's from this account Laughing my ass off LMFAO. So I click on that guy to see if it brings me anything interesting Um, not particularly that might have been someone's random account. There's nothing interesting here There's no other information other than that image, but there are other images that I saw right? You can click on more of these and you get Pavel Volkovs, which is another individual we can look at He has a lot of photos. So maybe not for the purpose of the CTF whatever Are there any more? Click on some of these other ones Pavel again Pavel again Pavel again All Pavel what the heck? So we'll scroll down to see if there are any more I Keep showing more pictures because at this point you're I'm pretty desperate I'm hoping to see like oh, okay more pictures more pictures of the sign again Pavel I see his username of the top right here Again LMAO again Pavel again Pavel and again Pavel what the heck? Is there any more I keep looking for more pictures in this area more signs? Pavel Pavel Pavel Pavel Pavel and again Pavel This is actually the solution by the way. So like that's why I'm still continue to looking through here I don't know why I keep seeing Pavel's post but not the ones that I'm looking for though Am I going through the am I looking through the same pictures over and over again right now? I'm pretty sure VK is just like showing me the same pictures again. Oh, hey, you see some gravity falls stuff and That is Curious so I go to this individuals dipper as a 70 and Oh, he has a picture of the sign as well, and there's some Russian text here So what I did is I Google translate this and it says you are on the right track. Okay awesome so This Individual this this page their username jam underscore dipper is what the flag is You submit jam underscore dipper as the flag I Guess the challenge prompt does say tell me who is it? So I guess you would submit the username If that's the interpretation you end up having but I wish it were something a bit more clear like Oh, this is the flag or you found me. Here's the flag whatever but no The you are on the right track is it all you end up getting with the images and some gravity falls pictures So jam underscore dipper is what you submit and you get five or two points for that, but holy crap I I spent way too many hours on this with the guessing and the looking around on the Google Street view and trying to explore that that Address and then again just looking through random pictures of other individuals on on VK, so That's it Again kudos to an individual for helping me get this challenge because of what the heck This would never have been something that I would have been able to gotten on my own Not knowing Russian and not knowing VK and not knowing what the heck do I do with this picture? So, okay That's that's that's how you solve the stop thief challenge for Junior CTF, so I hope you guys enjoyed that video It's really it currently And I'll show you hopefully a little bit more some other challenges and demonstrate and showcase those in a later video So see you then