wintertia's writeups
Check my GitHub!
  • Welcome
  • My Setup
  • WRITEUPS 2025
    • ♾️RECURSION 2025
      • When Yh
    • 🌌Undutmaning25 CTF
      • beep
      • Rocketlauncher
    • ♠️ACECTF 2025
      • !Underflow
      • jumPIEng
      • Running Out of Time
    • 🧱BITS CTF 2025
      • Biscuits
      • BabyPWN
    • 🖥️NETCOMP CTF 2025
      • Pwn - Intro
  • Writeups 2024
    • ☝️Pointer Overflow CTF 2024
      • Exploit 300 - Empress of What
    • 🕵️‍♂️The Hacker Conclave v2
      • pwnc3
      • pwnc2
      • pwnc1
    • 🚀1337UP LIVE 2024
      • Floormat Mega Sale
      • Retro2Win
    • 🤴DTS TSA - Cyber Champion 2024
      • 101 - Pwn
    • 🟥TCP1P Playground 365
      • ret2win 4
      • ret2win 3
      • ret2win 2
      • ret2win
    • 🇦🇷MetaRed Argentina CERTUNLP 2024
      • flagshop
      • Warmup
      • Trust in my calculator
    • 👻SpookyCTF 2024
      • Phenominal-Photo
      • devil's-secret-stash
      • two-frames-one-champ
    • 🏹Huntress CTF 2024
      • Baby Buffer Overflow - 32 bit
Powered by GitBook
On this page
  1. WRITEUPS 2025
  2. ACECTF 2025

Running Out of Time

"Binary Exploitation"

Last updated 3 months ago

A mysterious program asks for a specific number, but the correct value changes every time you run it. Can you figure out how the number is generated and retrieve the hidden flag?

Analyze the binary, reverse-engineer the logic, and find a way to predict the correct input to trigger the win condition.

I couldn't really upload the file because it's a .exe LOL

Given a binary for Windows called "Running_Out_Of_Time.exe", we decided to decompile with Ghidra. Because there was no nc, it means that we definitely can just do static analysis.

image

In the main function it looked like a simple RNG prediction challenge, but it looked like it just goes to a function called p3xr9q_t1zz, so we looked on it.

So we were lazy to type all of the characters to decode the flag so we just opened DeepSeek:

Flag: ACECTF{71m3_570pp3d}

Screenshot 2025-02-27 165400
Screenshot 2025-02-27 165352
♠️