Strong-Protected

rev-kids20.forkbomb.ru

Task: statically linked stripped C ELF with nested custom stack-machine VMs and anti-debug (ptrace detection + x86-64/x32 mode switching) that writes a 40-byte flag to /tmp/flag.txt then immediately unlinks it. Solution: run under qemu-user-static (defeats ptrace-based mode-switch protection), confirm open/write/unlink via -strace, and capture the 40 bytes before deletion by replacing the target path with a named pipe (FIFO).