Author:
pranav

Language:
C/C++

Upload:
6:16 AM 04/20/2021

Download

Platform
Windows

Difficulty:
3.5

Quality:
4.0

Arch:
x86

Description

Hello! This is an exploitation based crackme without any password check or algorithms. Your goal is one thing.. Find the success message in the code, and make it print it.. The success message is not obfuscated to help you find it.. Also there is inbuilt methods to print the message. Please completely read the readme. The if you solve it, upload a writeup in solutions tab. If any doubt, put it in comments. Please DON'T put solutions in comments.. password for all crackmes are crackmes.one. Passowrd for solution.rar will be updated later. C based crackme/Contact:PranavAppu007 at crackmes.one discord server --Experimental crackme--

• Comments
• Solutions

bus@cu on 11:19 PM 04/25/2021: patch is it allowed?

pranav on 1:47 AM 04/26/2021: It is an exploitation based crackme. So by default no patching is allowed. You have to look for and exploit possible vulnerabilities in the crackme. Also do string analysis or something to find the success message. read Readme.txt for more info.

pranav on 5:26 AM 04/29/2021: 9 days no progress, so here is the solution password: functioncallbyoverflow

monkeyDeniro on 4:12 AM 07/23/2021: I was able to crack this 100. I did it by overwriting the return address to the address to print the success msg. mov dword ptr ss:[esp],overflow_me.404050 call I also made sure to overwrite the next return address further down the stack to the original return address that would of executed the 'good byte' code. After this I decided to read the solution, the solution mentioned something about the check for '0xff', but i guess this wasnt needed for my method since I bypassed this check and went directly to the message. good crack me, nice and fun. ps. I was only able to write the opcode though python piping. Eg. python -c "print('11112222')" | Overflow_me.exe If there is a way to write the opcode in ascii straight into the stdin in the console, then please let me know, as I searched for ages to try to find a way but ended up just using piping.

You must me logged to submit a solution