Project Sekai - ✅-mobile-jnidorino

JNIdorino - 500 points

Category: Mobile Description: I hate using native libraries so much! I think I forgot a function call somewhere. Can you find it? Files:

https://umdctf.io/files/9a20c42b138b6adf2e1660bf95539b5d/JNIdorino.apk?token=eyJ1c2VyX2lkIjoxNDcsInRlYW1faWQiOjY4LCJmaWxlX2lkIjo3M30.ZE1REQ.alZtcemkkInAg5lkdVYVwgrW91I

Tags: No tags.

Sutx pinned a message to this channel. 04/29/2023 10:17 AM

libjnidorino.so

482.29 KB

10:26

somehow didnt see the flag in the base64's (edited)

@Violin wants to collaborate

11:12

@TheBadGod wants to collaborate

nothing is calling setVictoryText in the java classes, so must be coming from the native binary

i didnt see setVictorytext in native lib somehow

11:21

also dont know what those base64 are for

11:21

not referenced anywhere

sahuang

also dont know what those base64 are for

distraction most likely

thats the only binary, and i dont see useful info in apk

GhLagoBPGjAdjYQldkhrYdgky

TheBadGod

used /ctf solve

✅ Challenge solved.

UMDCTF{l0v3_n@t1ve_fUns}

wait what

probably could've just decoded all the base64s. One of them was the flag, I found it by looking at all defined functions and all called functions, the one I sent is the only one not called

i decoded all

11:26

??

lol

wtf

TheBadGod

probably could've just decoded all the base64s. One of them was the flag, I found it by looking at all defined functions and all called functions, the one I sent is the only one not called

which one

TheBadGod

GhLagoBPGjAdjYQldkhrYdgky

i dumped all base64's and decoded on cyberchef

that was the function

OH

11:27

lmfaoooooo

11:27

i wrote my python script to dump all strings ending in "=="

1

11:27

LMFAO

oof

that one is the only one without

11:27

zzz

11:28

fun

maybe pokptcha like that too xd

11:28

https://discord.com/channels/919744111391698945/1101920112484819114

its web?

yeah