profdracula on 2020-11-17 14:16:
There is a bug in the binary...It will accept even a single character from magic-string as valid key (e.g. W)
profdracula on 2020-11-17 14:38:
Though keygen is not needed but I think this was the intended solution:
https://paste.ubuntu.com/p/Jn5TXb68dW/
ghsi10 on 2020-11-25 18:09:
its not good to use strcp -- if the password is only 1 char (or even null) it will pass
y33t on 2021-01-02 22:14:
I think dracula is right that their code didn't reflect what they expected the challenge to be, but their link doesn't completely solve the intended challenge and will only work in certain cases. There is an additional component in the compare() function that wasn't taken into account in their script. Technically, only the first letter of the generated key is needed, but the intended key is generated with this c program: https://pastebin.com/vB5EWU16
tynkute on 2021-01-07 10:12:
yes, sorry, I noticed this little error too late.
jimsktsmith on 2021-11-17 11:49:
[Click to reveal]wtf
key :Wait, your name isroot
nice key =))