The Wargames series continued into Aegis Nova with 15 puzzles containing critical intel for the agent who solves them. Verum Inveniri started off the festivities just before 1200 UTC and the first 10 puzzles all being unlocked within 90 minutes. At 2200 UTC, Verum Inveniri announced more challenges to bring the total to 15.
Remember, all the codes for this series eventually solve to the format xxxxxxxx#keyword#
(unless stated otherwise). This is a typical format for passcodes distributing volatile intel around anomalies.
Portal Shield
Observations
You’ve only witnessed one TENTH of my maximum mitigation!
Zooming in on the image, we can see some dots on the right edge of the AXA Shield.
C will denote Common Shields, R for Rare Shields, V for Very Rare Shields, and A for AXA Shields; followed by the sum of their mitigation values:
eg: RVVA = Rare (40) + Very Rare (60) + Very Rare (60) + AXA (70) = 230
CRRR = 150 |
CRRR = 150 |
RVVV = 220 |
RVVA = 230 |
RVVV = 220 |
RVVV = 220 |
C = 30 |
C = 30 |
CR = 70 |
CR = 70 |
RRVV = 200 |
RRVV = 200 |
CRVV = 190 |
CRVV = 190 |
VVVV = 240 |
VVVA = 250 |
CR = 70 |
CR = 70 |
CRR = 110 |
CRR = 110 |
CCRR = 140 |
CCRR = 140 |
RRRV = 180 |
RRRV = 180 |
RRRV = 180 |
RRRV = 180 |
RR = 80 |
RR = 80 |
On closer inspection, values are very similar between the left and right columns, we’ll focus on the right column.
150 230 220 30 70 200 190 250 70 110 140 180 180 80
Dividing the totals by 10:
15 23 22 3 7 20 19 25 7 11 14 18 18 8
Treating each number as a letter of the alphabet, with a = 0
and remembering the format:
pxwdhutz7loss8
Faraday cage
Observations
Base your next step on what you gauge the numbers to mean.
The image has some numbers in the bottom-left corner, adjusting the brightness gives us:
70.3.10.117.83.668.166.35.83.668.83.668.70.49.10.946.59.795.41.13e2.49.3.20.333.70.99.23e2
After a search for gauge and wires we find a Table of AWG wire sizes on Wikipedia.
The Preece Fusing current column has the numbers in our series, so map them to the AWG number.
*note the ‘e’ numbers are a version of Scientific Notation: 13e2 = 1.3E3 = 1300, 23e2 = 2.3E3 = 2300
Preece | AWG |
70 | 19 |
3 | 37 |
10 | 30 |
117 | 16 |
83 | 18 |
668 | 6 |
166 | 14 |
35 | 23 |
83 | 18 |
668 | 6 |
83 | 18 |
668 | 6 |
70 | 19 |
49 | 21 |
10 | 30 |
946 | 4 |
59 | 20 |
795 | 5 |
41 | 22 |
1.30E+03 | 2 |
49 | 21 |
3 | 38 |
20 | 26 |
333 | 10 |
70 | 19 |
99 | 17 |
2.30E+03 | 00 (2/0) |
We now have numbers ranging from 2 to 40 (ignoring the last out of range value). Using a base64 index we get this:
TleQSGOXSGSGTVeEUFWCVmaKTR-
Unfortunately, it doesn’t produce usable results. Trying a ROT-1 on our string (or decrementing the b64 index using A=1) we get
SkdPRFNWRFRFSUdDTEVBUlZJSQ=
Now base64 looks good.
JGODSVDTEIGCLEARVII
convert numbers for a net win:
JGODSVDT8CLEAR7
Interstate shield
Observations
Find the intersection between mathematics and local geography.
Looking very carefully at the image, we see two things hidden in the sign after adjusting the image:
It leads to this pastebin link with the following data:
35.432122, -95.971458
39.445370, -83.828580
37.921588, -95.170020
35.251907, -91.029306
29.832416, -95.175749
34.081858, -118.223934
38.677246, -121.751018
42.297390, -73.294085
21.393674, -158.012483
34.173715, -98.502108
39.817988, -104.982831
30.190756, -90.854375
43.134215, -75.500518
44.436569, -95.773936
39.749349, -94.789513
44.239701, -95.754972
33.412178, -80.499168
43.134217, -75.500477
21.462720, -157.998946
Viewing each set of coordinatates we see they map to interestions
eg: 35.432122,-95.971458 –> Intersection 40 & 62
After recording each road number we see their sum is in ascii range
Coordinates | Road1 | Road2 | Sum | ascii |
35.432122,-95.971458 |
40 |
62 |
102 |
f |
39.445370,-83.828580 |
22 |
68 |
90 |
Z |
37.921588,-95.170020 |
59 |
54 |
113 |
q |
35.251907,-91.029306 |
64 |
49 |
113 |
q |
29.832416,-95.175749 |
90 |
8 |
98 |
b |
34.081858,-118.223934 |
110 |
5 |
115 |
s |
38.677246,-121.751018 |
113 |
5 |
118 |
v |
42.297390,-73.294085 |
90 |
7 |
97 |
a |
21.393674,-158.012483 |
7 |
|
|
7 |
34.173715,-98.502108 |
44 |
70 |
114 |
r |
39.817988,-104.982831 |
76 |
25 |
101 |
e |
30.190756,-90.854375 |
22 |
61 |
83 |
S |
43.134215,-75.500518 |
26 |
90 |
116 |
t |
44.436569,-95.773936 |
23 |
59 |
82 |
R |
39.749349,-94.789513 |
36 |
29 |
65 |
A |
44.239701,-95.754972 |
14 |
59 |
73 |
I |
33.412178,-80.499168 |
95 |
15 |
110 |
n |
43.134217,-75.500477 |
90 |
26 |
116 |
t |
21.462720,-157.998946 |
5 |
|
|
5 |
For the number positions we just take the road number
Our little road trip ends here:
FZQQBSVA7RESTRAINT5
Obsidian Shield
Observations
You should Investigate this further.
From what remains, we see letters, a keyword and two numbers spelled out.
rxwbgskz Calvin nin two
Reading across and down we get a peek at our passcode:
rxwbgskz9Calvin2
Family crest
Observations
When were these Shields made anyway?
We see what appears to be dates. A Wikipedia search reveals these are the birth dates of people with the last name of Shield(s).
19710915 | Will Shields | W |
19350602 | Carol Shields | C |
19330801 | Teri Shields | T |
19190907 | Neil Shields | N |
19581130 | Steve Shields | S |
19560722 | David Shields | D |
19710915 | Will Shields | W |
18990630 | Harry Shields | H |
19410516 | Francis Alexander Shields | F |
19141224 | Ian Shield | I |
19650531 | Brooke Shields | B |
19850710 | Arman Shields | A |
18930913 | Larry Shields | L |
19850710 | Arman Shields | A |
19190907 | Neil Shields | N |
19570708 | Carol Shields (ophthalmologist) | C |
18790927 | Ella Shields | E |
19190907 | Neil Shields | N |
19141224 | Ian Shield | I |
In order, take the first initial and combine to get:
WCTNSDWHFIBALANCENI
replace the numbers to find our missing cousin:
WCTNSDWH5BALANCE9
Ablative heat shield
Observations
Between 7 and 16, Phoebus scored 15 touchdowns.
The image shows Apollo 8’s re-entering Earth’s atmosphere. In the Greek and Roman mythology, Apollo is also known as Phoebus, so the hint sentence also suggests the Apollo program, from 7 to 16.
In the Apollo program 7 to 16, 15 landing were performed on both the Earth and the Moon. Let’s list the coordinates of landing position in order:
Index | Mission # | Coodinates (Moon) | Coordinates (Earth) |
0 |
7 |
|
27.533333, -64.066667 |
1 |
8 |
|
8.133333, -165.016667 |
2 |
9 |
|
23.25, -67.933333 |
3 |
10 |
|
-15.033333, -164.65 |
4 |
11 |
0.67408, 23.47297 |
13.316667, -169.15 |
5 |
12 |
-3.01239, -23.42157 |
-15.783333, -165.15 |
6 |
13 |
|
-21.64, -165.361667 |
7 |
14 |
-3.6453, -17.47136 |
-27.016667, -172.65 |
8 |
15 |
26.13222, 3.63386 |
26.116667, -158.133333 |
9 |
16 |
-8.97301, 15.50019 |
-0.716667, -156.216667 |
Convert the code in the image with the index
-0.72, -156.22 |
9 |
27.53, -64.07 |
0 |
-27.02, -172.65 |
7 |
-0.72, -156.22 |
9 |
26.12, -158.13 |
8 |
26.13, 3.63 |
8 |
26.12, -158.13 |
8 |
-3.65, -17.47 |
7 |
26.13, 3.63 |
8 |
-27.02, -172.65 |
7 |
-3.65, -17.47 |
7 |
0.67, 23.47 |
4 |
26.12, -158.13 |
8 |
-3.01, -23.42 |
5 |
-21.64, -165.36 |
6 |
-21.64, -165.36 |
6 |
-3.01, -23.42 |
5 |
23.25, -67.93 |
2 |
-27.02, -172.65 |
7 |
-3.01, -23.42 |
5 |
-21.64, -165.36 |
6 |
-0.72, -156.22 |
9 |
-3.65, -17.47 |
7 |
26.12, -158.13 |
8 |
-3.01, -23.42 |
5 |
8.13, -165.02 |
1 |
gives following code: 90 79 88 87 87 74 85 66 52 75 69 78 51
Convert the number into Ascii
ZOXWWJUB4KEN3
Abjuration
Observations
17, 18, 13, 20 are the first four rolls of a skilled Magic Missile caster.
MNJPFPCHVVOYLHBEQ
but something doesn’t quite add up.
*The three sided die (next to the coin) has RPS markings – “Rock, Paper, Scissors”. We can interpret the “R” as the first so 1.
**The coin has two sides – “Heads or Tails”. Heads is first so another 1.
4 | 4 | 3 | 2 | |
4 | 4 | 4 | 2 | |
4 | 4 | 2 | ||
4 | 4 | 4 | 4 | |
4 | 2 | |||
4 | 4 | 4 | 3 | 1 |
3 | ||||
3 | 3 | 2 | ||
17 | 5 | |||
17 | 5 | |||
12 | 3 | |||
20 | 5 | |||
11 | R | (1)* | ||
7 | Heads | (1)** | ||
2 | ||||
4 | 1 | |||
17 |
As any experienced geek knows (or researching the hint) a Magic Missile does 1d4+1 damage. Adding +1 to each die gives better results: 17, 18, 13, 20, 8, 21, 4, 11, 24, 24, 17, 27, 14, 9, 3, 7, 18 or QRMTHUDKXXQ[NICGR
Combining the two and little trial by fire.
17 | Q | |
18 | R | |
13 | M | |
20 | T | |
8 | H | |
21 | U | |
4 | D | |
11 | K | |
22 | V | leave |
22 | V | leave |
15 | O | leave |
25 | Y | leave |
14 | N | |
9 | I | not coin |
3 | C | |
7 | G | ?oops (H) |
18 | R | 7’s +1 |
Beholder our answer:
QRMTHUDK5VOYNICH8
Deflector shield
Observations
Pad both the forward and aft parts of your ship.
There are also numbers in the lower portion of the image:
82617.11550.70915.82602 79914.31600.57400.65491.640.80108.14232.1941 77024.54927.59318.68700 42043.80112.57500.11638.2010 40512.57566.1601
“…of your ship.” The end of the hint suggests that the numbers are related to some of the ships in the show. After some searching it was discovered that each number group refers to a specific Star Trek star ship’s registry number:
82617 | USS Capitoline |
11550 | USS Apollo |
70915 | USS Bonchune |
82602 | USS Aventine |
79914 | USS Demeter |
31600 | USS Bonestell |
57400 | USS Chimera |
65491 | USS Kyushu |
640 | USS Copernicus |
80108 | USS Amalthea |
14232 | USS Berlin |
1941 | USS Bozeman |
77024 | USS Achilles |
54927 | USS Denver |
59318 | USS Cochrane |
68700 | USS Freedom |
42043 | USS Centaur |
80112 | USS Galatea |
57500 | USS Challenger |
11638 | USS Agamemnon |
2010 | USS Jenolan |
40512 | USS Gorkon |
57566 | USS Kearsarge |
1601 | USS Agincourt |
“…the forward and aft parts…” This part of the hint suggests that the important parts of the name of each ship are the first and last letters:
First letters: CABADBCKCABBADCFCGCAJGKA
Last letters: eoeerlausannsremrarnnnet
“Pad both…” Finally, the very beginning of the hint references a known cipher called One Time Pad. Using this cipher, decrypt using the last letters as your message and the first letters as the pad:
codeokykqammsochpupnehut
Although most of the result looks like gibberish, there is one section that stands out in the beginning: “code.” This is an indicator that this is the correct path to follow for the solve. Separate the “code” out and divide the 8 letter prefix from the numbers/keyword section:
code okykqamm sochpupnehut
The final step is also Star Trek related. Separate the numbers/keyword section:
soch pupne hut
Translate using Klingon and reattach prefix:
OKYKQAMM7IMPERFECT9
Qapla’
Arduino shields
Observations
Look to IEEE 802.3 for the correct encoding.
Patterns repeat in group of 4. We also see only characters 5b9a
used.
Translating into base4 ( 0123
-> 5b9a
) and converting to dec (eg: 3+0*4^1+2*4^2+1*4^3 = 99) and then ascii we get
b95a | 1 | 2 | 0 | 3 | 99 | c |
b9aa | 1 | 2 | 3 | 3 | 111 | o |
b9b5 | 1 | 2 | 1 | 0 | 100 | d |
b9bb | 1 | 2 | 1 | 1 | 101 | e |
ba9a | 1 | 3 | 2 | 3 | 123 | { |
ba99 | 1 | 3 | 2 | 2 | 122 | z |
bab9 | 1 | 3 | 1 | 2 | 118 | v |
babb | 1 | 3 | 1 | 1 | 117 | u |
babb | 1 | 3 | 1 | 1 | 117 | u |
ba99 | 1 | 3 | 2 | 2 | 122 | z |
b99a | 1 | 2 | 2 | 3 | 107 | k |
bab9 | 1 | 3 | 1 | 2 | 118 | v |
b995 | 1 | 2 | 2 | 0 | 104 | h |
5aba | 0 | 3 | 1 | 3 | 55 | 7 |
ba55 | 1 | 3 | 0 | 0 | 112 | p |
babb | 1 | 3 | 1 | 1 | 117 | u |
ba99 | 1 | 3 | 2 | 2 | 122 | z |
ba99 | 1 | 3 | 2 | 2 | 122 | z |
b9a5 | 1 | 2 | 3 | 0 | 108 | l |
b9bb | 1 | 2 | 1 | 1 | 101 | e |
5a9b | 0 | 3 | 2 | 1 | 57 | 9 |
baab | 1 | 3 | 3 | 1 | 125 | }
|
dropping this packet:
zvuuzkvh7puzzle9
Coat of Arms (I)
Observations
Might have to make an international call for this one.
Matching the shields to countries we get:
Russia | Moldova | Russia | San Marino |
Russia | Yemen | Russia | Hungary |
Samoa | Korea | China | Russia |
Iran | Venezuela | Russia | Tuvalu |
Sri Lanka | Vietnam | Vietnam | Iran |
Russia | Singapore |
Now what? At the bottom of the picture there is a hint.
CALL US IMMEDIATELY.
To call other countries you may need a country calling code.
Replacing the Countries with their respective Calling codes gives:
7 | 373 | 7 | 378 |
7 | 967 | 7 | 36 |
685 | 82 | 86 | 7 |
98 | 58 | 7 | 688 |
94 | 84 | 84 | 98 |
7 | 65 |
Concatenating the numbers and grouping into twos gives
73 73 73 78 79 67 73 66 85 82 86 79 85 87 68 89 48 48 49 87 65
Convert to ascii
IIINOCIBURVOUWDY001WA
Reversing we see a known keyword
AW100YDWUOVRUBICONIII
Replace the numbers (and 100 with Roman C) finally gets us dialed in
AWCYDWUO5RUBICON3
Ursus arctos
Observations
Can a bear play music?
Analyzing the first number in each set we find they have a greatest common divisor of 426. Dividing each by that gives:
3408 | 8 |
3408 | 8 |
2982 | 7 |
2982 | 7 |
3408 | 8 |
2982 | 7 |
3408 | 8 |
3408 | 8 |
2130 | 5 |
3408 | 8 |
2982 | 7 |
2556 | 6 |
3408 | 8 |
2982 | 7 |
2556 | 6 |
2130 | 5 |
We need to find an index for the second numbers. Searching for Bear and Shield we find this album listing. Sounds consistent with the clue but how can we be sure it’s the one we need. Converting 426
to minutes and seconds we get 7:06.
A match with the length of the last song! Converting the rest of the numbers and matching with song number gives our next piece:
275 | 4:35 | 1 |
344 | 5:44 | 7 |
264 | 4:24 | 2 |
270 | 4:30 | 8 |
318 | 5:18 | 4 |
318 | 5:18 | 4 |
318 | 5:18 | 4 |
224 | 3:44 | 5 |
62 | 1:02 | 3 |
0:00 | 0 | |
360 | 6:00 | 6 |
224 | 3:44 | 5 |
62 | 1:02 | 3 |
344 | 5:44 | 7 |
224 | 3:44 | 5 |
360 | 6:00 | 6 |
Combine our two pieces,
81 87 72 78 84 74 84 85 53 80 76 65 83 77 65 56
and bear with me while we convert from dec to ascii
QWHNTJTU5PLASMA8
Police badge
Observations
Divided, we are united.
We can match our short names to an area and number. eg:
RMP | Rampart Area | (2) |
SOW | Southwest Area | (3) |
HRB | Harbor Area | (5) |
… | … | … |
Our numbers range from 2 – 21, well within alphabet range. Converting number to alpha (A=1) we get:
DEV | 17 | Q |
NHD | 15 | O |
SOW | 3 | C |
SOW | 3 | C |
SOE | 18 | R |
OLY | 20 | T |
RMP | 2 | B |
SOE | 18 | R |
OLY | 20 | T |
WLA | 8 | H |
SOE | 18 | R |
HRB | 5 | E |
HRB | 5 | E |
PAC | 14 | N |
NHD | 15 | O |
TOP | 21 | U |
SOE | 18 | R |
VNY | 9 | I |
MSN | 19 | S |
WLA | 8 | H |
PAC | 14 | N |
VNY | 9 | I |
PAC | 14 | N |
HRB | 5 | E |
To decrypt and serve:
QOCCRTBR3NOURISH9
Shield (money)
Observations
What does dinheiro mean?
Take each pile on money and sum the amount
6006 | 66 | B |
7005 | 75 | K |
8001 | 81 | Q |
6007 | 67 | C |
8009 | 89 | Y |
9000 | 90 | Z |
8006 | 86 | V |
8001 | 81 | Q |
5002 | 52 | 4 |
7005 | 75 | K |
7006 | 76 | L |
8005 | 85 | U |
6009 | 69 | E |
5005 | 55 | 7 |
Combine the thousands and the dollars to make a decimal number then convert to ascii.
Simple and centsible.
BKQCYZVQ4KLUE7
Aegis
Observations
Alphabetic ancestor of Latin
In the image, the code is written in unusual symbols that resembles Greek alphabet. Indeed it’s ancient Greek alphabet so write it down;
gamma | epsilon | pi | lambda | digamma |
sigma | digamma | nu | digamma | sigma |
nu | beta | alpha | iota | pi |
lambda | digamma | sigma | digamma | nu |
digamma | sigma | mu | nu | omicron |
gamma | tau | omicron | epsilon | xi |
pi | lambda | omicron | rho | alpha |
tau | omicron | rho | koppa | digamma |
iota | nu | koppa | digamma | epsilon |
Then convert it to correspond modern Roman alphabet and make it in line.
GEPLWSWNWSNBAIPLWSWNWSMNOGTOEXPLORATORKWINKWE
You can find meaningful word “EXPLORATOR” at the latter of the code. It must lead a keyword.
GEPLWSWNWSNBAIPLWSWNWSMNOGTO EXPLORATOR KWINKWE
After “EXPLORATOR”, KWINKWE is also meaningful. This must turn into number and sounds “quinque”, 5 in latin.
GEPLWSWNWSNBAIPLWSWNWSMNOGTO EXPLORATOR5
Before “EXPLORATOR” will also be a number. It’s notable that “OGTO” followed by “EXPLORATOR”. In ancient Greek there’s no letter correspond directly to ‘C’. Assume “OGTO” as “OCTO” then this can be 8 in latin. Note that the code starts with ‘G’ so make sure to substitute it with ‘C’.
CEPLWSWNWSNBAIPLWSWNWSMN 8EXPLORATOR5
Did you notice that the string “PLWSWNWS” appeared twice in the code? Substitute ‘W’ with ‘U’, this string turns out to be “PLUS UNUS”, “+1” in latin. But what to +1? Let’s see the code carefully.
CE +1 SNBAI +1 MN 8EXPLORATOR5
There are some Roman letters other than ‘C’ that cannot be expressed directly by ancient Greek alphabet. ROT+1 the letters followed by “+1” gives ‘F’ or ‘J’, that don’t correspond to ancient Greek alphabet.
CFSNBAJMN8EXPLORATOR5
Now the time to substitute keywords. In Latin, “explorator” means “spy”. So the answer is
CFSNBAJMN8SPY5
Coat of Arms (II)
Observations
EOF
Niger | NE |
Montenegro | ME |
Slovenia | SI |
Saint Helena | SH |
Myanmar | MM |
Estonia | EE |
Saint Vincent and Grenadines | VC |
Finland | FI |
Venezuela | VE |
Taylor Garnett Evans & Co Ltd | ?? |
NEMESISHMMEEVCFIVE
Combining into another format ( keyword#AA##AA#) our search comes to an end
NEMESIS8MM55VC5