GateX
Late-90s IRC TUI that re-keys the Fortinet Hunter Nuitka gate. Static unpack, XOR unmask, Docker cage. The ELF never runs on the host.
- Name
- GateX
- Repo
- https://github.com/abraxas/GateX
- Language
- Python
- Related
- Hunting the Fortinet Hunter 0-Day · Phase 2
- Released
- 2026-09-01
- Tags
- nuitka, argon2, tui, python, ctf
I wrote GateX so I could open the second door of Hunting the Fortinet Hunter 0-Day without chmod +x on the workstation. The payload is a stripped Nuitka onefile from YogSotho's Fortinet Hunter 2026 CTF. Untrusted, malware-shaped, and not mine to run on the host. GateX unpacks it statically, XOR-unmasks the scrambled Argon2id verifier, rewrites the gate blobs so FH_PASS=gatex satisfies the original checks on a local copy, and only then execs the inner ELF inside a locked-down Docker cage.
This does not recover the author's passphrase. Argon2id is doing its job. The zip is not in the repo. The exploits are not in the ciphertext.
Python 3.11+, Textual TUI, Docker with linux/amd64, net none, caps dropped, uid 65532. Clone from github.com/abraxas/GateX. Built for the Phase 2 write-up. CTF the author permitted. Do not point it at systems you do not own.