forensicsProeasy
Чувак, где мой флаг? (Dude, Where's My Flag?)
hackerlab
Task: Analyze a suspicious file from an infected computer. Solution: Detected Unicode RLO spoofing in filename (.exe disguised as .jpg), extracted WinRAR SFX archive, and decrypted XOR-encoded flag from embedded malware.
$ ls tags/ techniques/
xor_decryptionunicode_filename_detectionsfx_extractionbinary_analysis
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [reverse][Pro]It's over— hackerlab
- [reverse][Pro]Весёлый EXE (Funny EXE)— hackerlab
- [forensics][Pro]Reincarnation— duckerz
- [misc][Pro]Игра (Game)— hackerlab
- [stego][Pro]Чужой (Alien)— bug-makers