Skip to content

Objective 2) Where in the World is Caramel Santaigo

Difficulty:

Help Tangle Coalbox find a wayward elf in Santa's courtyard. Talk to Piney Sappington nearby for hints.

Hints and Resources

Hints provided after talking to Piney Sappington and completing the Document Analysis / Exif Metadata Terminal Challenge

Coordinate Systems
Don't forget coordinate systems other than lat/long like MGRS and what3words.

Flask Cookies
While Flask cookies can't generally be forged without the secret, they can often be decoded and read.

OSINT Talk
Clay Moody is giving a talk about OSINT techniques right now!

Other Resources

Cyber Chef
https://gchq.github.io/CyberChef/

Elf Introduction

Talk to Tangle Coalbox in Santa's Courtyard

Hey there, Gumshoe. Tangle Coalbox here again.
I've got a real doozy of a case for you this year.
Turns out some elves have gone on some misdirected journeys around the globe. It seems that someone is messing with their travel plans.
We could sure use your open source intelligence (OSINT) skills to find them.
Why dontcha' log into this vintage Cranberry Pi terminal and see if you have what it takes to track them around the globe.
If you're having any trouble with it, you might ask Piney Sappington right over there for tips.

Solution

Start the game by clicking on the terminal next to Tangle Coalbox.
You have two options for solving this objective. The first is to play the game as intended (the Nice way). The second is to hack the game (the Naughty way).

Play the game by using the three Investigate options at each location to determine the next location as well as attributes about the Elf you are following.

Investigation options 1 and 2 will provide you with clues about the next location. Investigate option 3 will provide you with the temperature of the next locatin as well as some of the characteristics of the Elf which can be used with InterRink to narrow down which Elf it is.

When you have reached the third location, identfy the elf to win the game.

If you want to be only slightly naughty, this table in the Extras section lists all the location hints and where they lead to.

The other way to win is to start the game with Web Developer tools enabled (for Google Chrome, go to Menu > More tools > Developer tools).

After the game is started go to the Application section and on the left drill down to Storage > Cookies > htttps//caramel.kringlecastle.com. There you will find a cookie named 'Cookiepella'.

Screenshot

Copy the value of that cookie into Cyber Chef, then use the recipies From Base64 (Alphabet: URL Safe) followed by Zlib Inflate to decode the cookie (Click here for an example)

Note the values of the "elf" and "route" attributes (in this example, "Noel Boetie" and "Stuttgart, Germany","Prague, Czech Republic","London, England"), which will provide you with the name of the elf along with the route to take without having to perform a single investigation.

Completion

Winning the game by either method will mark the objective as complete in your badge.

Tangle Coalbox

You never cease to amaze, Kid. Thanks for your help.