[notagh0st]

The Beep part was the hardest part for me, and then after that there's still a few more steps. It just doesn't let up.

[kelsier1999]

Look at where the c2 connection string is used. It's not a real c2 server, but rather a string that gets parsed out for letters that eventually help make a key to decrypt an image file. Look for the reference of iv.png. It's an encrypted image file that needs to be decrypted.

Can you pls guide me through this c2 thing i got traffic in burp but did;t see any decryption or encryption algorithum in apk code

[onecok3]

Look at where the c2 connection string is used. It's not a real c2 server, but rather a string that gets parsed out for letters that eventually help make a key to decrypt an image file. Look for the reference of iv.png. It's an encrypted image file that needs to be decrypted.

Can you pls guide me through this c2 thing i got traffic in burp but did;t see any decryption or encryption algorithum in apk code

You need to decompile it using jadx or dex2jar + jd-gui. You can spot decryption method written in Java in short time. Then try to figure it out how does the key come.

[notagh0st]

Look at where the c2 connection string is used. It's not a real c2 server, but rather a string that gets parsed out for letters that eventually help make a key to decrypt an image file. Look for the reference of iv.png. It's an encrypted image file that needs to be decrypted.

Can you pls guide me through this c2 thing i got traffic in burp but did;t see any decryption or encryption algorithum in apk code

You need to decompile it using jadx or dex2jar + jd-gui. You can spot decryption method written in Java in short time. Then try to figure it out how does the key come.

@kelsier1999 - Look at my and @onecok3's previous messages on channel 2. Decompile with jdx, load it into JDX-GUI or IntelliJ or something, find references to the C2 URL (It's not a real C2 URL, the URL is used to build strings for a decrypt function), look for the decrypt function.

[onecok3]

challenge 3 is painful....
I think it count as self harm

Agreed. Crazy painful. I lost my sanity with 3 a long long time ago. Where are you at with it right now?

Keep fucking with the beep api, shellcode seems broken so i guess i need to fix every byte somehow

I think it's about find the correct argument supplied to the program so that won't crash.

[asddgfhf]

challenge 3 is painful....
I think it count as self harm

Agreed. Crazy painful. I lost my sanity with 3 a long long time ago. Where are you at with it right now?

Keep fucking with the beep api, shellcode seems broken so i guess i need to fix every byte somehow

Can you share the link to third challenge? Interesting if i can get there without completing second one

[testrio35489]

anyone passed 4th or 5th one

[notagh0st]

FINALLY got past the 3rd one. Onto the 4th now, looks like a really fun one.

[onecok3]

FINALLY got past the 3rd one. Onto the 4th now, looks like a really fun one.

Could you please point the way ?

[Hunter89]

Do you know of anyone has all the challenges ? Or any challenges from number 4 and upwards ?