droid

spbctf

Task: Android APK crackme with a single MainActivity that XOR-transforms an encrypted flag buffer based on movement input over an ASCII maze. Solution: recognized each flag byte is independently XORed by a move constant plus a walk constant, so brute-forcing the 3 distinct move candidates per byte recovers the flag directly without any maze pathfinding.