Reverse Engineering Analysis: Obfuscated Executables and Multi-Stage Cryptographic Parsers
Challenge 1: Binary Extension Spoofing and State Overwrite
The initial binary presents itself with a .com file extension, indicating a deliberate attempt to mask its true architecture. Peering into the header reveals a standard executable magic number, confirming it is a valid Linux ELF file. Stripping the misleading extension allows standard d ...
Posted on Tue, 08 Sep 2026 16:37:39 +0000 by lajollabob
Reverse Engineering a Simple XOR Encryption in CTF Challenge
Binary Analyssi
First, examine the binary with IDA Pro. The main function performs the following operations:
int main() {
char input[24];
char encrypted_flag[] = "rxusoCqxw{yqK`{KZqag{r`i";
printf("please input flag");
scanf("%24s", input);
if(strlen(input) != 24) {
printf(&quo ...
Posted on Tue, 01 Sep 2026 16:53:45 +0000 by Jocke
Using RetDec to Decompile a Simple C Program
Consider the following C source file:
#include <stdio.h>
void printff() {
printf("this is called funtion printff");
}
int main(int argc, char *argv[]) {
printff();
printf("This is helo analysis");
if (argc == 2) {
printf("The argument supplied is %s\n", argv[1]);
} else if (argc ...
Posted on Tue, 23 Jun 2026 18:01:09 +0000 by jpt62089
Reverse Engineering ELF Initialization and Exit Handlers for XOR Decryption
Challenge Overview
The binary implements a flag verification mechanism using chained XOR operations. Understanding the execution order is critical: the program applies XOR transformations both before and after the main function executes, leveraging ELF initialization sections and exit handlers.
ELF Initialization Function Table
In ELF binarie ...
Posted on Thu, 04 Jun 2026 17:21:17 +0000 by jpbox