Adresses du noyau - Un peu d'aléa

Description

You receive RAM captures on three machines, and you are looking for the address of the first kernel instruction (using the _stext function) for each of them.

The flag is in the format FCSC{phys-virt} where:

• phys is the physical address of the first kernel instruction,
• virt is the virtual address of the first kernel instruction in the kernel text mapping.

All addresses are 64 bits, in hexadecimal format with a 0x prefix.

For example: FCSC{0x0123456789abcdef-0xfedcba9876543210}

Note: During FCSC, players were only given 10 attempts.