# Serial Experimental 00 -- Solution

## Overview

The challenge provides a split UART interface:

- TX (read): `1111`
- RX (write): `2222`

Goal: recover token and run `unlock <token>`.

## Steps

1. Open both channels:

```bash
nc <host> 1111
nc <host> 2222
```

2. Query diagnostics from RX:

```text
diag.uart
diag.eeprom
diag.order
```

3. Recover fragments:

- `frag_a_hex=4c41494e` -> `LAIN`
- `frag_b_xor_hex=4056415a525f` with `xor_key=0x13` -> `SERIAL`
- `frag_c_hex=3030` -> `00`

4. Build token:

`LAIN-SERIAL-00`

5. Unlock:

```text
unlock LAIN-SERIAL-00
```

6. Flag is returned on TX.