---
# System prepended metadata

title: Write up in car CREWCTF
tags: ['Author: 6e617468']

---

![](https://hackmd.io/_uploads/r1hksjLY3.png)

Here is the attached file "chall.png"
![](https://hackmd.io/_uploads/rJOCqsLt2.jpg)

Searching the image on Google Images and Yandex Images, nothing really interesting came up.

I then went down several paths:
1) Find the restaurant with the yellow banner
2) Find the advertisement seen on the left
3) Find the street lights

### First lead:
1) ![](https://hackmd.io/_uploads/SkCfioUFn.png)
We see this banner with "DOM'S ?OO" written on it, I deduced DOM'S TOOL or DOM'S FOOD, I got a lot of results for Dom's food but it didn't seem related at all.

### Second lead:
2) ![](https://hackmd.io/_uploads/SJB3isIt2.png)
Find who owns this ad, we can make out the end of a phone number: "755-7773"

My initial searches didn't help, I came across many numbers ending with that but I needed the beginning!

Using https://labs.tib.eu/geoestimation/ I tried to find clues about which geographical area this could be:
![](https://hackmd.io/_uploads/BJq-6oLYn.png)

It clearly points to the United States (no surprise):
I'm tempted to verify the positions it gives me, but without success, I only come across deserts, quite different roads.
However, one detail bothers me: on all the roads I observe in the United States, the road marking is very often yellow and not white and the middle line often two continuous yellow lines, this does not match what we are looking for.

So I try to do some research on the points outside the USA: there is only one weak one which is in Canada:
![](https://hackmd.io/_uploads/BJJ1Ai8th.png)
(we can see a slight red coloration which indicates weak similarities found)

I tell myself that if they only display the last 7 digits in their ad, it means that we can find the first 3.
I inform myself:
![](https://hackmd.io/_uploads/Bkivxn8Kn.png)
They therefore have a 3-digit prefix at the beginning of the number which determines the region/city.

So I look for the one of my super Canadian city:
![](https://hackmd.io/_uploads/SJBHRjUF3.png)

So by looking for a number that would start with this prefix I perform this search which only shows me 4 results:
![](https://hackmd.io/_uploads/r1U59jIYn.png)

So I open all the results and I come across this:
http://legacy.mitn.info/Bids/UnofficialPlanholderList.asp?TN=124456&md=M&SortBy=CompanyName&SortOrder=DESC&ID=&AN=

![](https://hackmd.io/_uploads/SJ4m5oLt3.png)

Well, a number that matches, I look up the company and the address:
What a great surprise when opening the address on maps:
![](https://hackmd.io/_uploads/r1bwqi8K2.jpg)

We immediately recognize the street we are looking for!!!! :confetti_ball: :confetti_ball: :confetti_ball: :confetti_ball:


:congratulations: FLAG: crew{N Michigan Ave}



### Honorable mentions in my research:

I wanted to search for the street lights to determine the city or region of the photo.

With the help of the site http://phozagora.free.fr/ I was able to find the street light that we see
![](https://hackmd.io/_uploads/S17hCiIY2.png)

So I can tell you that it is a GE LIGHTING M-250R!
http://phozagora.free.fr/?page=Lanterne_M250R2
![](https://hackmd.io/_uploads/HyyK0sUYh.png)

This search allowed me to quickly eliminate the cities in which I was searching: each city only uses a few models of street light.
If they don't match because a slightly different model is used then you're on the wrong track!