sameer fakhoury
  • Home
  • CTF Writeups
  • Course Summaries
  • Cyber Reports
  • Articles
  • Event Notes
  • About Me
Stolen

Stolen

  • My wife’s car has been stolen, and the police officer requires: the vin number, plate
  • Can you find the required details for me?
  • Notes:
    • The flag is case insensitive
    • Flag format: Xpand{vinnumber_platewithoutdashes}
    • Example: If the vin number is XXXXXXXX , and plate is YY-YY-YY , the flag will be: Xpand{XXXXXXXX_YYYYYY}
image
  1. the first thing I did is to search on google image search to see the car type
    1. image
    2. its → 2006 BMW X5 4.8is
  2. what is the VIN number ??
    • A car's VIN (Vehicle Identification Number) is a 17-character code used to uniquely identify the vehicle. It's divided into three main sections:
      • The first three characters indicate the country of origin and manufacturer.
      • The next five characters describe the vehicle's attributes.
      • The last seven characters create a unique serial number for the vehicle.
  3. I want to see where this car is which country
    • I have the first 2 numbers of the plat → 22
    • and the colors are yellow and blue
  4. I used this search term → what is the part of yellow and blue number plate → go to images
    1. image
    2. its the same colors of our plate and we have code EU→ so ill assume its from Europe
  5. search for vehicle registration plate → going to Wikipedia → https://en.wikipedia.org/wiki/Vehicle_registration_plate → to search for more information
    1. image
    2. so as we can see → the first two digits represent the area
  6. I went back to the first step clicked on a YouTube video → https://www.youtube.com/watch?app=desktop&v=KztgLIC-fXk
    1. image
    2. its the same color yellow and blue - and begin with 22 digit
    3. as we can see NL → represents Netherlands
  7. search in google → search for car by license plate → and I have opened multi websites and I want to search only for license that begin with 22 character → I went to this website https://platesmania.com/search
    1. image
      image
    2. as you can see we put → * to the unknown digits
    3. image
    4. no results
  8. searched more and went to this website → https://digitpol.com/stolen-car-database/
    1. image
      image
    2. vin number → WBAFB31020LG90336
    3. plate → 22-GF-TF
  9. Xpand{WBAFB31020LG90336_22GFTF}

©sameer fakhoury

GitHubLinkedIn