Intro Link to heading

Name: what-flag
Description: NICC recieved a mysterious email with an executable file that does nothing. Can you figure out what this executable does?
Author: TomB

This is reverse engineering. The binary is not stripped, lets go with binary ninja.

Solve Link to heading

Main does nothing however we see a few functions named : u, h, h2, f, l, a, g Looking inside of them we see what seems to be part of the flag. Let’s put these together

  • u : NI
  • h : CC
  • h2 : {
  • f : uhH
  • l : _fl@g
  • a : _i
  • g : _ThInk} We get : NICC{uhH_fl@g_i_ThInk}