Cryptohorrific

Platform: HackTheBox | Category: Mobile | Difficulty: N/A | Author: D3v0o0Nu11 | Date: 2026-02-10

Description

Secure coding is the keystone of the application security!

Solution Approach

Core idea: Identify the weakness from source review or fingerprinting first. Iterate with incremental payloads instead of guessing.

Steps

1. First, unzip the .zip file given and jump to the extracted folder.

2. After checking every files, found one file that looks like have a base64 strings encoded inside. But actually it's not.

CHALLENGE.PLIST

1. Based on the file's extension, we can conclude that we given an IOS mobile application.
2. Let us decompile the Mach-O 64-bit x86_64 executable file.

HOPPER

Flag

(no flag captured)

Lessons Learned

1. Identify the weakness from source review or fingerprinting first.
2. Iterate with incremental payloads instead of guessing.
3. Reuse the same pattern in future engagements.