PicoCTF - Static ain't always noise

Download all files, (static and ltdis.sh)

cat static

Provides an output that includes the flag itself. However, we will look into ltdis.sh to learn more about it.

cat ltdis.sh

Inside the program, we can see PHP code that we can use to our advantage.

else
	echo "Disassembly failed!"
	echo "Usage: ltdis.sh <program-file>"
	echo "Bye!"
fi

Use the following command to give permissions to the file.

chmod +x ltdis.sh

Then in order to run the program use.

./ltdis.sh static
Attempting disassembly of static ...
Disassembly successful! Available at: static.ltdis.x86_64.txt
Ripping strings from binary with file offsets...
Any strings found in static have been written to static.ltdis.strings.txt with file offset

cat static.ltdis.strings.txt

Finally, we can the see the flag.