spnow · January 3, 2017 14:14
diff --git a/rev150.gdb b/rev150.gdb
 # BreizhCTF2015 Reverse me ! (150pts) Solution
 shell python -c "print'a'*42" > /tmp/in
 # cmp    dl, al
 b*0x080485c7
 command
 set $eax=$edx
 append value /tmp/flag.log $eax
 c
 end
 r < /tmp/in
 echo \n\nle flag est:\n
 cat /tmp/flag.log
 quit
diff --git a/rev200.gdb b/rev200.gdb
 # BreizhCTF2015 So many secrets (200pts) Solution
 # cmp    al, byte [ss:ebp+var_D]
 b*0x080484dc
 command
 set $eax=(*(void**)($ebp-0xd))
 set $eax=$eax & 0xff
 c
 end
 r $(python -c "print'setecastronomy'")
 quit
	# BreizhCTF2015 Reverse me ! (150pts) Solution
	shell python -c "print'a'*42" > /tmp/in
	# cmp dl, al
	b*0x080485c7
	command
	set $eax=$edx
	append value /tmp/flag.log $eax
	c
	end
	r < /tmp/in
	echo \n\nle flag est:\n
	cat /tmp/flag.log
	quit
	# BreizhCTF2015 So many secrets (200pts) Solution
	# cmp al, byte [ss:ebp+var_D]
	b*0x080484dc
	command
	set $eax=((void*)($ebp-0xd))
	set $eax=$eax & 0xff
	c
	end
	r $(python -c "print'setecastronomy'")
	quit