Mr. Robot treasure hunt - puzzles

118 views
Skip to first unread message

Enrique Cobas

unread,
Jul 16, 2016, 4:12:22 PM7/16/16
to bla...@hacdc.org
If anyone likes IT and puzzle games (or even CTF-like contests), take a look at Mr. Robot's little treasure-hunt games. The last one gave out $45,000 worth of sweatshirts (509 shirts) and the next one I think is $100k in prizes. I've pasted the solutions to the first contest below so you can see what it's like. Note that that phone number was written small, on a label on a box that was on the screen for less than 1 second.

The season 2 premiere already had several clues, including a working QR code that points to a real URL and several other real working IP addreses and URLs shown briefly on-screen.

-Enrique


CONFIRMED CLUES

  • Phone number at 0:41 in the trailer

    212-804-6003

  • Calling the number plays the following message

    Thank you for calling the E-Corp helpline. Following the recent events, were experiencing an unusually high caller volume. To avoid waiting and for more information please visit out webpage at www...
    *breaking up noise*
    "In order for the light to shine so brightly the darkness must be present"
    *series of beeps*

  • Translating the beeps into A's and B's gives

    AABABBAAABABBABAAABAAAABBABBABBAABABAAABAABBB

  • The quote in the message is attributed to Francis Bacon, hinting at the use of the Bacon Cipher. Decoding the beeps using this cipher gives

    FSOCDOTSH

    which can be interpreted as the URL www.fsoc.sh

  • At fsoc.sh, an eye appears looking at letters and numbers around the page. The order is as follows

    4C4F4F4B205550

  • Converting this from hexadecimal to ASCII gives

    LOOK UP

  • The blinking pattern of the cursor at the top of fsoc.sh converts to the following Morse code

    .-.. . .- ...- . / -- . / .... . .-. .

  • The Morse code translates to

    LEAVE ME HERE

    which works as the password redirecting to https://www.fsoc.sh/KqQsv82u8A/

  • FREE T-SHIRTS FSOCIETY UNIFORMS!

  • The contest form redirects to http://www.whoismrrobot.com/ which is the show's normal promotional website, suggesting that this is likely the end of the ARG

nancy lessons

unread,
Jul 16, 2016, 5:07:13 PM7/16/16
to Blabber
Woooooo......!

--
--
Like what we do? Support HacDC by becoming a member. Learn more here: http://hacdc.org/membership/
--
You received this message because you are subscribed to the HacDC "Blabber" group.
To post to this group, send email to Bla...@hacdc.org
To unsubscribe from this group, send email to
Blabber+u...@hacdc.org
For more options, visit this group at
http://groups.google.com/a/hacdc.org/group/Blabber
---
You received this message because you are subscribed to the Google Groups "Blabber" group.
To unsubscribe from this group and stop receiving emails from it, send an email to Blabber+u...@hacdc.org.

Ethan M

unread,
Jul 17, 2016, 8:24:40 AM7/17/16
to Blabber, bla...@hacdc.org, enriqu...@gmail.com
I really get into these kind of puzzles.


Anyone participate in the Holiday Bullshit puzzle?

I really hope CAH does another one, but I think last year was the final installment.
Reply all
Reply to author
Forward
0 new messages