Author:
admin@offensivelearning.com

Language:
C/C++

Upload:
10:03 AM 08/06/2020

Download

Platform
Windows

Difficulty:
3.0

Quality:
3.0

Arch:
x86

Description

Find the password which is hidden "exceptionally" well inside the binary.

• Comments
• Solutions

ker2x on 6:01 AM 10/20/2020: the premise is obvious, now i have to learn more about "exceptional" reverse engineering :D

Mick on 8:58 PM 10/20/2020: Congratz! Some false positive passwords!,and some clue - length of password (14] Traps to debugger to bypass,then BP memoryAccess 0x0018B018 ... sha256 password's:3cbb8351c19d3eb5ce05e805ecfac9d6cf6415c99769e080dc8675f783bd2acf

Mick on 9:31 PM 10/20/2020: And there's an interesting function at 0x401130.

ker2x on 1:51 PM 10/21/2020: I really have trouble with exception. Mostly about knowing which function is called when. I'm suspecting there are multiple password and/or the "ho no!" message doesn't strictly mean that the password is wrong. But simply that "another" exception was raised. It's interesting to see how the program behave when the password is longer than 14.

admin@offensivelearning.com on 7:01 AM 10/27/2020: @Mick Yes indeed. That is the hash!

4epuxa on 7:55 PM 11/14/2020: I patched it but crackme outputs Congratz! then it closes. Is it normal?

4epuxa on 8:09 PM 11/16/2020: correct password is kb#fwj1P@bbfb2

shiiion on 7:34 PM 11/23/2020: Nice crackme, forced me to learn SEH.

ker2x on 5:16 PM 03/22/2021: i gave up on this one. then today with a new friend with attacked this one and finally solved it \o/ the SEH was messing up our brain but we did it some how... we were close to giving up because our brain reached melting point. then, with the last function that needed RE : "wait... isn't this just a concatenation ? " yay \o/

as06zx on 10:48 AM 03/08/2022: good for learning

You must me logged to submit a solution