[{"_1":2,"_33":-5,"_34":-5},"loaderData",{"_3":4},"routes/challenges.$slug",{"_5":6},"challenge",{"_7":8,"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_30":31},"slug","free-nitro","name","Free Nitro","category","Malware Reverse Engineering","description","we have a suspected malware related to discord, can you get the discord webhook id? archive password: infected flag format: flag{DISCORD_WEBHOOK_ID}","descriptionHtml","we have a suspected malware related to discord, can you get the discord webhook id? \n \n archive password: infected flag format: \n \n flag{DISCORD_WEBHOOK_ID}","labDetails","Prerequisites & Requirements Python Internals: Fundamental understanding of Python syntax and compiled bytecode (.pyc). Packaging Formats: Familiarity with how Python scripts are bundled into Windows executables (PE files). Encoding Schemes: Proficiency in identifying and reversing Base64 data structures. What will you learn? Static Triage: Utilizing entropy and header analysis to identify packed executables. PyInstaller Extraction: Deconstructing bundled PE files to recover underlying bytecode artifacts. Bytecode Decompilation: Reconstructing high-level source code from compiled Python modules. Stealer Logic Analysis: Identifying data exfiltration vectors, specifically Discord webhook-based Command & Control (C2) mechanisms. Tools Identification: Detect-It-Easy (DIE) Extraction: Pyinstxtractor","labDetailsHtml","

Prerequisites & Requirements

Python Internals: Fundamental understanding of Python syntax and compiled bytecode (.pyc).
Packaging Formats: Familiarity with how Python scripts are bundled into Windows executables (PE files).
Encoding Schemes: Proficiency in identifying and reversing Base64 data structures.

What will you learn?

Static Triage: Utilizing entropy and header analysis to identify packed executables.
PyInstaller Extraction: Deconstructing bundled PE files to recover underlying bytecode artifacts.
Bytecode Decompilation: Reconstructing high-level source code from compiled Python modules.
Stealer Logic Analysis: Identifying data exfiltration vectors, specifically Discord webhook-based Command & Control (C2) mechanisms.

Tools

Identification: Detect-It-Easy (DIE)
Extraction: Pyinstxtractor

","level","Easy","tags",[25,26,27,28,29],"Static Analysis","Malware Analysis","Packer","Decompiler","C2 Communication","jobPositions",[32],"Malware Analyst","actionData","errors"]

Free Nitro

Overview

Job Positions

Tags