🍈 Zettelkasten

PlaidCTF2025 Prospector

1 min read

  1. This file runs on ARM
  2. But, we can see its strings
  3. On Dogbolt, the IDA decompilation: https://dogbolt.org/?id=6337b01f-0385-4ce0-9132-6197923b8d26#Hex-Rays=1040 It shows that this is likely a constraint solver problem
  4. Lets debug with gdb and qemu
  5. The flag would be whatever your input is:
  6. We convert the ida script into python z3 constraints.
  7. Note, that there are A LOT of contradictory constraints, so we have to try and mine for the correct ones

Graph View