View previous topic :: View next topic |
Author |
Message |
CrAsH OVeRiDE Grandmaster Cheater Supreme Reputation: 0
Joined: 23 Oct 2007 Posts: 1049 Location: Milky Way
|
Posted: Sun Feb 03, 2008 3:22 pm Post subject: My Fisrt Crack Me |
|
|
OK here is my first crack me I made it in C++.
Ok this crack me has 2 objectives the first and most simple is get both passwords. The last objective is make to crack that makes any password correct.
Download
http://www.datafilehost.com/download.php?file=10fed682
_________________
馬鹿は死ななきゃ治らな
|
|
Back to top |
|
|
hcavolsdsadgadsg I'm a spammer Reputation: 26
Joined: 11 Jun 2007 Posts: 5801
|
Posted: Sun Feb 03, 2008 3:38 pm Post subject: |
|
|
Doesn't run
|
|
Back to top |
|
|
CrAsH OVeRiDE Grandmaster Cheater Supreme Reputation: 0
Joined: 23 Oct 2007 Posts: 1049 Location: Milky Way
|
Posted: Sun Feb 03, 2008 3:45 pm Post subject: |
|
|
slovach wrote: | Doesn't run |
Umm it runs just fine for me whats it do for your?
_________________
馬鹿は死ななきゃ治らな
|
|
Back to top |
|
|
Flyte Peanuts!!!! Reputation: 6
Joined: 19 Apr 2006 Posts: 1887 Location: Canada
|
Posted: Sun Feb 03, 2008 4:02 pm Post subject: |
|
|
Don't run this, it imports ExitWindowsEx() (used to shut down the computer).
There are various other incriminating APIs used by this, I didn't go in depth however, so they may just be apart of the crackme, like winsock crackmes.
Run with caution.
Edit: On further inspection, this program also adds itself to the auto startup list. Sounds malicious.
|
|
Back to top |
|
|
appalsap Moderator Reputation: 0
Joined: 27 Apr 2006 Posts: 6753 Location: Pakistan
|
Posted: Sun Feb 03, 2008 4:15 pm Post subject: |
|
|
Looks like some sort of packer, it extracts the real program [password.exe] to a temporary directory and runs it (will fail if you don't have the MSVC 2008 runtime installed).
Here's password.exe
_________________
|
|
Back to top |
|
|
CrAsH OVeRiDE Grandmaster Cheater Supreme Reputation: 0
Joined: 23 Oct 2007 Posts: 1049 Location: Milky Way
|
Posted: Sun Feb 03, 2008 4:46 pm Post subject: |
|
|
Flyte wrote: | Don't run this, it imports ExitWindowsEx() (used to shut down the computer).
There are various other incriminating APIs used by this, I didn't go in depth however, so they may just be apart of the crackme, like winsock crackmes.
Run with caution.
Edit: On further inspection, this program also adds itself to the auto startup list. Sounds malicious. |
Its not malicious at all I swear. Also getting the exe out of the packed files was part of it.
_________________
馬鹿は死ななきゃ治らな
|
|
Back to top |
|
|
zart Master Cheater Reputation: 0
Joined: 20 Aug 2007 Posts: 351 Location: russia
|
Posted: Sun Feb 03, 2008 10:02 pm Post subject: |
|
|
Just looking at the dead listing it looks like;
h3098ghdsn9834f
p98rewwghm09w3h
should work fine, though I can't test on this box without reinstalling my WINE.
_________________
0x7A 0x61 0x72 0x74
TEAM RESURRECTiON |
|
Back to top |
|
|
CrAsH OVeRiDE Grandmaster Cheater Supreme Reputation: 0
Joined: 23 Oct 2007 Posts: 1049 Location: Milky Way
|
Posted: Sun Feb 03, 2008 10:18 pm Post subject: |
|
|
zart wrote: | Just looking at the dead listing it looks like;
h3098ghdsn9834f
p98rewwghm09w3h
should work fine, though I can't test on this box without reinstalling my WINE. |
Yup you got one half the really easy part but they second part is to make a crack that makes any password correct.
_________________
馬鹿は死ななきゃ治らな
|
|
Back to top |
|
|
HolyBlah Master Cheater Reputation: 2
Joined: 24 Aug 2007 Posts: 446
|
Posted: Mon Feb 04, 2008 8:23 am Post subject: |
|
|
CrAsH OVeRiDE wrote: | zart wrote: | Just looking at the dead listing it looks like;
h3098ghdsn9834f
p98rewwghm09w3h
should work fine, though I can't test on this box without reinstalling my WINE. |
Yup you got one half the really easy part but they second part is to make a crack that makes any password correct. | This is the easy on.
All right except right one:
Quote: | First password: Code: | 004010E4 --> nop or ZF |
Btw, next time dont put your passwords in strings.
Secound password: Code: | 00401133 --> nop or ZF
00401146 --> jz or ZF |
Last check: Code: | 004011CF --> nop or ZF
004011E2 --> jz or ZF |
|
Unlimited tries:
|
|
Back to top |
|
|
CrAsH OVeRiDE Grandmaster Cheater Supreme Reputation: 0
Joined: 23 Oct 2007 Posts: 1049 Location: Milky Way
|
Posted: Mon Feb 04, 2008 7:58 pm Post subject: |
|
|
HolyBlah wrote: | CrAsH OVeRiDE wrote: | zart wrote: | Just looking at the dead listing it looks like;
h3098ghdsn9834f
p98rewwghm09w3h
should work fine, though I can't test on this box without reinstalling my WINE. |
Yup you got one half the really easy part but they second part is to make a crack that makes any password correct. | This is the easy on.
All right except right one:
Quote: | First password: Code: | 004010E4 --> nop or ZF |
Btw, next time dont put your passwords in strings.
Secound password: Code: | 00401133 --> nop or ZF
00401146 --> jz or ZF |
Last check: Code: | 004011CF --> nop or ZF
004011E2 --> jz or ZF |
|
Unlimited tries: |
You got it i know it wasn't the most difficult.
_________________
馬鹿は死ななきゃ治らな
|
|
Back to top |
|
|
Symbol I'm a spammer Reputation: 0
Joined: 18 Apr 2007 Posts: 5094 Location: Israel.
|
Posted: Tue Feb 05, 2008 3:54 am Post subject: |
|
|
Its a crack me, not reverse me.
|
|
Back to top |
|
|
|