| View previous topic :: View next topic | 
	
	
		| Author | Message | 
	
		| CrAsH OVeRiDE Grandmaster Cheater Supreme
 
  Reputation: 0 
 Joined: 23 Oct 2007
 Posts: 1049
 Location: Milky Way
 
 | 
			
				|  Posted: Sun Feb 03, 2008 3:22 pm    Post subject: My Fisrt Crack Me |   |  
				| 
 |  
				| OK here is my first crack me I made it in C++. Ok this crack me has 2 objectives the first and most simple is get both passwords. The last objective is make to crack that makes any password correct.
 
 Download
 http://www.datafilehost.com/download.php?file=10fed682
 
 
   _________________
 
   馬鹿は死ななきゃ治らな
 
 |  | 
	
		| Back to top |  | 
	
		|  | 
	
		| hcavolsdsadgadsg I'm a spammer
 
 ![]() Reputation: 26 
 Joined: 11 Jun 2007
 Posts: 5801
 
 
 | 
			
				|  Posted: Sun Feb 03, 2008 3:38 pm    Post subject: |   |  
				| 
 |  
				| Doesn't run |  | 
	
		| Back to top |  | 
	
		|  | 
	
		| CrAsH OVeRiDE Grandmaster Cheater Supreme
 
  Reputation: 0 
 Joined: 23 Oct 2007
 Posts: 1049
 Location: Milky Way
 
 | 
			
				|  Posted: Sun Feb 03, 2008 3:45 pm    Post subject: |   |  
				| 
 |  
				|  	  | slovach wrote: |  	  | Doesn't run | 
 
 Umm it runs just fine for me whats it do for your?
 _________________
 
   馬鹿は死ななきゃ治らな
 
 |  | 
	
		| Back to top |  | 
	
		|  | 
	
		| Flyte Peanuts!!!!
 
  Reputation: 6 
 Joined: 19 Apr 2006
 Posts: 1887
 Location: Canada
 
 | 
			
				|  Posted: Sun Feb 03, 2008 4:02 pm    Post subject: |   |  
				| 
 |  
				| Don't run this, it imports ExitWindowsEx() (used to shut down the computer). 
 There are various other incriminating APIs used by this, I didn't go in depth however, so they may just be apart of the crackme, like winsock crackmes.
 
 Run with caution.
 
 Edit: On further inspection, this program also adds itself to the auto startup list. Sounds malicious.
 |  | 
	
		| Back to top |  | 
	
		|  | 
	
		| appalsap Moderator
 
  Reputation: 0 
 Joined: 27 Apr 2006
 Posts: 6753
 Location: Pakistan
 
 | 
			
				|  Posted: Sun Feb 03, 2008 4:15 pm    Post subject: |   |  
				| 
 |  
				| Looks like some sort of packer, it extracts the real program [password.exe] to a temporary directory and runs it (will fail if you don't have the MSVC 2008 runtime installed). 
 Here's password.exe
 _________________
 
 |  | 
	
		| Back to top |  | 
	
		|  | 
	
		| CrAsH OVeRiDE Grandmaster Cheater Supreme
 
  Reputation: 0 
 Joined: 23 Oct 2007
 Posts: 1049
 Location: Milky Way
 
 | 
			
				|  Posted: Sun Feb 03, 2008 4:46 pm    Post subject: |   |  
				| 
 |  
				|  	  | Flyte wrote: |  	  | Don't run this, it imports ExitWindowsEx() (used to shut down the computer). 
 There are various other incriminating APIs used by this, I didn't go in depth however, so they may just be apart of the crackme, like winsock crackmes.
 
 Run with caution.
 
 Edit: On further inspection, this program also adds itself to the auto startup list. Sounds malicious.
 | 
 
 Its not malicious at all I swear. Also getting the exe out of the packed files was part of it.
 _________________
 
   馬鹿は死ななきゃ治らな
 
 |  | 
	
		| Back to top |  | 
	
		|  | 
	
		| zart Master Cheater
 
  Reputation: 0 
 Joined: 20 Aug 2007
 Posts: 351
 Location: russia
 
 | 
			
				|  Posted: Sun Feb 03, 2008 10:02 pm    Post subject: |   |  
				| 
 |  
				| Just looking at the dead listing it looks like; 
 h3098ghdsn9834f
 p98rewwghm09w3h
 
 should work fine, though I can't test on this box without reinstalling my WINE.
 _________________
 
 0x7A 0x61 0x72 0x74
 TEAM RESURRECTiON
 |  | 
	
		| Back to top |  | 
	
		|  | 
	
		| CrAsH OVeRiDE Grandmaster Cheater Supreme
 
  Reputation: 0 
 Joined: 23 Oct 2007
 Posts: 1049
 Location: Milky Way
 
 | 
			
				|  Posted: Sun Feb 03, 2008 10:18 pm    Post subject: |   |  
				| 
 |  
				|  	  | zart wrote: |  	  | Just looking at the dead listing it looks like; 
 h3098ghdsn9834f
 p98rewwghm09w3h
 
 should work fine, though I can't test on this box without reinstalling my WINE.
 | 
 
 Yup you got one half the really easy part but they second part is to make a crack that makes any  password correct.
 _________________
 
   馬鹿は死ななきゃ治らな
 
 |  | 
	
		| Back to top |  | 
	
		|  | 
	
		| HolyBlah Master Cheater
 
 ![]() Reputation: 2 
 Joined: 24 Aug 2007
 Posts: 446
 
 
 | 
			
				|  Posted: Mon Feb 04, 2008 8:23 am    Post subject: |   |  
				| 
 |  
				| This is the easy on. 	  | CrAsH OVeRiDE wrote: |  	  |  	  | zart wrote: |  	  | Just looking at the dead listing it looks like; 
 h3098ghdsn9834f
 p98rewwghm09w3h
 
 should work fine, though I can't test on this box without reinstalling my WINE.
 | 
 
 Yup you got one half the really easy part but they second part is to make a crack that makes any  password correct.
 | 
 
 All right except right one:
 
  	  | Quote: |  	  | First password:  	  | Code: |  	  | 004010E4 --> nop or ZF | 
 
 
 Btw, next time dont put your passwords in strings.
 
 Secound password:
  	  | Code: |  	  | 00401133 --> nop or ZF 00401146 --> jz or ZF
 | 
 
 Last check:
  	  | Code: |  	  | 004011CF --> nop or ZF 004011E2 --> jz or ZF
 | 
 | 
 
 Unlimited tries:
 |  | 
	
		| Back to top |  | 
	
		|  | 
	
		| CrAsH OVeRiDE Grandmaster Cheater Supreme
 
  Reputation: 0 
 Joined: 23 Oct 2007
 Posts: 1049
 Location: Milky Way
 
 | 
			
				|  Posted: Mon Feb 04, 2008 7:58 pm    Post subject: |   |  
				| 
 |  
				|  	  | HolyBlah wrote: |  	  | This is the easy on. 	  | CrAsH OVeRiDE wrote: |  	  |  	  | zart wrote: |  	  | Just looking at the dead listing it looks like; 
 h3098ghdsn9834f
 p98rewwghm09w3h
 
 should work fine, though I can't test on this box without reinstalling my WINE.
 | 
 
 Yup you got one half the really easy part but they second part is to make a crack that makes any  password correct.
 | 
 
 All right except right one:
 
  	  | Quote: |  	  | First password:  	  | Code: |  	  | 004010E4 --> nop or ZF | 
 
 
 Btw, next time dont put your passwords in strings.
 
 Secound password:
  	  | Code: |  	  | 00401133 --> nop or ZF 00401146 --> jz or ZF
 | 
 
 Last check:
  	  | Code: |  	  | 004011CF --> nop or ZF 004011E2 --> jz or ZF
 | 
 | 
 
 Unlimited tries:
 | 
 
 You got it i know it wasn't the most difficult.
 _________________
 
   馬鹿は死ななきゃ治らな
 
 |  | 
	
		| Back to top |  | 
	
		|  | 
	
		| Symbol I'm a spammer
 
 ![]() Reputation: 0 
 Joined: 18 Apr 2007
 Posts: 5094
 Location: Israel.
 
 | 
			
				|  Posted: Tue Feb 05, 2008 3:54 am    Post subject: |   |  
				| 
 |  
				| Its a crack me, not reverse me.   |  | 
	
		| Back to top |  | 
	
		|  | 
	
		|  |