2023-10-23
for credit thorn got this first, then i got the deobfuscator python script working and output the flag
replacementdict = {
"grtoy": "a",
"kbhoesxh": "b",
"fxflckau": "c",
"pxesvvz": "d",
"aeawgno": "e",
"vdqvoyxss": "f",
"mljmage": "g",
"dtqahrd": "h",
"xrghxw": "i",
"rvrcd": "j",
"cxqemy": "k",
"djkxbuskp": "l",
"auuhztfa": "m",
"znvbyce": "n",
"exoypdqzg": "o",
"upogfi": "p",
"xulqq": "q",
"jxiczrrc": "r",
"qihgjzq": "s",
"ldawonn": "t",
"edefpb": "u",
"giknplvpv": "v",
"fbvra": "w",
"klerqtt": "x",
"puufauef": "y",
"lhuzd": "z",
"iwwna": "A",
"ilajhm": "B",
"hzsouxmm": "C",
"dqutqsgb": "D",
"jkkvc": "E",
"ioexkmd": "F",
"jmcpbpld": "G",
"udpmq": "H",
"rbijdi": "I",
"qzpkv": "J",
"ikedxdamk": "K",
"stcjm": "L",
"majmn": "M",
"utjscfnmq": "N",
"bpxroxnqg": "O",
"hrleb": "P",
"wzprdlp": "Q",
"fikmapqe": "R",
"lwuwiovpd": "S",
"lftuiqz": "T",
"vogsuisdx": "U",
"bsslmcgic": "V",
"oyyfmilg": "W",
"lhniwqwff": "X",
"nvfosjl": "Y",
"ajexk": "Z",
"flopojsse": "0",
"tqjmbt": "1",
"wpwjwymw": "2",
"wxkugd": "3",
"fxqik": "4",
"zygcfg": "5",
"remydays": "6",
"ztvra": "7",
"yqdie": "8",
"lzyqwgi": "9",
"koimdqluu": "{",
"tleci": "}",
"vgysuv": "?",
"xpjaysvii": ":",
"nvsna": ".",
"vrzatob": "=",
"orutn": ",",
"hmjhafbu": ""
}
def replace_all(text, dic):
for i, j in dic.items():
text = text.replace(f"%{i}%", j)
return text
with open("batchfuscation", "r") as file:
content = file.read()
new_content = replace_all(content, replacement_dict)
with open("deobfuscated.txt", "w") as file:
file.write(new_content)
flag{acad67e3d0b5bf31ac6639360db9d19a}
VirusTotal
VirusTotal
https://www.virustotal.com/gui/file-analysis/MzBmNzA5MjM0M2YwMTE0NGJmYzJhZGRlNDViOWViYTY6MTczMDQxMjAwOA==


