Apartment Views — DownUnderCTF 2021

CTF EVENT : DownUnderCTF 2021

DIFFICULTY: Medium

CATEGORY: OSINT

POINTS: 100

CHALLENGE:

We received intel that the accomplice we have been following is meeting with the ringleader of RaaS operation, they shared this photo online a few years back — believed to be the view from their apartment building (hideout).

Between you and me, our sources say the ringleader was testing the ransomware they were going to sell and instead infected their own laptop.

We think we may be able to setup a sting to apprehend the ringleader and retrieve the decryption key when they meet the accomplice at a dead drop in a nearby alleyway. Can you work out what the name of the street is?

Flag format: DUCTF{street_name}

Author: xXl33t_h@x0rXx

First, we need to download an image.png file. Here is the picture:

Let’s search on Yandex to find information about the buildings. The brown building stands out for me, so I will focus my searches on that building.

On Yandex, I found this information:

I googled it and I found that this building is the ANZ Gothic Bank in Melbourne.

I played a bit with Google Street View and I found a spot where I am more or less in the same spot of the angle that the person took the picture.

I played a bit with Google Street View and I found a spot where I am more or less in the same spot of the angle that the person took the picture.

This is the perimeter where they took the picture. Right now we need to find the right street.

I needed to find a better angle and I found this one.

We can see the two buildings that appear first in the picture. This gives us a very clear idea of the street => McLean Alley.

BIMMMM! We just found the flag.

Flag : DUCTF{mclean_alley}

CONCLUSION:

This challenge was fun. I struggled a bit to find the right view. The streets are quite tight, so it was difficult to see the big buildings.

However, I had a good time practicing my OSINT skills.

I hope that my writeup helped you to understand better all the aspects of this CTF. If you want to read more writeups like this one or have any questions, you can find me on Twitter @dropn0w.

Stay safe and keep learning!

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store