Godot
Godot is an open-source engine that stores assets and scripts in .pck package files.
In CTF challenges, the flags or validation logic are frequently found in the decompiled GDScript files.
- Extract resources:
gdsdecomp -p game.pck -d output/ - Inspect unpacked
res://directory - Decompile
.gdscripts to readable GDScript
| Tool | Purpose |
|---|---|
| gdsdecomp | Extracts and decompiles Godot .pck archives |
| Godot Engine | Used to test and rebuild extracted projects |
| GDRETools Suite | Toolkit for broader Godot resource analysis |
- Check
project.godotfor engine version (important for decompression). - Search
.gdscripts for function names likecheck_flag()orvalidate_input(). - Text-based configuration and JSON files inside the package often conceal encoded strings.
- You can rebuild extracted content in Godot for easier navigation.