Author:
easlog

Language:
C/C++

Upload:
2021-06-07 14:49

Download

Platform:
Windows

Difficulty:
4.2

Quality:
4.2

Arch:
x86-64

Downloads:
4

Writeups:
0

Comments:
8

Description

made a couple of bugs in the code that will make it easier to crack. I will definitely improve it in the next versions gold - get password silver - just patching

• Comments (8)
• Writeups (0)

You must be logged in to post a comment

nguyenguyen753 on 2021-06-19 06:17: Hello, can I ask about all anti debugger checked, I don't know how they work, cause every time I step in those functions, the program terminated, I have to bypassed them by patching.

easlog on 2021-06-22 10:33: nguyenguyen753, you can write me on tg @str_va

robon on 2021-06-29 13:23: Is there anyone already solve ?

easlog on 2021-06-29 15:24: robon, several people have passed AntiDebug and CRC checks. But no one got to the original password

zx81 on 2021-07-01 21:59: I'm currently working on this I have bypassed the anti-debug tricks however the password is tricky. the problem is the password is a HASH and therefor cannot be reversed there are only a couple of options that I see to get the password, option A disassemble and understand the hash algorithm and look for a flaw or B use the hashing algorithm to build a hash table and or brute force the password. I believe I have found the comparison hash (its actually stored as a fixed 32 char value)

easlog on 2021-07-02 14:40: zx81, hi, this is not exactly a "hash algorithm", it can be called encryption with "some features". so, if you figure out how it works, you can get the password in a "good" form

lazy on 2021-08-05 18:56: I've managed to patch out the annoying bits and I've reversed most of the algorithm. I think I've reversed it completely for passwords up to an input length of 64. I've found multiple inputs whose "hash" match the first 16 characters of the 32 char "target hash". I know why it doesn't match the rest. I still have no idea about a straigth-forward (non-brute-force) way to solve it. Are there multiple passwords? Is there a human-readable password? How long are the passwords? Am I missing something? Thanks in advance!

lazy on 2021-08-11 20:17: "A hash function is any function that can be used to map data of arbitrary size to fixed-size values." (Wiki and many alike) So it kinda is then...

You must be logged in to submit a writeup