$ cat writeup.md…
$ cat writeup.md…
RingZer0CTF
Task: an unstripped Linux kernel rootkit (.ko) that hooks sys_read and XOR-decrypts a flag at runtime. Solution: recover the XOR key and ciphertext from DWARF debug info and .rodata, noting null-termination makes the key 5 bytes (.conf), then apply repeating-key XOR.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar