reversemedium

Pac-Man

volgactf

Task: Modified NES Pac-Man ROM with hidden flag triggered by reaching a specific score. Solution: Disassembled 6502 code with radare2, found injected subroutine at PRG ROM padding boundary that checks for score 7331 and decrypts 25-byte flag using XOR cipher with index-dependent key.

$ ls tags/ techniques/
ines_rom_parsing6502_disassemblyinjected_code_detectionscore_trigger_analysisxor_cipher_decryptioncode_padding_boundary_analysis

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub to get started.

$ssh [email protected]