Open Ports

by Ian
osint 500 pts

A notorious band of pirates was recently apprehended. They're known for compromising ships' computer systems, and using that access to leave backdoors in the ports that they visit to spread their influence further. Their malware was cleared from all vessels, but there are likely many ports still compromised. We got access to all of their messages since a couple of decades ago, and they must have been training a new guy or something because they shared a lot of information about this one attack. Can you use it to determine the location of a compromised port?

Enter your answer in the form: BCCTF{Name_of_city_the_port_is_in}

Writeup

Author: Fenix Credit: Fenix, Grok

Solution

Searching for the IMO of 9281267 and MMSI of 354202000 gave me general results relating to the information of this ship, but, based on my initial search results, it seemed that, if I wanted to get location information, I would have to pay for it. I eventually got grok to find a website that was giving out this information for free though: https://globalfishingwatch.org/map/vessel-search

I then used this to find the city that the ship in question would be docking at a few days after the logs were written.

Flag

BCCTF{Izmir}