reverseProeasy-medium

Baby (Obfuscated) Flag Checker

uoftctf2026

Task: Heavily obfuscated Python flag checker using similar variable names, XOR wrapper functions, and control flow flattening. Solution: Built a regex-based deobfuscator to resolve nested XOR function calls to constants, revealing the encrypted flag parts XOR-encoded with key 125 and arranged via a permutation array.

$ ls tags/ techniques/
xor_decryptionstatic_analysisregex_deobfuscationcontrol_flow_analysis

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups