攻防世界elrond32
ida打开后
发现sub_8048414和sub_8048538有蹊跷
进入sub_8048414
写个Python脚本
a2='ie ndags r'
s='i'
x=0
for i in range(8):
x=7*(x+1)%11
s+=a2[x]
print(s)
得到了isengard
Linux运行得到flag
./rev300 的意思就是:
当前目录下文件名为“rev300”的文件。
或者分析sub_8048538函数
v2=[0x0f,0x1f,4,9,0x1c,0x12,0x42,9,0x0c,0x44,0x0d,7,9,6,0x2d,0x37,0x59,0x1e,0,0x59,0x0f,8,0x1c,0x23,0x36,7,0x55,2,0x0c,8,0x41,0x0a,0x14]
s='isengard'
flag=''
for i in range(33):
flag+=chr(v2[i]^ord(s[i%8]))
print(flag)