Skip to content

mitre-cyber-academy/2018-Grab-Bag-200

Repository files navigation

Gas Station Simulator

For Competitors

Who thought we could make boring everyday tasks like pumping gas more fun? You might even find a few 'lost' credit cards along the way.

How to Solve

  1. Use the mouse to move the character around the gas station
  2. stand next to a gas pump and click the terminal icon on the phone screen and type "scan bluetooth"
  3. Repeat the last step until you get a result for HC-01
  4. Note the mac address of HC-01, it should be F3:00:A4:D2:AF:E9
  5. type "connect F3:00:A4:D2:AF:E9" into the phone terminal
  6. now you are "connected" to the skimmer scanner
  7. Research into skimmer scanners should have revealed this article from SparkFun https://learn.sparkfun.com/tutorials/gas-pump-skimmers
  8. following the information on their site typing @[x][y] into the HC-01 should return a character in the memory of the scanner.
  9. Repeat the last step until you find the flag.

Flag

MCA-flag is: MCA{201411291500924149303?}