Flare-On 2024 is gone and I just made a presentation about the challenge #5 at the local meetup called 0xOpoSec. I think it’s a nice challenge to introduce a few RE and forensics concepts, and a perfect candidate to present this year.

The slides are available here, and the Unicorn Engine emulator I used to extract the flag from the final shellcode here.

Last year I did the same with challenge #12, also with a Unicorn Engine emulator. Slides are available in Github and also here.

Since my loader fix was censored by Hex-Rays with a spurious DMCA takedown (not worth the trouble to fight this garbage) I’m leaving here its full and uncensored NFO :-).

We love .DS_Store :))))))))))))

Have fun,
fG!