OSINT CTF Challenge: Operation Wing Trace
Classification: TRAINING EXERCISE // OSINT-CTF-2026-014
Category: Aircraft OSINT / Corporate Attribution
Difficulty: Intermediate
Time Limit: 4 hours
Phase 1: Aircraft Identification
Scenario
A whistleblower has provided a single photograph of a private jet parked at a remote airstrip. The aircraft is suspected of being used to transport assets linked to a sanctions evasion network. The tail number in the photograph has been intentionally blurred.
Your task is to identify the aircraft, trace its registered owner, and investigate the company behind it using only open source intelligence.
Evidence
One photograph of a private jet. The image and tail number is darkened and unreadable.
https://drive.google.com/file/d/1zKps1qAbCdtN16eX93s2VlEyGPD1zqZT/view?usp=sharing
Tasks:
Restore the image. Identify the aircraft. Provide answers to the following.
Serial Number
Manufacturer Name
Model
Type Aircraft
MFR Year
Type of Registration
Engine Type
Mode S Code
Registered Owner Name
Registered Owner Street Address
Registered Owner County
Registered Owner Country
Engine Manufacturer
Engine Model
Certificate Number
Phase 2: Corporate Attribution
Scenario
The registered owner of the aircraft is a corporate entity. This company may be part of a larger network involved in the sanctions evasion operation. Your task is to trace the ownership.
Tasks:
Using the registered owner name from Phase 1, identify the following:
Company Registration Number
Company Type
Jurisdiction
Registered Address
Agent Name
One Officer Name (Director, Secretary, or equivalent)
Phase 3: Flight Activity Analysis
Scenario
The aircraft has been tracked making multiple flights in recent weeks. Intelligence suggests it is being used to move assets between remote locations to avoid detection. One particular flight may reveal the operational pattern behind the sanctions evasion network.
Tasks:
Using your flight tracking OSINT skill, answer the following:
What was the departure airport for the flight on 28 July 2026?
What was the destination airport for the flight on 28 July 2026?
What was the flight number or callsign used?
What was the scheduled departure time (STD)?
What was the actual departure time (ATD)?
What was the flight duration?
What was the status of the flight?
At the barometric altitude (8,350 FT), what was the time and ground speed of the aircraft?
Submission Format (Updated)
Submit a single PDF document containing:
Phase 1 findings with source URLs and screenshots.
Phase 2 findings with source URLs and screenshots.
Phase 3 findings with source URLs and screenshots.
A brief methodology section explaining your approach.
A map showing the flight route from Phase 3 with annotated departure and destination points.
Submission Deadline
All report are to be submitted to the designated training email address - cybershieldmentor@gmail.com
Disclaimer
This challenge is designed for educational and training purposes only. The aircraft and company referenced are used solely as instructional examples within a controlled training environment. All information must be obtained from publicly available sources.




Solid challenge design my friend. The layered approach from tail number recovery through corporate attribution to live flight tracking is exactly how real-world sanctions evasion investigations run. Phase 3 with real-time ADS-B data is a nice touch most CTF builders skip. Looking forward to seeing the results. Cheers m8te
oops. deleted.