Media Summary: Shows 3 strategies for finding the flag. using the strings command, using Ghidra, and using a debugger (GDB). Note that ... TOCTOU attack (time of check, time of use). The program opens the file and then later uses the same filename to check to see if ... Use the base64 command in the webshell repeatedly to decode the flag.
Picoctf 2023 Reverse - Detailed Analysis & Overview
Shows 3 strategies for finding the flag. using the strings command, using Ghidra, and using a debugger (GDB). Note that ... TOCTOU attack (time of check, time of use). The program opens the file and then later uses the same filename to check to see if ... Use the base64 command in the webshell repeatedly to decode the flag. 00:00 Intro 00:25 'files' 00:45 Creating our own .class file 01:50 'strings' 02:15 Flag! 02:20 Examining the .class file 02:45 JD-GUI ...