Hackemon 2.0 Writeup
Missingno's Memory Dump
Solution Write-up
#Verification Steps:
-
Run
file missingno.bin-> returns unknown data block due to zeroed-out magic bytes. -
Open in a hex editor (CyberChef, xxd, or Ghex) and identify the secondary chunks matching standard PNG (
IHDR). -
Repair the first 4 bytes to
89 50 4E 47. -
The image now opens to show a visual image, but looking at the raw trailing strings of the file (via
strings missingno.binor scrolling to the bottom of a hex editor) reveals an obfuscated ASCII string: aGFja2Vtb257bTFzczFuZ24wX2g0eF9mMHVuZH0= -
Recognize that the trailing character distribution indicates Base64 encoding. Decode the string to reveal the final flag:
Command Line (Linux): echo "aGFja2Vtb257bTFzczFuZ24wX2g0eF9mMHVuZH0=" | base64 -d
PowerShell: [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String("aGFja2Vtb257bTFzczFuZ24wX2g0eF9mMHVuZH0="))
Flag: hackemon{m1ss1ngn0_h4x_f0und}
