HackBlue

Labs / Decoding artifacts

A hex string piped into a shell

A post-install script contains a long hex string fed to xxd and then to sh. Decode it without running it, and find the domain and the shell it pipes into.

  • Terminal mission
  • Beginner
  • 2 objectives
  • 0 of 2 solved

Briefing

A developer pulled a package from an unofficial mirror. Its install.sh has one line that nobody can read at a glance.

xxd -r -p turns plain hex back into bytes. Decode it and print it; never pipe it into a shell to find out.

analyst@ir-workstation

ir-workstation · Decoding artifacts

Type help for the command list and objectives for your tasks. Everything runs in this browser.

Up and down arrows walk your history. Ctrl+L clears the screen. Try help, ls, and objectives.