-
Write-Up Author: bluebear [MOCTF]
-
Flag:MOCSCTF{Andr01d_RE_1s_3@sy}
z00m
- Use jadx to reverse apk file
- Review the java code, there are two page, the first page is for input the password, the second page will show the serect
- One way to resolve the challenge
- Find out the password 'N0n-Gue33@b1e-P@55w0rd' from FirstFragment.java
- Run the apk on Android Emulator, input the password on APP interface.
- Get the base64 serect.
- Another way to resolve the challenge
- Find the serect form Strings.xml directly.