Luau CTF

Welcome to the Luau CTF challenge! This repository contains the necessary files to participate.

Challenge Overview

The objective of this challenge is to open notepad.exe through the help of the unsafe.loadbytecode function.

Luau fundamentals

L - Lua state
A, B, C, D, E - Registers TValue - Wrapper for all Lua values
TString - Immutable objects used for Lua strings
L->namecall - Lua state field that is a TString pointer, used when a userdata has a __namecall method

Instructions

1. Clone the repository.
2. Build the LuauCTF project.
3. Run Luau scripts by doing LuauCTF.exe <filename>.

References

Luau Deserializer
Luau Interpreter
lstate.h
L->namecall
lobject.h
Closure
C closure function pointer
lbaselib.cpp