x0r19x91's S3cr3t V4ult

Author:
x0r19x91

Language:
C/C++

Upload:
2020-02-03 07:16

Download

Platform:
Windows

Difficulty:
4.0

Quality:
3.5

Arch:
x86

Downloads:
11

Size:
28.00 KB

Writeups:
1.0

Comments:
16

Description

Son Goku has developed a Vault. But while training with Vegeta, he forgot the password to open the vault. Please help him !

Comments (16)
Writeups (1.0)

You must be logged in to post a comment

denisbiris on 2020-02-08 10:29: [Click to reveal]

x0r19x91 on 2020-02-09 01:52: lol I wrote it myself... This is no virus

mrT4ntr4 on 2020-02-09 16:21: Hmm.. I doubt! @x0r19x91 can't u write a virus? lmao

x0r19x91 on 2020-02-10 15:18: I can

mr_sandman on 2020-02-14 21:48: What reverse software do y'all use?

Rimbalza on 2020-02-17 09:41: [Click to reveal]

jeffli6789 on 2020-02-18 03:28: I have investigated this sample and it does not seem to contain a virus. It has a very clever design and I think it is underrated as level 2. This design might be the reason for it being flagged by AV engines. However, I cannot make a promise on this -- I am just saying my reverse engineering told me it is a real crackme rather than a virus.

jeffli6789 on 2020-02-18 03:35: Hi mr_sandman, for static analysis I use Binary Ninja; for dynamic debugging I use x64dbg. And here is a list of tools, tutorials, etc. https://github.com/dsasmblr/game-hacking. Obviously, it is not only for game hacking.

x0r19x91 on 2020-02-22 02:36: I guess the difficulty might be 3

x0r19x91 on 2020-02-22 02:36: Did anyone solve it btw ?

JustMaaarc on 2020-02-22 23:49: I have no Idea how to unpack something when this happends: http://twixy.cf/i/5vsqx059.png since it only has a PE but the rest isn't there. If anyone can help me bypass that kind of Obfuscation let me know. PS: "Perfect would be if that's possible without having to use a different program. A De-obfuscator for that would be enough i think so"

Xor0 on 2020-02-23 05:32: JustMaaarc - This isn't a C# exe so dnSpy will do you no good. x0r19x91, this is some cool stuff. I'm not so good with it yet. It is self-debugging, nanomites protection from what i can see so far. I'm still looking into it further trying to learn. Thank you for nice challenge. Is level 10 for me right now :-)

jeffli6789 on 2020-02-23 08:29: @x0r19x91: I solved it and uploaded my submission yesterday. I like the design! thx!

x0r19x91 on 2020-02-23 12:15: @jeffli6789 nice solution! The validation algorithm is actually a deterministic finite automaton and buf2 is the transition function

irishyogashirt on 2020-04-04 20:12: I can't seem to figure this out, can't find many resources on solving self debugging crackmes :/

jeffli6789 on 2026-01-04 06:25: This crackme had been reviewed when it was originally approved and is likely safe. Crackmes often get flagged by antivirus software, EDR systems, or VirusTotal because they may use the same protection techniques found in malware (packers, anti-debugging, self-modifying code, etc.), or simply a false positive. This does NOT mean the crackme is actually malicious. The only way to confirm whether something is truly malware is to reverse engineer it and find proof of malicious code and/or malicious behavior. If you still believe this is actual malware, please report it to us via email: crackmesone@gmail.com. **We encourage everyone to run crackmes in a VM (virtual machine) and exercise caution when executing unknown binaries.** *Disclaimer: We do our best to review submissions, but mistakes can happen. The administrators and crackmes.one cannot be held liable for any damages or losses resulting from the use of files downloaded from this site. Always exercise caution and use a sandboxed environment.*

Show all spoilers

You must be logged in to submit a writeup

Solution by jeffli6789 on 2020-02-22 15:33:

Download