ch1se
  • Home
  • CERTIFICATES AND PARTICIPATIONS
    • HackTheBox - Cyber Apocalypse CTF 2025: Tales from Eldoria
    • The SecOps Group
  • bitsctf-2025-writeups
    • HotPause
  • BRONCOCTF-2025-WRITEUPS
    • theflagishere!
  • ACECTF-2025-WRITEUPS
    • The Mysterious Building
    • Social Circles
    • Broken Secrets
    • Cryptic Pixels
    • Tabs&Spaces
  • PEARLCTF-2025-WRITEUPS
    • Hidden Marker
    • SentMail
    • Van Gogh's GARBAGE hunt
  • 1753CTF-2025-WRITEUPS
    • Dude where is my car
    • Happy New Year!
    • Somewhere in Space
  • CITCTF-2025-WRITEUPS
    • Timesink
    • Throwback to the Future
    • No Country for Old Keys
  • BYUCTF-2025
    • Universal-ty
  • OSINT-WRITEUPS
    • gralhix
Powered by GitBook
On this page
  • Introduction
  • Step 1: Finding the Event Location
  • Step 2: Determining the Exact Seat Block
  • Step 3. Retrieving the Flipper Zero Data Stream
  • Conclusion
  1. bitsctf-2025-writeups

HotPause

CATEGORY - OSINT

PreviousThe SecOps GroupNexttheflagishere!

Last updated 3 months ago

Introduction

HotPause is an open-source intelligence challenge focused on uncovering information from a particular event. It begins with identifying the precise location where a video was filmed. The next task is to locate an agent's specific seat within that venue. The challenge concludes by retrieving the recorded data stream from a Flipper Zero during the beat drop of Chris Martin's "I love you so..." to determine the right color

Step 1: Finding the Event Location

The challenge provides an .mp4 file, which suggests that the first step is to analyze the video for any identifiable details. To make the investigation easier, I took a screenshot from the video at a key moment.

To find the event location, I performed a reverse image search using Google Images.

The results showed multiple Instagram posts with similar visuals, one of which revealed the city name.

Initially, I tried MUMBAI, but it was incorrect. After retrying with AHMEDABAD, I got the correct answer.

Step 2: Determining the Exact Seat Block

I began by searching "Coldplay Ahmedabad seating chart" on Google.

Comparing the seating chart with the screenshot from the video, I could see that the agent was sitting on the right side of the stadium.

To find the exact block, I started testing different inputs, beginning with P block and moving to Q block. After multiple attempts, I found the correct answer: Q3.

Step 3. Retrieving the Flipper Zero Data Stream

Step 3 took me way longer than I expected. I spent hours trying different approaches before finally figuring it out. I even asked for hints to make sure I was on the right track. Along the way, I fell into several rabbit holes—attempting to decode the data as binary, misinterpreting the format as hexadecimal, and overcomplicating the extraction process. After a lot of trial and error, I finally found the correct answer.

To figure out the correct answer, I started by searching "Coldplay India concert wristband" on Google. This led me to an article explaining how the LED wristbands work:

From there, I learned that the wristbands use a specific technology, so my next search was "Coldplay wristband infrared." This brought me to a discussion on Reddit:

While scrolling through the discussion, I found a GitHub repository related to PixMob IR reverse engineering:

At first, I explored this repo but couldn’t find a direct answer. However, at the bottom of the page, I found another linked repository:

Inside this repo, I found a file named PixMob_main.ir and searched for an instance of the yellow color. That’s when I found the correct data stream:

1400 1400 700 700 700 700 1400 2800 700 2100 700 700 700 1400 700 1400 1400 2800 1400 2800 70

This turned out to be the correct answer.

Conclusion

This challenge was both fun and difficult, pushing me to think outside the box. It took a lot of trial and error, but I’m happy I was able to solve it—especially since this was my first CTF. One key takeaway from this experience is to not overcomplicate things. Always check the simplest explanations first before diving into more complex solutions.

concert.mp4 screenshot
concerpt.mp4
reverse image search result screenshot
reverse image search result screenshot
google search result screenshot
google search result screenshot
https://coldplayindia.com/best-seats-for-coldplay-ahmedabad-concert/
https://tech.hindustantimes.com/tech/news/coldplay-concert-india-how-led-wristbands-works-and-create-magical-moments-71726983355343.html
https://www.reddit.com/r/Coldplay/comments/w7rgth/how_do_the_coldplay_wristbands_work_and_how_would/
https://github.com/danielweidman/pixmob-ir-reverse-engineering