Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
All challenges
In progress
Programming - Rootkit View Diffing
Mission
proc_ps.txt and proc_kernel.txt are generated from the FLAG injected at startup. Diff process views and ROT13-decode the hidden marker to recover the flag.
Hints
Hint 1 Show
Inspect proc_ps.txt and proc_kernel.txt and identify the target record
Hint 2 Show
diff process views and ROT13-decode the hidden marker
Hint 3 Show
Verify that the reconstructed value has FLAG{...} format