solidartnost

spbctf

Task: a Dart 2.7.2 AppJIT snapshot with an interactive menu that gates flag decryption behind three answer checks (file size, COVID petition URL, secret SHA1). Solution: recover logic from the snapshot literal pool, prove the RC4 decryption key is hardcoded (gate inputs do not feed the key), patch the stored correctSha1 constant to bypass the SHA1 gate, and run under Dart 2.7.2 in a linux/amd64 Docker container to dump the flag.