[THUGS(red)]

The Salt Crown

The whole challenge is layered defence-in-depth: a custom encrypted PCK, Godot's own per-file encryption, a custom PE packer around the extension, runtime string obfuscation, anti-debug, and finally an AES-GCM–encrypted flag whose key is derived from the solved game state.

CyberApocalypse2026-GamePwn-The_Salt_Crown.pdf 140 KiB

PDF not displaying? Download it instead.

Something wrong with this page?

Wrong details, a stolen writeup, or something that should not be published here — tell a moderator. This does not go to the author.