Files
deadface-challenges/database/ghost-in-the-registry/README.md
T
2026-10-19 14:59:45 +02:00

32 lines
2.1 KiB
Markdown
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# Ghost in the Registry
**Category:** Database
**Points:** 240
## Description
\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/ghost_in_the_registry.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
\<sup>Created By: \<code>@syyntax\</code>\</sup>
\<style>
.tiny-text {
font-size: 6px;
color: #1a1a1a;
}
\</style>
\<span class="tiny-text">flag{9de3c45430f57b1a}\</span>
​‌‌​​‌‌​​‌‌​‌‌​​​‌‌​​​​‌​‌‌​​‌‌‌​‌‌‌‌​‌‌​‌‌‌​​‌‌​​‌‌​​​​​‌‌​‌‌​​​‌‌‌​‌‌​​​‌‌​​‌‌​‌​‌‌‌‌‌​‌‌​‌‌​‌​​‌‌​​‌‌​‌​‌‌‌‌‌​‌‌​‌​​​​​‌‌​‌​​​‌‌‌​​‌​​‌‌​​‌​​​​‌‌​​‌‌​‌‌‌​​‌​​‌​‌‌‌‌‌​‌​​​​​‌​‌​​‌​​‌​‌​‌‌‌‌‌​‌‌​​‌​​​​‌‌​‌​​​‌‌​​‌​​​‌‌​​‌​​​‌‌‌‌​​‌​‌‌‌‌‌​‌
Diverted narcotics need a paper trail that leads nowhere. Investigators suspect a fabricated patient — one who is issued controlled-substance prescriptions but has never actually been seen for a single clinical encounter. Aurora uses one enterprise `patient_id` across all of its systems, so records join across databases. Find the patient who has at least one Schedule II prescription but zero encounters in `aurora_ehr`, and report their MRN.
Use provided MySQL shell.
Submit the MRN as `deadface{MRN}`. Example: `deadface{AH-1234567}`.
[Access Database](https://aurora.dctf.io)
## Services
- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)
- [https://aurora.dctf.io)](https://aurora.dctf.io))