articleAug 14, 2020
TWCTF 2016 ReverseBox — reverse engineering theme
High-level note on TWCTF 2016 ReverseBox: a 32-bit ELF that builds a time-seeded substitution table and prints hex transforms of the flag. Solve steps omitted.
TWCTF 2016 ReverseBox (high-level)
What it is. Tokyo Westerns CTF 2016 reverse-engineering challenge: a stripped 32-bit ELF named along the lines of reverse_box.
Challenge theme.
- Program builds an internal byte table (
init_table) influenced by a small random seed (order of 256 possibilities) - User argument bytes index into that table; output is printed as hex
- Flag format hint in the contest (
TWCTF…) constrains the search space for recovering the intended input
Technique class (concepts only). Table-based encoding / lightweight obfuscation with a brute-forceable seed — classic RE, not a remote exploit against a service.
Impact. Contest flag recovery only.
Lessons.
- Small keyspaces (one-byte seeds) make “random” tables enumerable
- Known plaintext prefixes (flag formats) are powerful constraints in RE challenges
- For real cryptography, avoid toy home-grown encodings; use vetted libraries
Solve steps and PoC omitted.