Level 0: Find a Function Address

Open the provided binary in angr-management. Use the Functions panel on the left side to browse the list of discovered functions.

Your task is to find the address of the function authenticate and submit its hex address.

Submission

Run the check script with your answer:

/challenge/check <hex_address>

For example, if the address is 0x401234:

/challenge/check 0x401234

Level 1: Strings View

Open the provided binary in angr-management. Navigate to the Strings view (View menu -> Strings, or use the toolbar).

Browse the strings embedded in the binary. Your task is to find the string that starts with flag{ and submit the full string.

Submission

Run the check script with your answer:

/challenge/check "flag{...}"

Level 2: Variable Type at a Stack Location

Open the provided binary in angr-management. Navigate to the function process_config and open the Decompilation view.

Examine the stack layout of the function. Your task is to determine the type of the variable at stack offset rbp-0xa8.

Look at the decompiled output or the stack variable list to identify the type at that offset.

Submission

Run the check script with the type name:

/challenge/check "<type>"

For example:

/challenge/check "char"

Level 3: Decompilation & Cross-References

Open the provided binary in angr-management. Decompile the main function and look for the string "SECRET_CONFIG_KEY_ALPHA".

This string is referenced in main and in exactly one other function. Use the cross-references feature (right-click the string -> Find XRefs) to identify which other function references it.

Submit the name of that function.

Submission

Run the check script with the function name:

/challenge/check <function_name>