reversePromedium

Pac-Man

volgactf

Task: Modified NES Pac-Man ROM with hidden flag triggered by reaching a specific score. Solution: Disassembled 6502 code with radare2, found injected subroutine at PRG ROM padding boundary that checks for score 7331 and decrypts 25-byte flag using XOR cipher with index-dependent key.

game_hacking xor retro nes 6502 rom_hacking pac_man injected_code score_trigger

ines_rom_parsing6502_disassemblyinjected_code_detectionscore_trigger_analysisxor_cipher_decryptioncode_padding_boundary_analysis

$ ls tags/ techniques/

game_hacking xor retro nes 6502 rom_hacking pac_man injected_code score_trigger

ines_rom_parsing6502_disassemblyinjected_code_detectionscore_trigger_analysisxor_cipher_decryptioncode_padding_boundary_analysis

Analysis

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.

$ python3 exploit.py --target 192.168.1.1 --port 8080
[*] Connecting to target...
[+] Shell obtained!

Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Permission denied (requires tier.pro)

Sign in to access full writeups

$sign in

$ cat writeup.md…

Sign in to access full writeups

Sign in to access full writeups

Similar writeups