You're given a file called asdf1234.
Looking at the header of the file you see the RAR header, so unzip it.
You get an 8k file called "easy".
Running file on this shows that we're dealing with an ELF 32-bit LSB executable.
Into IDA we go.
We view the beginning of the code as such:
We probably dont want to go the route of 'this is not the flag'.
Here we could have tried some patching to get the binary to jump to what we want an then run it. Unfortunately, I suck at gdb currently so i continued with IDA.
What's this 'seekrit' offset contain?
Looks like some hex strings, press 'r' to convert to ascii.
Interesting. So what does the 'show_me_the_money' function actually do?
The flag is "show_me_the_money" and i pretty much just guessed it. We've looked at the file and we can't seem to get it to print the function name out. Any input is welcome, maybe we're missing something. :)
No comments:
Post a Comment