Reverse: Maze Runner
Flag: GITXIITBTL{M4z3_!$_n0t_FuNn}
Decompiling the code in IDA gives us this:
__int64 __fastcall main(int a1, char **a2, char **a3)
{
char v4[32]; // [rsp+10h] [rbp-30h] BYREF
Flag: GITXIITBTL{M4z3_!$_n0t_FuNn}
Decompiling the code in IDA gives us this:
__int64 __fastcall main(int a1, char **a2, char **a3)
{
char v4[32]; // [rsp+10h] [rbp-30h] BYREF
| 1 | import pwn |
| 2 | import re |
| 3 | |
| 4 | def get_rand(seed): |
| 5 | state = [0] * 31 |
| 6 | v3 = seed if seed != 0 else 1 |
| 7 | state[0] = v3 |
| 8 | for i in range(1, 31): |
| 9 | v9 = 16807 * (v3 % 127773) - 2836 * (v3 // 127773) |
| 10 | v3 = v9 + (0x7FFFFFFF if v9 < 0 else 0) |
Category: Web Exploitation
Flag: picoCTF{s3t_s3ss10n_3xp1rat10n5_efbf6d5f}
Proper session timeout controls are critical for securing user accounts. If a user logs in on a public or shared computer but doesn’t explicitly log out (instead simply closing the browser tab), and session expiration dates are misconfigured, the session may remain active indefinitely. This then allows an attacker using the same browser later to access the user’s account without needing credentials, exploiting the fact that sessions never expire and remain authenticated.
Status: living plan (exploration POC in progress)
Base branch: quantumstrand (now up to date with master)
Exploration branch: refactor/first-class-modular (fork for modular layout; 2–3 iterations expected)
Status: ready to implement
Baseline: PR #1337 (Iteration 1 modular split)
Form: one PR, ordered commits (not a multi-PR stack)
Branch context: quantumstrand / first-class layout+tags modules already landed
One analysis path, one ResultDocument, one default human and JSON output that includes deobfuscation and layout/tags. End the dual product (floss vs floss quantum).
Date: 2026-08-06
Branches: quantumstrand, master
Related PR: https://github.com/mandiant/flare-floss/pull/1347
Related issues:
This log records the issues I encountered while building the runtimeclass-debugger tool. The tool diagnoses the RuntimeClass path on a KubeEdge edge node. It answers four questions in dependency order. They are transport, bridge, CRI, and events. This document is the history behind the tool.
Every entry names three things:
I hereby claim:
To claim this, I am signing this object:
Source: FLOSS Migration Document 8_10_26.md (the single reference)
Status: Ready to implement
Target repo: mandiant/flare-floss, branches quantumstrand (primary) and master
All file paths below are relative to the flare-floss repo root. The target repo is not present in this working directory; the implementing agent must run inside a checkout of the repo.