AdminX's NeuroVault

Author:
AdminX

Language:
C/C++

Upload:
2026-05-12 17:52

Download

Platform:
Windows

Difficulty:
3.0

Quality:
5.7

Arch:
x86-64

Downloads:
419

Size:
10.70 KB

Writeups:
1

Comments:
7

Description

Find a serial that triggers the real success output. More information is inside the readme file in zip

Comments (7)
Writeups (1)

You must be logged in to post a comment

angridfbirds on 2026-05-13 09:51: [Click to reveal]

AdminX on 2026-05-13 11:30: @angridfbirds bravo man, now try my other NightMare 2.0, if you find this one easy.

SingleJingle11 on 2026-05-14 01:53: [Click to reveal]

internetenemy on 2026-05-14 14:27: [Click to reveal]

AdminX on 2026-05-15 05:49: @zm0d glad you like it :)

eadrick0 on 2026-05-16 21:57: NV-4E563031-VAULT

simplecrack on 2026-05-25 15:48: solved in 4 minutes: `NV-4E563031-VAULT` how to solve: imports: fgets fputs strcmp strlen strncmp IsDebuggerPresent NtQueryInformationProcess in strings we can see marker: VAULT input flow: prompt is printed with fputs serial is read with fgets program removes '\n' then converts input to uppercase format check: call strlen cmp rax, 0x11 ; length = 17 cmp byte ptr [rsi], 0x4e ; 'N' cmp byte ptr [rsi+1], 0x56 ; 'V' cmp byte ptr [rsi+2], 0x2d ; '-' cmp byte ptr [rsi+0xb], 0x2d ; '-' lea rcx, [rsi+0xc] lea rdx, [rip+...] ; "VAULT" call strcmp so serial format is: NV-XXXXXXXX-VAULT middle part: XXXXXXXX must be 8 hex chars allowed chars: 0-9 or A-F then these 8 hex chars are decoded into 4 bytes. VM opcodes: opcode 5 pushes one of the 4 input bytes onto the stack opcode 1 pushes an immediate value opcode 2 subtracts opcode 3 adds opcode 4 performs XOR opcode 6 compares two values opcode 7 performs AND opcode 8 finishes the check after decrypting the VM bytecode we get: 05 00 05 01 02 01 A4 06 05 02 05 03 03 01 01 06 07 05 00 01 04 04 01 E4 06 07 05 01 05 02 09 01 20 06 07 05 03 05 00 0B 01 E3 06 07 08 translated into conditions: b0 - b1 == 0xA4 b2 + b3 == 0x01 (b0 xor 0x04) == 0xE4 rol(b1, b2) == 0x20 b3 - b0 == 0xE3 solving these conditions gives the decoded 4 bytes: 4E 56 30 31 as ASCII: NV01 hex encoded: 4E563031 final serial: NV-4E563031-VAULT

Show all spoilers

You must be logged in to submit a writeup

Solution by zm0d on 2026-05-13 13:11:
was a lot of fun. good work there.

Download

crackmes.one

crackmes.one

AdminX's NeuroVault