Breizh CTF 2015

rev150.gdb

# BreizhCTF2015 Reverse me ! (150pts) Solution
shell python -c "print'a'*42" > /tmp/in
# cmp    dl, al
b*0x080485c7
command
set $eax=$edx
append value /tmp/flag.log $eax
c
end
r < /tmp/in
echo \n\nle flag est:\n
cat /tmp/flag.log
quit

rev200.gdb

# BreizhCTF2015 So many secrets (200pts) Solution
# cmp    al, byte [ss:ebp+var_D]
b*0x080484dc
command
set $eax=(*(void**)($ebp-0xd))
set $eax=$eax & 0xff
c
end
r $(python -c "print'setecastronomy'")
quit