# TCP1P CTF 2024 - Bandit

## Intro

So, last weekend, I decided to participate in a CTF held by TCP1P, an Indonesian based CTF group (you can follow them in [Twitter](https://x.com/tcp1pctf) and [Linkedin](https://www.linkedin.com/company/tcp1p)). But unfortunately, I'm a bit busy so I only managed to solve 1 challenge. All the challenges are fun though, props to the team.

Alright, let's go further into the challenge.

## Problem

So for the problem, we got this challenge description

::: success
*An Jieyab as informant took a photo of a vehicle, can you find the location?*

*The flag is name the location and date example TCP1P{Town, Country. Month Year}*
:::

And also an attached photo of the supposed target's car


From the challenge description, we can see we need to find:
1. Town
2. Country
3. Month
4. Year

## Solution

Looking at the challenge description, we need to find two things:
1. Location
2. Date

### Location

To find the location of the photo, we can get the information from the car's Plate Number.

Using Google Lens, we can understand that this is an Indonesian number plate (all results are in Bahasa).


From here, we already got the country, which is **Indonesia**.

But, we still need to find out about where the photo supposed to be taken right? For that, we need to understand how Indonesian number plate works.
From image in this [link](https://www.mpm-rent.com/en/news-detail/info-lengkap-daftar-kode-plat-nomor-kendaraan-di-indonesia), we can learn that for our number plate assigned as follows.

> Yes, I used Paint to make this

Since, we are looking for the location, we can use the **N** letter to search where the license plate is issued. From Prefix list in this [wikipedia page](https://en.wikipedia.org/wiki/Vehicle_registration_plates_of_Indonesia#Vanity_plates), we can tell that the Town of this photo taken was **Malang**.

### Date

At first, I thought the date gonna be the License Plate Replacement Date. But, when I tried to add *TCP1P{Malang, Indonesia. August 2020}*, it's incorrect. So, I need to find other date.

Now, what kind of date that can be used then? Yes, we can use **when the photo was taken** as our date candidate. Now, how do we find it? We can use the image [metadata](https://en.wikipedia.org/wiki/Metadata).

To find the metadata of the image, I searched image metadata on Google and found [metadata2go website](https://www.metadata2go.com/). Then, I uploaded the image through the website, and after looking through the metadata (a.k.a exif) of the image I found the creation date which is in October 25th, 2019.


From there we got **October** and **2019** as year. Now let's chain them up together to get our flag which is

:::success

:bulb: *TCP1P{Malang, Indonesia. October 2019}*

:::

Submit, and we solved the challenge!