pwnmedium

31337

spbctf

Task: make an obfuscated VM calculation return the magic number 31337 so the binary prints the flag. Solution: patch the return value of the calculation function to mov eax, 0x7a69 (31337) with NOP padding, satisfying both the comparison and the verification in the flag printer.

$ ls tags/ techniques/
binary_patchingreturn_value_modificationnop_padding

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]