An executable with a few interesting twists. I’ve combined static analysis in ghidra with dynamic analysis in pwndbg to explore an anti-debugging check and self-modifying code hidden in addresses not assigned to a segment. In the end, there’s also a tidbit of AES-CBC crypto to recover the flag.

Original writeup (https://nevesnunes.github.io/blog/2020/07/30/CTF-Writeup-CyBRICS-2020-Hide-And-Seek.html).