FL1TZ x Securinets Mini-CTF

Anderouid

Patching an unexported Android activity's smali via apktool and resigning the APK to feed a native function the correct key.

• Android
• Reverse Engineering
• jadx
• Smali
• APK Patching

Hexer

Recovering a flag hidden in a binary's raw byte content by inspecting its hexdump with xxd.

• Reverse Engineering
• Forensics
• Hexdump

Magic

Stripping decoy crypto noise from an obfuscated shell script down to its real ROT13/ROT20/XOR encoding chain and reversing it in Python.

• Reverse Engineering
• Shell Scripting
• Obfuscation
• Python

Maze1

Reading a remote Python text-adventure's source to find the exact choice sequence and power-ups needed to beat the final boss.

• Reverse Engineering
• Python
• Remote Challenge
• Game Logic

Maze2

Reversing a C remote service's SHA-256-plus-custom-obfuscation key derivation to unlock the next stage of a boss-fight CTF.

• Reverse Engineering
• C
• SHA-256
• Remote Challenge

Naggez

Decompiling a Godot platformer with GDRE Tools and editing scene positions to reach a flag driven by SHA-1/MD5-based character placement.

• Reverse Engineering
• Godot
• Game Reversing
• SHA-1
• MD5

Oid

Unwinding an OID-to-hex-to-Base64-to-Base32-to-Brainfuck encoding chain, then hand-tracing the reversed Brainfuck arithmetic to extract the flag.

• Reverse Engineering
• Brainfuck
• Encoding
• CyberChef

Serialo

Using IDA and dynamic analysis to recover a serial-key XOR routine's key bytes and reverse a name-to-serial keygen check.

• Reverse Engineering
• IDA
• XOR
• Dynamic Analysis

Stringz

Extracting a plaintext flag from a binary using the strings command, with online decompilation as an alternate route.

• Reverse Engineering
• strings
• Decompilation

X0r

Recovering a repeating XOR key in IDA by exploiting XOR's associative property and decrypting the flag in CyberChef.

• Reverse Engineering
• XOR
• IDA
• CyberChef