reverseeasy-medium

Baby (Obfuscated) Flag Checker

uoftctf2026

Task: Heavily obfuscated Python flag checker using similar variable names, XOR wrapper functions, and control flow flattening. Solution: Built a regex-based deobfuscator to resolve nested XOR function calls to constants, revealing the encrypted flag parts XOR-encoded with key 125 and arranged via a permutation array.

$ ls tags/ techniques/
xor_decryptionstatic_analysisregex_deobfuscationcontrol_flow_analysis

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]