# wannaGOwithme (Reverse)

We see a binary, which is probably written in GO, because of the question's name, running it only give us the following:

```
./wannaGOwithme 

luv u ^_^
```

Let's open it in Ghidra:

<figure><img src="https://1661111064-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FJjl8FRUecJdjJ4es1Iml%2Fuploads%2Fqp1uei3CIWitbHWdidZw%2Fimage.png?alt=media&#x26;token=89677208-e9b6-4658-8e11-c6f6c191a625" alt=""><figcaption><p>Functions in Ghidra</p></figcaption></figure>

Checking the functions, we see the main, and a function called "solve", which has an array called `DAT_00480d68` and first character is it `t` which can hint us towards the flag, so checking the array in the assembly view in Ghidra we see:

<figure><img src="https://1661111064-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FJjl8FRUecJdjJ4es1Iml%2Fuploads%2FjqfigQbpVGdNkr2imFvf%2Fimage.png?alt=media&#x26;token=31117cce-ad49-46b1-834a-8932fd622a6d" alt=""><figcaption><p>Showing the array</p></figcaption></figure>

We see the flag is stored there in hex, and being rendered, so we can just copy the whole thing (copy "byte string"), and put it in CyberChef to convert to ASCII and remove null bytes:

<figure><img src="https://1661111064-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FJjl8FRUecJdjJ4es1Iml%2Fuploads%2FLozJPUVcXYKmXhsysqKm%2Fimage.png?alt=media&#x26;token=7693626a-60d9-40e8-927c-ecbedc986dec" alt=""><figcaption><p>The flag</p></figcaption></figure>
