Pushing the Limits of Lua Obfuscation

How weird can Lua obfuscation be?

Most obfuscation examples stay close to familiar syntax. This challenge pushes further, using obscure Lua-specific tactics that make the packed program difficult to read without changing what it does.

Recover the equation, not a remote answer

The challenge is not about guessing a password or waiting for a remote service. The intended solution is to study the packed file, recover the equation inside it, and use that equation to recover the hidden integer.

The client already has the clues

In an online run, a response payload would normally be sent to the client. For this offline version, that response is intentionally fixed and embedded, so the program needs no network traffic at all.

Offline by design

Run the challenge through Lune with the supplied packed file and token. No server, account, or network access is required, and other Lua runtimes are not directly supported.

The equation is the target

A successful run should exit cleanly without printing the answer. Recovering the value is the solver’s job: analyze the packed file, reconstruct the computation, and derive the integer yourself.

Try the challenge

Use Lune to run: lune run public.luau 0102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20 luawl-challenge-v1.2 Open the challenge on Crackmes.one →