Author:
0xbabe

Language:
C/C++

Upload:
2023-12-04 10:42

Download

Platform:
Windows

Difficulty:
3.0

Quality:
3.0

Arch:
x86-64

Downloads:
3

Writeups:
0

Comments:
9

Description

As always, it doesn't have any anti debug checks. The code is running under virtual machine and not packed. What you have to do? - Find a password (EZ LVL) - Patch the program to accept any password (HARD LVL)

• Comments (9)
• Writeups (0)

You must be logged in to post a comment

dev0 on 2023-12-07 10:59: Opcode 3 is a NOP. Would you accept a NOP sled to the two bytecode instructions (Opcode 0 loading the strings) that loads to the two registers with the "Good password!" message and VM name? At that point the user would never even need to enter anything and the correct message would output.

0xbabe on 2023-12-07 15:26: There's no opcodes for NOP. The task is patch the program to accept any program, so your way is wrong.

ReverseLabs on 2023-12-09 01:39: Would it count as a patch if I just NOP ds:[00007FF74BD13420]: "Bad password!" the output is "Good password!" so it kinda works.

sporta778 on 2023-12-11 11:57: solution in studio!

sporta778 on 2023-12-11 15:42: it's easy in offset of file u need 0x449 patch byte to 0xc4 and programm will always show good password, but i do not understand what is correct password.. i do not understand how it compare to correct password....

sporta778 on 2023-12-11 16:04: mistake offset is 0x448

NopNopNop on 2023-12-19 13:32: Password 4099 or 0x1003 in hex.Instruction to patch is jne to jmp at RVA:0x14A0

blockslesson on 2024-01-09 19:11: 1 - the password is '4099' any pass path : in 0x147F change rdx to rcx

sporta778 on 2024-04-27 21:10: I send solution, i am too I'm in a hurry. Here present uniformity with VM

You must be logged in to submit a writeup