Reverse Engineering

Return oriented programming is one of the paradigms of all time. The garbled output is `94 7 d4 64 7 54 63 24 ad 98 45 72 35`

Binary: abnormaleak (ELF 64-bit, x86-64, dynamically linked, not stripped)

**Flag:** `HTB{Tim1ng_z@_h0ll0w_t3ll5}`

Goal: recover the correct flag string.

**Name:** rev200-1.apk **Category:** Reverse Engineering **Platform:** Android (Kotlin / Java)

AES-256-CBC with the key produced by embedded shellcode. Break on EVP_EncryptInit_ex at runtime, read the key/IV out of registers, decrypt offline.

Android APK that applies a position-dependent substitution over letters/digits/specials. Invert it in Python.

Stripped Nim binary that XORs input with a keystream derived from a hard seed. Extract the keystream at runtime with gdb and XOR out the flag.