The Helpers With Clean Hands

1. Challenge Overview

This challenge was about tracing the supplier and control structure behind Mercy Lantern Relief Trust's relief supply procurement.

On the surface, it looked like a charity project providing funeral candles, lamp oil, and counseling support, but by connecting tender records, company registries, emails, and archives, the real supply chain and delivery destination were revealed.

2. Objective

The flag had to be completed in the following format.

HTB{SUPPLIER_FEEDS_TOWN}

The required values were the following two:

• Supplier
• Town

Oath Submission also verified additional values such as the holding company, common director, and receiving clerk.

3. Tools Used

The tools actually used were the in-game UI tools.

• Companies Register
• Tender Hall
• Courier intercepted mail
• Archive mirror
• Oath Submission

4. Initial Clues

• Procurement reference number: ML-22-771
• Buyer: Mercy Lantern Relief Trust
• Supplier registration number: VR-118204
• Delivery region: Northern Crown Road
• Supplier mentioned in the challenge description: Ash & Wick Provisioners Ltd
• Scheduled delivery destination mentioned in the challenge description: Harrowgate
• Receiving clerk: Sister Merrow

5. Investigation Process

I checked the records related to ML-22-771 in Tender Hall to confirm the supplier and delivery destination.

Lot 3 confirmed the Harrowgate delivery, and dispatch ref AWP-HG-4408 was also found.

I searched supplier registration number VR-118204 in Companies Register to check the company record for Ash & Wick Provisioners Ltd.

From this record, I confirmed the directors and shareholder structure.

Then I followed the record for Quiet Mercy Holdings Ltd to confirm the upper-level control structure. Quiet Mercy Holdings Ltd owned 100% of Ash & Wick Provisioners Ltd, and Crown Road Fiduciary Foundation owned 100% of Quiet Mercy Holdings Ltd.

In Courier intercepted mail, I reconfirmed the delivery schedule and recipient for Lot 3's Harrowgate delivery.

In Archive mirror, I also found the former public-facing supplier name Ashwick Municipal Supply, but the commercial supplier value verified by Oath Submission was Ash & Wick Provisioners Ltd.

6. Confirmed Evidence

• Commercial supplier: Ash & Wick Provisioners Ltd
• Supplier registration: VR-118204
• Holding company: Quiet Mercy Holdings Ltd
• Quiet Mercy registration: VR-091144
• Common director: Nera Sorn
• Person related to Quiet Mercy: Ilyra Venn
• Foundation confirmed as the top-level owning entity: Crown Road Fiduciary Foundation
• Delivery town: Harrowgate
• Receiving clerk: Sister Merrow
• Dispatch ref: AWP-HG-4408
• Former trading name / supply partner name confirmed in Archive mirror: Ashwick Municipal Supply

7. Oath Submission Values

Commercial supplier: Ash & Wick Provisioners Ltd
Holding company: Quiet Mercy Holdings Ltd
Common director: Nera Sorn
Delivery town: Harrowgate
Receiving clerk: Sister Merrow

After verification, during flag assembly, the supplier was written not as the full legal entity name but as the main trade name Ash & Wick, and ‘&’ was replaced with AND.

8. Flag

Confirmed flag:

HTB{ASH_AND_WICK_FEEDS_HARROWGATE}

This write-up was originally written in Korean by human and translated into English with AI assistance.