This FAQ, collaboratively created by the community, addresses the contents of the challenge titled “MAC Backdoor”.
Challenge link: MAC Backdoor
This FAQ, collaboratively created by the community, addresses the contents of the challenge titled “MAC Backdoor”.
Challenge link: MAC Backdoor
i have been pulling my hair out trying to find the last of my questions.
i am answering the question “What key was used to encrypt the payload in hex?“
the only thing i am finding in the strings is the line “ABCDEF…“ it lists the full alphabet twice and numbers.
i input it in cyberchef trying to parse it in all kinds of ways with the xor and hex options.
the hint is to look at the function that called the decrypt. i looked at the flow in the available IDA-disassembler and i keep coming back to the xref: b64_encode line which gives me the db with the abcdef….
what am i not doing and or missing