View previous topic :: View next topic |
Author |
Message |
Stylo Grandmaster Cheater Supreme Reputation: 3
Joined: 16 May 2007 Posts: 1073 Location: Israel
|
Posted: Sat Dec 11, 2010 5:03 am Post subject: CrackMe pl0x :D |
|
|
Well hi there.
this is some crackme i created a while ago
level is somewhere between easy ~ medium
well good luck
http://www.mediafire.com/?gnz7sq72dz54f7a
_________________
Stylo |
|
Back to top |
|
|
Deltron Z Expert Cheater Reputation: 1
Joined: 14 Jun 2009 Posts: 164
|
Posted: Sat Dec 11, 2010 7:23 am Post subject: |
|
|
Really? I love them too!!!
|
|
Back to top |
|
|
Stylo Grandmaster Cheater Supreme Reputation: 3
Joined: 16 May 2007 Posts: 1073 Location: Israel
|
|
Back to top |
|
|
atom0s Moderator Reputation: 199
Joined: 25 Jan 2006 Posts: 8518 Location: 127.0.0.1
|
Posted: Sun Dec 12, 2010 1:12 pm Post subject: |
|
|
Some inline ASM from the looks of it to pull certain information. Some indirect math to throw people off too I assume?
// Gets the PEB pointer.
Code: |
012910EC |. 64:A1 18000000 MOV EAX,DWORD PTR FS:[18]
012910F2 |. 8BD8 MOV EBX,EAX
012910F4 |. 83C3 2F ADD EBX,2F
012910F7 |. 90 NOP
012910F8 |. 43 INC EBX
012910F9 |. 8B03 MOV EAX,DWORD PTR DS:[EBX]
|
// Gets the debug flag from PEB. (JNZ for debug detected message.)
Code: |
012910FB |. 3E:8A40 02 MOV AL,BYTE PTR DS:[EAX+2]
012910FF |. 83E0 0F AND EAX,0F
01291102 |. 8985 D0FEFFFF MOV DWORD PTR SS:[EBP-130],EAX
01291108 |. FF8D D0FEFFFF DEC DWORD PTR SS:[EBP-130]
0129110E |. 75 45 JNZ SHORT CrackMe.01291155
|
Encoded password: fc@YJc@AHN\|X@]K
// Password check is just an xor so just xor it again to get the password:
Code: |
01161191 |> 3E:8A03 /MOV AL,BYTE PTR DS:[EBX]
01161194 |. 84C0 |TEST AL,AL
01161196 |. 74 12 |JE SHORT CrackMe.011611AA
01161198 |. 34 2F |XOR AL,2F
0116119A |. 3E:3A01 |CMP AL,BYTE PTR DS:[ECX]
0116119D |. 75 04 |JNZ SHORT CrackMe.011611A3
0116119F |. 43 |INC EBX
011611A0 |. 41 |INC ECX
011611A1 |.^EB EE \JMP SHORT CrackMe.01161191
|
Password: ILoveLongPasSword
_________________
- Retired. |
|
Back to top |
|
|
Stylo Grandmaster Cheater Supreme Reputation: 3
Joined: 16 May 2007 Posts: 1073 Location: Israel
|
|
Back to top |
|
|
Deltron Z Expert Cheater Reputation: 1
Joined: 14 Jun 2009 Posts: 164
|
Posted: Mon Dec 13, 2010 11:45 am Post subject: |
|
|
For start, make sure your CrackMe can't be self-keygenned, or at least make it a little more difficault to.
|
|
Back to top |
|
|
atom0s Moderator Reputation: 199
Joined: 25 Jan 2006 Posts: 8518 Location: 127.0.0.1
|
|
Back to top |
|
|
|