Hacking
Writeups
OSINT
Finding Nyan

Finding Nyan

Description

CTF: STACK the Flags 2022

Jaga is on a road trip to find Nyan. Do you know which road is this in the meteverse?

Note that for this challenge, the road name is case sensitive, example - STF22{Jln_Binchang}. The road name should be the exact address seen on Google Maps


Finding Nyan.MOV

Solution

Pwned by @skytect (opens in a new tab) and @fishjojo1 (opens in a new tab)

The video shows a very blurry view out of a car window, with Jaga riding around somewhere in Singapore.

If we focus on one of the frames, we see the logo of the company doing the construction in the background.

Frame with Construction Banner

Let's try to identify the company. We can use Google to find a BCA directory for licensed builders at www.bca.gov.sg/BCADirectory/Search/Result (opens in a new tab).

BCA Directory

With some knowledge of Chinese, I can identify the first character "九" (jiǔ) corresponding to the "CHIU" in the directory. After a quick Google Search, I'm able to confirm that the company is called Chiu Teng Construction Co. Pte. Ltd. thanks to the presence of the red triangle in the logo.

Google Images Search of "CHIU TENG CONSTRUCTION CO. PTE. LTD."

Taking note that the construction site was along a long straight stretch of road next to a largely undeveloped forested area, we set out to scour the internet for tenders for building construction they have procured. After a while, we finally found the location. The tender was found on www.sgpbusiness.com/company/Chiu-Teng-Construction-Co-Pte-Ltd/government-procurement/agency (opens in a new tab).

Tender

Streetview

STF22{BUKIT_BATOK_RD}