1
undefined8 main(void)
2

3
{
4
  int iVar1;
5
  int iVar2;
6
  size_t sVar3;
7
  ulong uVar4;
8
  byte abStack_1d8 [64];
9
  byte local_198 [140];
10
  uchar local_10c [4];
11
  char local_108 [64];
12
  undefined8 local_c8;
13
  undefined8 local_c0;
14
  undefined8 local_b8;
15
  undefined8 local_b0;
16
  undefined8 local_a8;
17
  undefined8 local_a0;
18
  undefined8 local_98;
19
  undefined8 local_90;
20
  undefined8 local_88;
21
  undefined8 local_80;
22
  undefined8 local_78;
23
  undefined8 local_70;
24
  undefined8 local_68;
25
  undefined8 local_60;
26
  undefined8 local_58;
27
  undefined8 local_50;
28
  undefined local_48;
29
  byte local_39;
30
  undefined4 local_38;
31
  undefined4 local_34;
32
  undefined4 local_30;
33
  undefined4 local_2c;
34
  undefined4 local_28;
35
  int local_24;
36
  int local_20;
37
  uint local_1c;
38

39
  local_28 = 1;
40
  local_c8 = 0x3831623563663536;
41
  local_c0 = 0x6136326162643834;
42
  local_b8 = 0x6131336436306631;
43
  local_b0 = 0x3038393366386239;
44
  local_a8 = 0x3233333765373236;
45
  local_a0 = 0x3366636264656132;
46
  local_98 = 0x3336303837326530;
47
  local_90 = 0x3663343936336666;
48
  local_88 = 0x3266363064333632;
49
  local_80 = 0x3461336162383733;
50
  local_78 = 0x3631326338363739;
51
  local_70 = 0x3636353636366630;
52
  local_68 = 0x3864383231613766;
53
  local_60 = 0x6339383266336633;
54
  local_58 = 0x6139393633393865;
55
  local_50 = 0x6135303736373462;
56
  local_48 = 0;
57
  printf("Please enter flag: ");
58
  __isoc99_scanf(&DAT_0010201c,local_108);
59
  iVar2 = strncmp("flag(STDIO2024_04{Tryharder-NoStringsMTFK)",local_108,0x14);
60
  if (iVar2 == 0) {
61
    puts("GG Boi !");
62
    local_2c = 0xf;
63
    local_30 = 0x378;
64
    local_34 = 0x11;
65
    calc(99,0x11,0xf);
66
    local_38 = 0xb3;
67
    snprintf((char *)local_10c,4,"%d",0xb3);
68
    SHA512(local_10c,3,local_198);
69
    local_20 = 0;
70
    for (local_1c = 0; local_1c < 0x40; local_1c = local_1c + 1) {
71
      iVar2 = *(char *)((long)&local_c8 + (long)local_20) % ' ' + 9;
72
      iVar1 = *(char *)((long)&local_c8 + (long)(local_20 + 1)) % ' ' + 9;
73
      abStack_1d8[(int)local_1c] =
74
           (char)iVar1 + (char)(iVar1 / 0x19) * -0x19 +
75
           ((char)iVar2 + (char)(iVar2 / 0x19) * -0x19) * '\x10';
76
      local_20 = local_20 + 2;
77
    }
78
    local_24 = 0;
79
    while( true ) {
80
      uVar4 = (ulong)local_24;
81
      sVar3 = strlen((char *)local_198);
82
      if (uVar4 <= sVar3) break;
83
      local_39 = abStack_1d8[local_24] ^ local_198[local_24];
84
      printf("Here\'s your flag: %c\n",(ulong)(uint)(int)(char)local_39);
85
      local_24 = local_24 + 1;
86
    }
87
  }
88
  return 0;
89
}

1
URL_PASSWORD = "https://upload.wikimedia.org/wikipedia/commons/thumb/0/05/Cat.png/307px-Cat.png"
2

3
import torch
4
import torchvision
5
from PIL import Image
6
import requests
7

8
class Decoder(torch.nn.Module):
9
    def __init__(self):
10
        super().__init__()
11
        self.training = False
12
        self.flag = torch.Tensor([
13
            0x2c, 0x2b, 0xff, 0x5e, 0xa0, 0xd4, 0x86, 0x98, 0x93,
14
            0x7a, 0x72, 0x16, 0xcc, 0x65, 0x76, 0x5e, 0x28, 0x4f,
15
            0x2e, 0x39, 0x78, 0xf6, 0x15, 0xda, 0x6e, 0x35, 0x6d,
16
            0xd6, 0x83, 0xdf, 0x2a, 0x67, 0xd5, 0x60, 0xeb, 0x9a
17
        ]).int()
18

19
    def forward(self, x):
20
        torch.manual_seed(x)
21
        x = torch.nn.Embedding(0o1750, 0o44, padding_idx=0)(x)
22
        x = torch.abs(255 * x).int() % 0xFF
23
        if x.sum() != 0o7617:
24
            return "Access denied - please provide correct password"
25
        return (
26
            "Access granted - here is the flag: "
27
            + f"STDIO2024_11{{{ ''.join([chr(c) for c in (x ^ self.flag).tolist()]) }}}"
28
        )
29

30
class ModernPassword(torch.nn.Module):
31
    def __init__(self):
32
        super().__init__()
33
        self.training = False
34
        self.backbone = torchvision.models.mobilenet_v2(weights=torchvision.models.MobileNet_V2_Weights.DEFAULT, progress=False)
35
        self.backbone.eval()
36
        self.decoder = Decoder()
37
        self.prep = torchvision.transforms.Compose([
38
            torchvision.transforms.Resize(256),
39
            torchvision.transforms.CenterCrop(224),
40
            torchvision.transforms.ToTensor(),
41
            torchvision.transforms.Normalize(mean=[0.485, 0.456, 0.406], std=[0.229, 0.224, 0.225]),
42
        ])
43

44
    def forward(self, url):
45
        try:
46
            img = Image.open(requests.get(url, stream=True, headers={'User-Agent': 'STDIO2024'}).raw)
47
            out = self.prep(img).unsqueeze(0)
48
            assert out.shape == (1,3,224,224)
49
        except:
50
            return "Access denied - error loading image from URL"
51
        return self.decoder(torch.argmax(self.backbone(out)))
52

53
model = ModernPassword()
54
print(model(URL_PASSWORD))

1
i = 0
2
while (True)
3
    result = Decoder()(torch.tensor(i))
4
    if "flag" in result:
5
        print(result)
6
        break
7
    i += 1