OpenAttackDefenseTools / tulip

Network analysis tool for Attack Defence CTF

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[feature request] match flag regex on alternate representations of subsets of payload

erdnaxe opened this issue · comments

As far as I am aware, Tulip is unable to detect a flag leaking in base64 format.

Maybe something could be done inside the assembler to detect valid base64 strings in the payload (regex?), decode then and then try to match the flag regex to this data.

The same applies for hexadecimal byte-strings.