Rating: 5.0

Binary accepts 42 bytes of shellcode which is split into chunks of 2 bytes separated by short jumps.

You need to decode a pointer to the RW buffer and then write "/bin/sh" to set up an execve syscall.

Requires a lot of optimiziation, see [original](https://ctf.harrisongreen.me/2019/hxpctf/splitcode/) for full solution.

Original writeup (https://ctf.harrisongreen.me/2019/hxpctf/splitcode/).