Battle

spbctf

Task: Android APK (com.hackbattle.task) whose password is reconstructed at runtime from resource arrays by a DEX hidden inside an XOR-encrypted asset. Solution: deobfuscate base64+XOR-0xFF strings to find DexClassLoader plan, XOR-0xED decrypt file.bin into file.jar, decompile the hidden DEX, and rebuild the password from R.array.Kappa indices into R.array.Kek.