Leet More 2010 ELF Quest writeup

Find the hidden message. file

Try the file tool and u’ll be told it is an ELF file. But any other tools say the header is corrupted and if you compare it with true ELF header, you will know it’s a trash. A good thing for further analysis is to count chars.

73 30 6d 65 74 69 6d 65 73 5f 68 65 61 64 65 72 73 5f 6c 69 65 0a …

Now you see they are printables, so get chr() of them for flag:
s0metimes_header_lie

1 comment

    • Naresh K on October 21, 2013 at 09:58
    • Reply

    How can i do the analysis of the count chars.Please help me…Tell me the procedure.
    Don’t forgot to Reply me

    Thanks, In advance!

Leave a Reply

Your email address will not be published.