BLAHAJ
/
has-writeup
10
2
Fork 0
Code Releases Activity

bytes away: remove probably unnecessary picture

This commit is contained in:
xenia 2020-05-26 02:03:59 -04:00
parent e4dd59bc50
commit 78907483cb
2 changed files with 4 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
satellite-bus/bytes-away/README.md
View File

@ -53,13 +53,10 @@ bypassed.
![KIT_TO_SendFlagPkt in Ghidra showing the global flag location](ghidra.png)
Inspecting the structure of KitToFlagPkt shows that the flag is located at offset 12 and is (up to)
200 bytes long.
![KitToFlagPkt structure in Ghidra](ghidra_structure.png)
We created a Ruby script in the COSMOS Script Runner to execute PEEK_MEM commands for each byte in
the flag range:
Inspecting the structure of `KitToFlagPkt` shows that the flag is located at offset 12 and is (up
to) 200 bytes long. We created a Ruby script in the COSMOS Script Runner to execute PEEK_MEM
commands for each byte in the flag range, based on the command COSMOS outputs to the console when
running the command manually in the GUI.
```ruby
12.upto(212) { |off|

BIN
satellite-bus/bytes-away/ghidra_structure.png
View File

Binary file not shown.
Side by Side

Before

Width:  |  Height:  |  Size: 45 KiB