crackmes.one

WhistleDev's NinthCircle

Author:
WhistleDev

Language:
Go

Upload:
2026-08-16 20:06

Platform:
Windows

Difficulty:
5.0

Quality:
4.0

Arch:
x86-64

Downloads:
28

Size:
1.42 MB

Writeups:
0

Comments:
1

Description

Goal: Reverse the validation routine and produce a working keygen that generates a valid serial for any operator ID. Instructions: Run `NinthCircle.exe`, enter an operator ID using 4-24 characters from A-Z, 0-9, `_`, or `-`, then enter a serial in XXXXXXXX-XXXXXXXX-XXXXXXXX-XXXXXXXX format. A correct serial prints ACCESS GRANTED :: VM KEY ACCEPTED. Dependencies: None. Standalone Windows x86-64 executable. The challenge uses a custom virtual machine, per-build randomized VM opcodes, encrypted VM bytecode/immediates, stripped and obfuscated Go build metadata, a small anti-debug layer, and an anti-trivial-patching success path. The hardened release is produced with the open-source Garble Go build obfuscator; the challenge does not use a commercial packer or runtime protector. It makes no network connections, uses no hardware identifiers, and performs no persistent or destructive actions.

Labels ?

Anti-debugging IsDebuggerPresent CheckRemoteDebuggerPresent String / data encryption XOR Self-modifying / runtime decrypt Crypto / hash algorithm Other / custom hash Code virtualization / VM Control-flow obfuscation State machine / dispatcher Anti-tamper / integrity Custom / generic obfuscation