holiday-hack-challenge-2023

SANS Holiday Hack Challenge

View on GitHub

game-cartridges-vol2 drawingdrawingdrawingdrawingdrawing

< Back Home

Objective

Find the second Gamegosling cartridge and beat the game

Conversations

Tinsel Upatree

Initial conversation:

After finding game cartridge:

After finding all three game cartridges:

Hints

Useful AI Prompts

Approach

Looking at the conversations, it appears there is more than one version of this game. By refreshing the play on this multiple times, I was able to capture two .gb files: game0.gb and game1.gb.

Once I successfully acquired both roms using developer tools -> network, I used Windows FC command to compare the two:

C:\>fc /B %USERPROFILE%\Documents\HolidayHackChallenge\vol2_game0_original.gb %USERPROFILE%\Documents\HolidayHackChallenge\vol2_game1_original.gb
Comparing files %USERPROFILE%\DOCUMENTS\HOLIDAYHACKCHALLENGE\vol2_game0_original.gb and %USERPROFILE%\DOCUMENTS\HOLIDAYHACKCHALLENGE\VOL2_GAME1_ORIGINAL.GB
0000014F: B3 86
00000593: 0B D2
00000594: 4B AC
00000595: 9A 3D
00000596: 23 2D
00016A84: 03 0B
00016AB8: 09 06
00017C80: 02 01
0001850E: 02 03
0001850F: 80 00
00018513: 0B 04
00018514: 80 00

I downloaded a couple of different emulators to play the games locally, and both games were similar but didn’t have a way of getting anywhere in the game. So, I took an approach of modifying one of the games by trial and error just changing the differing values between both versions and then playing the modified game until I noticed something different in the game.

After making the following changes to game1.gb, I came upon a new item in the main room:

Location old new
00016AB8: 06 09
00017C80: 01 02
0001850E: 03 02
0001850F: 00 80
00018513: 04 0B
00018514: 00 80

image

Once I hit the A button on the new item, I entered a room with a few more items:

image

When I went to the radio in the room and hit the A button on it, there was audio with what appeared to be morse code tones:

--. .-.. ----- .-. -.--

I had to listen to it a couple of times, but after noting down the tones and running them through an Online Decoder, I got the message:

GL0RY

That’s our answer - enter GL0RY into the challenge!

Resources

mGBA

Morse Decoder