LONDON3131's CrackMes 1.0

Author:
LONDON3131

Language:
C/C++

Upload:
2022-05-04 14:56

Download

Platform:
Windows

Difficulty:
3.3

Quality:
4.5

Arch:
x86

Downloads:
29

Size:
20.00 KB

Writeups:
2

Comments:
13

Description

It is forbidden to patch (unless anti debugging) You need to get the password, Good luck to everyone!

Comments (13)
Writeups (2)

You must be logged in to post a comment

Gnaar on 2022-05-11 15:52: [Click to reveal]

JMac2 on 2022-05-11 22:59: Gnaar are you going to post a solution ? I am learning a bit about anti-debugging.

rrenamed on 2022-05-13 08:29: Well the easiest way is to do string scan on Process Hacker

JMac2 on 2022-05-13 11:05: Did the Process Hacker see the earlier string within the code. helloclar245..... not a password but in there all the same.

rrenamed on 2022-05-13 14:43: When it asks you for password just check memory strings that are at least 46 chars.

dbuser on 2022-05-18 08:08: Oh, my God, the answers keep appearing again during the debugging process, and I underestimated the length of password. It makes Ben look very simple. It becomes very complex. Oh, N0, consolidate the foundation and analyze the basic process of the program. It is divided into three judgments if ( !(unsigned __int8)sub_402370(v43, Block) ) { cout

dbuser on 2022-05-18 08:10: if ( !(unsigned __int8)sub_402370(v43, Block) ) cout

Sidd_Tim on 2022-05-21 12:35: [Click to reveal]

JMac2 on 2022-05-22 02:14: Hi, Thank you for the idea and I will go back and have a look at the xmm registers in x32dbg, I was using Radare2 which does not seem to show those registers, well I have not found them yet. But I did solve it, and submitted a solution, but obviously not approved, maybe the patching of the anti-debugging which author said was ok, who knows. Its all good.

S3TYB_GNI3SREV3R on 2022-05-28 01:51: checkout the solution here: https://www.youtube.com/watch?v=wr44Mpotk2c

Vertissoo on 2022-07-02 12:54: [Click to reveal]

1337ReverseEngineer on 2023-01-12 17:35: Very easy crackme. You can bypass every anti debug measure by nopping the first function call in the main function. Then just step through to comparison and you will see that the password is in clear text.

x811r on 2023-02-01 12:50: Anti debugging isn't that hard

Show all spoilers

You must be logged in to submit a writeup

Solution by JMac2 on 2022-05-12 13:18:
I finally got past the anti-debugging.

Download

Solution by mstik13 on 2022-05-22 08:26:
Interesting CTF Thanks, Tools Used: 1.Ghidra 2.x32dbg 3.Reclass

Download

crackmes.one

crackmes.one

LONDON3131's CrackMes 1.0