reversePromedium

Pac-Man

volgactf

Task: Modified NES Pac-Man ROM with hidden flag triggered by reaching a specific score. Solution: Disassembled 6502 code with radare2, found injected subroutine at PRG ROM padding boundary that checks for score 7331 and decrypts 25-byte flag using XOR cipher with index-dependent key.

$ ls tags/ techniques/
game_hackingxorretrones6502rom_hackingpac_maninjected_codescore_trigger
ines_rom_parsing6502_disassemblyinjected_code_detectionscore_trigger_analysisxor_cipher_decryptioncode_padding_boundary_analysis
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups