Tag Archives: Solusion

HELP: Flare-On 6 Challenge 12

Posted on November 23, 2019 by littlefater

Flare-On is Fireeye’s annual CTF which mainly focused on reverse engineering and this year (2019) is the 6th. I got a chance to finish all the challenges and the last challenge (challenge 12) is quite interesting and educational so I … Continue reading →

Posted in CTF, WinDbg | Tagged , , , | 2 Comments

FLARE On Challenge (2015) #11

Posted on September 10, 2015 by littlefater

This is the final challenge and it is said to be more difficult than the previous challenges. The file of this challenge named CryptoGraph, which is a 32 bit Windows Portable Executable file. Let’s analyze it in IDA at first. … Continue reading →

Posted in CTF | Tagged , , , | Comments Off on FLARE On Challenge (2015) #11

FLARE On Challenge (2015) #10

Posted on September 10, 2015 by littlefater

This challenge contains a large Windows Portable Executable File which is nearly 3.4 MB. It is usually difficult to reverse engineering such a large file. However, if you have noticed the special resource embedded into this file, things will become … Continue reading →

Posted in CTF | Tagged , , , | Comments Off on FLARE On Challenge (2015) #10

FLARE On Challenge (2015) #9

Posted on September 10, 2015 by littlefater

This challenge contains a Windows Portable Executable file in a very small size (4,608 bytes), typically, this kind of files is written in Assembly Lagrange. If you load this file into IDA, you may notice that the file is badly … Continue reading →

Posted in CTF | Tagged , , , | Comments Off on FLARE On Challenge (2015) #9

FLARE On Challenge (2015) #8

Posted on September 10, 2015 by littlefater

When you open this challenge directly in IDA, you may as disappointed as me, there is only a few code available at the Entry Point and they seems do nothing useful: However, if you open this file in a text editor, … Continue reading →

Posted in CTF | Tagged , , , | Comments Off on FLARE On Challenge (2015) #8