reversemedium
Nucleus
tamuctf
Task: PE32+ Windows executable with nested binaries in RCDATA resources, each XOR-encoded. Solution: Recursive extraction of 21 layers, brute-forcing single-byte XOR keys by looking for MZ header; flag encoded in the XOR keys themselves.
$ ls tags/ techniques/
pe_resource_parsingsingle_byte_xor_bruteforcerecursive_binary_extractionflag_from_xor_keys
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Create a free account with GitHub, then upgrade to Pro.
$ssh [email protected]