[cavour13]

Hi all and good luck !

i did some research about the hex blob provided by the challenge but im kinda lost about next step

[OsuLearner]

IDK why that hex string keep changing if reload the page

[st123]

IDK why that hex string keep changing if reload the page

Ikr so annoying. so seems we need to use pwntools ?

[st123]

Solved. Pm for writeup

[bananoname]

Here code:

import socket from unicorn import * from unicorn.arm_const import * def recvuntil(sock, delim=b'\n'):     data = b''     while not data.endswith(delim):         data += sock.recv(1)     return data def HexToArm(hex_str):     code_bytes = bytes.fromhex(hex_str)     # Initialize Unicorn for ARM architecture     mu = Uc(UC_ARCH_ARM, UC_MODE_ARM)     # Map 2MB memory for this emulation at address 0x10000     ADDRESS = 0x10000     mu.mem_map(ADDRESS, 2 * 1024 * 1024)     # Write machine code to be emulated to memory     mu.mem_write(ADDRESS, code_bytes)     mu.reg_write(UC_ARM_REG_R0, 0x0)     # Emulate machine code in infinite time     try:         mu.emu_start(ADDRESS, ADDRESS + len(code_bytes))     except UcError as e:         print("ERROR: %s" % e)     # Read back the value of R0 register     r0 = mu.reg_read(UC_ARM_REG_R0)     return str(r0) def main():     host = "83.136.255.41"     port = 39006     sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)     sock.connect((host, port))     for i in range(51):         response = recvuntil(sock)         decoded_response = response.decode()         print(decoded_response)         colon_index = decoded_response.find(': ')         content = decoded_response[colon_index + 1:].strip()         response = recvuntil(sock, b'Register r0:')         decoded_response = response.decode()         result = HexToArm(content)         sock.send((result + '\n').encode())         print(decoded_response + result + "\n")     sock.close() if __name__ == "__main__":     main()

[awwliveyet]

https://me0w.gitbook.io

i wrote this writeup!

[st123]

https://me0w.gitbook.io

i wrote this writeup!

Nice writeup ! : )

[opo]

https://me0w.gitbook.io COULD HAVE ATTACHED OTHER DETAILES LINKS FOR SOLVING IN DEPTH