AdminX's NightMare 2.0

Author:
AdminX

Language:
Rust

Upload:
2026-05-12 03:59

Download

Platform:
Windows

Difficulty:
6.0

Quality:
6.0

Arch:
x86-64

Downloads:
49

Size:
175.74 KB

Writeups:
0

Comments:
6

Description

Instructions: 1. Put all 3 files in the same folder that are in .rar 2. Double click run.bat to run it 3. It will say Access denied. 4. Your job is to make it say the secret message instead, by reversing the .exe 5. You can use ANY tool you want, No bypass allowed otherwise you won't learn anything. 6. The message is encrypted inside secret.bin Good luck. You're gonna need it.😄

Comments (6)
Writeups (0)

You must be logged in to post a comment

angridfbirds on 2026-05-13 17:48: challenge broken, because decrypt path neeeded external secret.key.

AdminX on 2026-05-13 18:48: [Click to reveal]

SingleJingle11 on 2026-05-14 02:26: Not possible to solve, - 0x140002B44: reads secret.bin - 0x140002B94: calls 0x140004930 - 0x140004930: reads secret.key - 0x1400049DD: requires key length > 31 - 0x140004A1B: copies exactly 32 bytes from the loaded key buffer - 0x140002BF3: initializes AES-256-GCM with that 32-byte key - 0x140002D28: performs AES-GCM decrypt - 0x140002D2D: if success, plaintext pointer is in RAX, length in RDX - 0x140002DB9: failure path prints Access denied. So with only crackme.exe, run.bat, and this secret.bin, the plaintext is not recoverable. The missing 256-bit random key is not derivable from the available files you need a runtime where the original secret.key is present or already loaded.

AdminX on 2026-05-14 05:04: @SingleJingle11 The key was generated randomly at setup time and only ever existed on my machine. So yes, you're right: not solvable without it. That was the design. The challenge was never about reversing a keygen or serial check, it was about whether AES-256-GCM with a truly random external key is breakable given only the ciphertext. The answer is no. Solid analysis though, you got further than most.

AdminX on 2026-05-14 05:07: [Click to reveal]

angridfbirds on 2026-05-14 12:31: Runtime dumping would require the original secret.key to be present at runtime. Since it was never provided and only existed on your machine, there is nothing to dump from our copy. So the standalone archive is not solvable.

Show all spoilers

You must be logged in to submit a writeup

crackmes.one

crackmes.one

AdminX's NightMare 2.0