Sone-096 Jav -

after decoding the constant, performed with a constant‑time routine to avoid timing attacks (irrelevant for a CTF, but a nice touch).

If the challenge used a more complex obfuscator (e.g., ProGuard) the same workflow applies – decompile, locate constants, and unwind transformations. sone-096 jav

public class Util // Constant‑time string comparison to avoid timing leaks public static boolean constantTimeEquals(String a, String b) if (a == null after decoding the constant