Skip to content

Latest commit

 

History

History

Russian_Roulette

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Russian_Roulette

My PowerShell has been acting really weird!! It takes a few seconds to start up, and sometimes it just crashes my computer!?!?! :(

WARNING: Please examine this challenge inside of a virtual machine for your own security. Upon invocation there is a real possibility that your VM may crash.

NOTE: Archive password is russian_roulette

Solution

  1. Deobf pwsh manually...
  2. https://cyberchef.org/#recipe=From_Base64('A-Za-z0-9%2B/%3D',true,false)AES_Decrypt(%7B'option':'Base64','string':'/a1Y%2Bfspq/NwlcPwpaT3irY2hcEytktuH7LsY%2BNlLew%3D'%7D,%7B'option':'Base64','string':'9sXGmK4q9LdYFdOp4TSsQw%3D%3D'%7D,'CBC','Raw','Raw',%7B'option':'Hex','string':''%7D,%7B'option':'Hex','string':''%7D)&input=Uk5vOFRaNTZSditFeVpXNzNOb2NGT0lpTkZmTDQ1dFh3MjRVb2dHZEhrc3dlYS9XaG5OaENOd2pRbjFhV2pmdw

Flag

Flag: flag{4e4f266d44717ff3af8bd92d292b79ec}