DEPIX

Challenge Overview

The goal of this challenge was to find the passenger details based on their online flight ticket. The flag rquires the passengers first and last name, seat number, and arrival airport.

Initial Analysis

To start, one of the only visable clues is the barcode. A boarding pass barcode contains encoded information about the passenger and their flight details typically a PDF417 format. There are website that can directly decode the barcode and it will contain all the information needed.

Scanning the Barcode

When inputting these barcodes into the decoder, only the barcode itself should be included. After cropping and adjusting the image for optimal scanning, the decoded information was revealed.

All the information that is needed is revealed in the decoded output.

Constructing the Flag

Using this simplep guide below, I can construct the flag. revealing the passanger Michael Chen, who arrived at PVG (Shanghai Pudong International Airport), and sat in 3D.

Flag

OSINT{MICHAEL_CHEN_3D_PVG}

Conclusion

This CTF challenge required a PDF417 barcode decoder to extract the necessary information from the boarding pass. The important lesson learned is to never post your boarding pass information publicly and someone could find your information.