Skip to main content
CTF Support
Toggle Dark/Light/Auto mode Toggle Dark/Light/Auto mode Toggle Dark/Light/Auto mode Back to homepage

Godot

Introduction

Godot is an open-source engine that stores assets and scripts in .pck package files. In CTF challenges, the flags or validation logic are frequently found in the decompiled GDScript files.

Quick Reference

  • Extract resources: gdsdecomp -p game.pck -d output/
  • Inspect unpacked res:// directory
  • Decompile .gd scripts to readable GDScript

Tools

Tool Purpose
gdsdecomp Extracts and decompiles Godot .pck archives
Godot Engine Used to test and rebuild extracted projects
GDRETools Suite Toolkit for broader Godot resource analysis

Tips

  • Check project.godot for engine version (important for decompression).
  • Search .gd scripts for function names like check_flag() or validate_input().
  • Text-based configuration and JSON files inside the package often conceal encoded strings.
  • You can rebuild extracted content in Godot for easier navigation.