Challenge Description
We are tracking an individual whose identity remains unknown his name is a mystery. He attempted to leave the country, but it’s unclear whether he successfully managed to escape or not. The only clue we have is a hidden camera footage taken from inside his car, which we installed to monitor the places he visits, From the footage, we’ve observed a detail no matter where he goes, he always carries a special bag with him called joutrymetrybitry
. This bag appears to be a source of comfort for him. However, at some point, he discovered the camera and stopped the record, leaving us with even fewer clues. Now, our mission is to build a profile on this person, based on this, you must connect to the provided socket and correctly answer questions to retrieve the flag.
Challenge Solution
┌──(kali㉿kali)-[~/Desktop/MatrixEscape]
└─$ nc 127.0.0.1 4936
Connecting...
@
(__) (__) _____/
/| (oo) _ (oo)/----/_____ *
_o\______/_|\_\/_/_|__\/|____|//////== *- * * -
/_________ \ 00 | 00 | /== -* * -
[_____/^^\_____\_____|_____/^^\_____] *- * -
\__/ \__/
[x] Welcome to Hidden Identity Reveal, Join us as we unmask the suspect and build their complete profile from the clues they left behind ...
(1/5) Can you provide the username or online handle of the individual we are currently investigating or searching for?
Answer: andreiabed999
Correct!
We were provided with a video showing a late night car walk captured. During the video, the person on the call mentioned to his friend that he wanted to eat. Along the route, a hospital was visible, marking part of the path.
Toward the end, the car stopped near a Starbucks café
and a hotel
was seen within the video capturing, we will use these three points to check the exact path and the exact restaurant that he have visited.
Based on that we will first locate the exact location of the hospital as the starting point of the path and then the end point of the path was the cafe
, after that we will check the nearby restaurants based on the stopping point.
Based on that, we will check Google Maps for Mr. Crunchy Chicken
as the nearest restaurant then search within the reviews for the same bag name that he always says he takes with joutrymetrybitry
as this is the only information that we have.
Upon checking the comments, we can see that it is the same as the bag that was displayed within the car, is within the comment section and in the picture.
Upon checking the comment, he says that This will be my final destination before leaving, me and my favorite bag
joutrymetrybitry
, Love the food and the over all vibes
. Also, at the upper part of the picture, we have seen the @AndreiAbed999
username.
(2/5) What is this person's full legal name or real identity? answer format: FirstName_LastName
Answer: AbedAlkareem_Andrei
Correct!
Making social media search for AndreiAbed999
, we can see that he has an Instagram account.
Checking the Instagram account https://www.instagram.com/andreiabed999/, we can see that he have some posts.
While reviewing one of the posts, I noticed a highlight showcasing a certification for a completed course, which includes his full name. AbedAlkareem Andrei
(3/5) On which date was this individual born? answer format: MMDDYYYY
Answer: 08022000
Correct!
We can see that he has a cake picture that says, Another year older, another page to write .... may my story only get brighter with time .…
with the date that was posted 8/2/2025
in Roman Letters VIII II MMXXV
indicating his birthday date and age displayed in the description as 25
also as Roman Letters XXV
so he was born in 2000
(4/5) What is the IATA airport code for the final destination of his most recent flight?
Answer: BRU
Correct!
Checking the Other post that have The wheels touched down, and so did a thousand hopes stitched into one step .…
text indicating the arrival airport, we will make google image lenses search to check what airport he have been to
As we see the airport name is Brussels Airport, checking the IATA code on google will provide us the code, BRU
(5/5) What are the flight number and corresponding gate number for this specific flight? answer format: flightnumber:gate number
Answer: RJ141:226
Correct!
If we checked the third post we can see that he have mentioned Not goodbye, but a quiet promise to return with stories only distance can write .…
indicating the location that he is leaving from, based on that we can make a google image search to check the exact airport that he have went from.
As we see it is related to Queen Alia International Airport
, so now we have the source and the destination Airport names and the date that this picture that have been posted on 03/08/2025
in Roman Letters as III VIII MMXXV
, having these three information we can go to https://www.flightera.net/ and input the information that we have
Then I am going to check the past flights and select the correct one based on the time that we have got.
Going to the provided link https://www.flightera.net/en/flight_details/Royal+Jordanian/RJ141/OJAI/2025-08-03 we can see that we have the flight number as RJ141
and the gate number as 226
upon answering that we will revel the flag value
Congratulations! You solved all questions!
NCSC{Joutrymetrybitry_Th3_Br0wnB4g_h4v3_B33n_S33n_N0_s3cr3ts_4r3_HID33N}
Challenge Idea
The player will feature a video that, once viewed, will direct the character to a restaurant in Amman. He will then need to check other shops to identify the correct one. After selecting the right restaurant, he will cross-check its location on Google Maps, matching it with the information he has based on the review section. Once confirmed, he will see a post with a picture revealing the social media username. Following this, he will visit the social media account to find the person's real name, age, and birthdate, during that he will begin answering questions on the open socket, lately he will check some information about flight numbers, gate number and answer that based on the google image lenses search that will be conducted on both airports that have been provided in the discovered social media platform.