HTB
The first thing I did was to open up Ghidra and decompile the binary then look around. I usually start by looking at the main function and that's what I did here. I noticed something a little odd, there was a function called invalidInstructionException. I wanted to look
HTB
I start by looking at the file. file auth | tr "," "\n" I then opened it up in ghidra and looked at the functions. The functions where obfuscated however, I was able to find what appears to be the main function. Note that I did rename the
HTB
As I learn about reverse engineering and hacking, I find myself repeating certain steps. When working on the network, I start with Nmap and when reverse engineering I start with file. file baby | tr "," "\n" The next thing I did was execute the file. $ ./baby Insert