reverseProeasy-medium
Baby (Obfuscated) Flag Checker
uoftctf2026
Task: Heavily obfuscated Python flag checker using similar variable names, XOR wrapper functions, and control flow flattening. Solution: Built a regex-based deobfuscator to resolve nested XOR function calls to constants, revealing the encrypted flag parts XOR-encoded with key 125 and arranged via a permutation array.
$ ls tags/ techniques/
xor_decryptionstatic_analysisregex_deobfuscationcontrol_flow_analysis
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [misc][Pro]Who4reu— TaipanByte
- [crypto][Pro]CryBaby— grodno_new_year_2026
- [crypto][Pro]babyCrypto— grsu
- [forensics][Pro]Baby Exfil— uoftctf2026
- [crypto][free]BabyEncryption— hackthebox