Rating:

The attached archive contains a huge memory dump *flagconverter.dmp* (1.1Gb).
The easiest thing to do is to run the following command implying that the flag has the format of ALLES{...}:

```$ strings flagconverter.dmp | grep ALLES```

The output gave us the flag:

![flagConverter1.png](https://raw.githubusercontent.com/eg-ctf/Chaos-Communication-Camp-2019/master/files/flagConverter1.png)

Original writeup (https://github.com/eg-ctf/Chaos-Communication-Camp-2019).