[cavour13]

Hi all and good luck !

i did some research about the hex blob provided by the challenge but im kinda lost about next step

[OsuLearner]

IDK why that hex string keep changing if reload the page

[st123]

IDK why that hex string keep changing if reload the page

Ikr so annoying. so seems we need to use pwntools ?

[st123]

Solved. Pm for writeup

[bananoname]

Here code:

import socket
from unicorn import *
from unicorn.arm_const import *

def recvuntil(sock, delim=b'\n'):
    data = b''
    while not data.endswith(delim):
        data += sock.recv(1)
    return data

def HexToArm(hex_str):
    code_bytes = bytes.fromhex(hex_str)

    # Initialize Unicorn for ARM architecture
    mu = Uc(UC_ARCH_ARM, UC_MODE_ARM)

    # Map 2MB memory for this emulation at address 0x10000
    ADDRESS = 0x10000
    mu.mem_map(ADDRESS, 2 * 1024 * 1024)

    # Write machine code to be emulated to memory
    mu.mem_write(ADDRESS, code_bytes)
    mu.reg_write(UC_ARM_REG_R0, 0x0)

    # Emulate machine code in infinite time
    try:
        mu.emu_start(ADDRESS, ADDRESS + len(code_bytes))
    except UcError as e:
        print("ERROR: %s" % e)

    # Read back the value of R0 register
    r0 = mu.reg_read(UC_ARM_REG_R0)

    return str(r0)

def main():
    host = "83.136.255.41"
    port = 39006

    sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    sock.connect((host, port))
    for i in range(51):
        response = recvuntil(sock)
        decoded_response = response.decode()
        print(decoded_response)

        colon_index = decoded_response.find(': ')
        content = decoded_response[colon_index + 1:].strip()
        response = recvuntil(sock, b'Register r0:')
        decoded_response = response.decode()

        result = HexToArm(content)
        sock.send((result + '\n').encode())
        print(decoded_response + result + "\n")
    sock.close()

if __name__ == "__main__":
    main()

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Replying With Hidden Content

[awwliveyet]

https://me0w.gitbook.io

i wrote this writeup!

[st123]

https://me0w.gitbook.io

i wrote this writeup!

Nice writeup ! : )

[opo]

https://me0w.gitbook.io COULD HAVE ATTACHED OTHER DETAILES LINKS FOR SOLVING IN DEPTH

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Selling in HTB | /Thread-CPTS-FULL-EXAM-WRITEUP