Guild icon
Project Sekai
🔒 UIUCTF 2023 / ✅-rev-vmwhere1
Sutx pinned a message to this channel. 06/30/2023 5:15 PM
Avatar
@Rench wants to collaborate 🤝
Avatar
@Utaha wants to collaborate 🤝
Avatar
having trouble understanding 11 to 13 @@
Avatar
I think I can just write a gdb script to cheese this
Avatar
@Iyed wants to collaborate 🤝
Avatar
@nyancat0131 wants to collaborate 🤝
Avatar
nyancat0131 06/30/2023 6:17 PM
11 to 13 is just jmp right
18:17
jmp with flag
18:17
13 is jmp no condition
Avatar
uiuctf{ar3_y is the start I think
18:20
this works just rly slow :(
18:20
Ima start looking at part 2 while this runs
Avatar
@IceCreamMan wants to collaborate 🤝
18:36
@Violin wants to collaborate 🤝
Avatar
nyancat0131 06/30/2023 6:44 PM
#!/usr/bin/env python3 from pwn import * with open('program', 'rb') as f: dat = f.read() i = 0 while i < len(dat): op = dat[i] print(hex(i) + ': ', end='') i += 1 if op == 0: print('nop') if op == 1: print('add') elif op == 2: print('sub') elif op == 3: print('and') elif op == 4: print('or') elif op == 5: print('xor') elif op == 6: print('shl') elif op == 7: print('shr') elif op == 8: print('getchar') elif op == 9: print('putchar') elif op == 10: print('push', hex(dat[i])) i += 1 elif op == 11: target = (dat[i] << 8) | dat[i + 1] if target > 0x8000: target = -(0x10000 - target) print('jneg', hex(i + 2 + target)) i += 2 elif op == 12: target = (dat[i] << 8) | dat[i + 1] if target > 0x8000: target = -(0x10000 - target) print('jz', hex(i + 2 + target)) i += 2 elif op == 13: target = (dat[i] << 8) | dat[i + 1] if target > 0x8000: target = -(0x10000 - target) print('jmp', hex(i + 2 + target)) i += 2 elif op == 14: print('pop') elif op == 15: print('dup') elif op == 16: print('reverse') i += 1 elif op == 40: print('dbg') else: print('und')
18:44
maybe useful
Avatar
uiuctf{ar3_y0u_4_r3al_vm_wh3r3_(gpt_g3n3r4t3d_th1s_f14g)}
Avatar
nice
Avatar
nyancat0131 06/30/2023 6:45 PM
nice
18:45
how do i solve with bot?
Avatar
/ctf submit
Avatar
ctf solve
18:45
oh nvm
Avatar
or solve
18:45
yeah
Avatar
Avatar
Rench
used /ctf submit
You already solved this challenge.
Avatar
btw how does 11~13 looks like in your decompiler
Avatar
if you already submitted online then /ctf solve
Avatar
I'm using ghidra 😦
Avatar
Avatar
Rench
used /ctf solve
✅ Challenge solved.
Avatar
ok I see
18:46
jmp but in big endian
18:47
thx
Exported 38 message(s)