"mod_version": "2.1.0", "author": "FrostyTeam", "flag": "CTFfrosty_mod_3ncrypt10n_k3y_md5_1s_n0t_s3cur3"

Output:

char* get_encryption_key() char *env_key = getenv("FROSTY_KEY"); if (env_key != NULL && strlen(env_key) == 32) return env_key; // Hardcoded fallback key (hex string) return "5f4dcc3b5aa765d61d8327deb882cf99";

In Ghidra, search for the string "FROSTY_KEY" → cross‑reference to a function get_encryption_key() .

Format:

from Crypto.Cipher import AES import binascii def decrypt_frosty_config(enc_file, key_hex): key = binascii.unhexlify(key_hex) with open(enc_file, 'rb') as f: iv = f.read(16) ciphertext = f.read()

cipher = AES.new(key, AES.MODE_CBC, iv) plaintext = cipher.decrypt(ciphertext) # Remove PKCS#7 padding pad_len = plaintext[-1] return plaintext[:-pad_len] key_hex = "5f4dcc3b5aa765d61d8327deb882cf99" decrypted = decrypt_frosty_config("frosty_config.bin", key_hex) print(decrypted.decode('utf-8'))

Decompiled pseudocode:

Frosty Mod Encryption Key Online

"mod_version": "2.1.0", "author": "FrostyTeam", "flag": "CTFfrosty_mod_3ncrypt10n_k3y_md5_1s_n0t_s3cur3"

Output:

char* get_encryption_key() char *env_key = getenv("FROSTY_KEY"); if (env_key != NULL && strlen(env_key) == 32) return env_key; // Hardcoded fallback key (hex string) return "5f4dcc3b5aa765d61d8327deb882cf99"; frosty mod encryption key

In Ghidra, search for the string "FROSTY_KEY" → cross‑reference to a function get_encryption_key() .

Format:

from Crypto.Cipher import AES import binascii def decrypt_frosty_config(enc_file, key_hex): key = binascii.unhexlify(key_hex) with open(enc_file, 'rb') as f: iv = f.read(16) ciphertext = f.read()

cipher = AES.new(key, AES.MODE_CBC, iv) plaintext = cipher.decrypt(ciphertext) # Remove PKCS#7 padding pad_len = plaintext[-1] return plaintext[:-pad_len] key_hex = "5f4dcc3b5aa765d61d8327deb882cf99" decrypted = decrypt_frosty_config("frosty_config.bin", key_hex) print(decrypted.decode('utf-8')) "mod_version": "2

Decompiled pseudocode: