Post

Static ain't always noise

Can you look at the data in this binary? The bash script might help!

image-1602

Download all the files.

image-1604

Find the flag with strings static | grep "picoCTF".

strings extracts printable text from the executable, while grep selects lines containing the flag prefix. This examines data stored in the binary without running it.

image-1605

Alternatively, use the ltdis.sh script with the static file.

This produced the following output: image-1606

image-1607

The output reveals the flag!


This post is licensed under CC BY 4.0 by the author.