A Wild Ride


images/3-1.png

First step was to download the gpx.zip file

I attempted to unzip the gpx.zip file but found that it was protected with a password.


images/3-2.png

The next step was to crack the password with zip2john and then feed that to John the Ripper
to get the password to unzip the file.

images/3-3.png
images/3-4.png

The outfile of zip2john “zipped.txt” is a hash file that john can use with a wordlist like rockyou.txt
Let's feed john

images/3-5.png

Now we have the password to unzip the gpx.zip file.
images/3-6.png

The zip file contains 252 individual ride_XXX.gpx files. What in the world is a .gpx file?
I googled “What is a .gpx file” and clicked on the first link that was fileinfo.com :
images/3-7.png

So .gpx files are geolocation tracking data that people use to display the
routes they take for running, biking, or general travel, which we can upload to
Google Maps and it will draw our routes. Let's head to Google Maps to upload
our 252 .gpx files and draw our route. Instructions from fileinfo.com:

images/3-8.png

When I tried importing all of the files, it seemed to accept them, but would only render one
route per map layer. After attempting to add multiple layers, with one .gpx file per layer, I
realized that not only do I not have time to do all this, Google caps the number of layers you
add to a single map (9 if I remember correctly).
images/3-9.png

The data files are all the same in that they only relay lat/lon position as a string. There should
be a way to combine all of the tracking positions into a single file. I Googled "combine gtx files
into one" and found the link https://gotoes.org/strava/Combine_GPX_TCX_FIT_Files.php which is a
webapp that will take your .gpx files and combine them into one file.
images/3-10.png

I threw all my gpx files into the uploader and got an error message that it would only take 20 gpx files at a time.
I was not excited to have to do this multiple times. But at the bottom of the interface it says that if your files are too large
for the uploader, you can zip them. Okay. I created a new password free zip file of just the .gpx files to upload.
images/3-11.png
The uploader accepted the newzip.zip file and I clicked on the ‘next steps’ button that appeared.
images/3-12.png
I kept all the default parameters and scrolled to the bottom of the screen and clicked:
images/3-13.png

When this menu popped up I chose to save the file
images/3-14.png

Once this file downloaded, I went back to Google Maps and imported my new
combined .gpx file and added it to the map:
images/3-15.png



Back To Write ups