| Mini LLM Sentinel |
DeepDominance |
Bypassed the anti-debug sentinel, solved the password's structural checks with Z3, then reconstructed the embedded 6-8-1 neural network from .rdata to confirm AI-99|~?0=PM;g6! triggers ACCESS GRANTED. |
2026-10-08 12:25 |
View |
| Wheredakey |
acheylate |
|
2026-10-08 09:39 |
View |
| thefirsttest |
Sandwichease |
Solution how to do thefirsttest by JoeJoeJoe |
2026-10-08 07:23 |
View |
| Password Check With State Machine |
petik |
state-machine-solve |
2026-10-08 04:26 |
View |
| reaper maze |
brijeshzzzz |
When I first opened this crackme, the first thing I noticed was that the There was no obvious: strcmp(input, "some_password") program did not appear to contain a normal password comparison |
2026-10-07 18:10 |
View |
| reaper maze |
Sandwichease |
|
2026-10-07 17:48 |
View |
| Wheredakey |
Shadow@41 |
I solved this problem with the help of GDB |
2026-10-07 04:08 |
View |
| KeygenMe |
HunterInPlainText |
Created a keygenerator in python with logic based on Ghidra generated C-code. |
2026-10-06 01:42 |
View |
| Dead Terminal |
hugoway |
Reverse the operation using a C program |
2026-10-06 01:25 |
View |
| branchless branching |
acheylate |
banchless: keygen Writeup |
2026-10-05 19:23 |
View |
| Wheredakey |
wizard101 |
I used ghidra to analyze the pseudo-c and find the logic |
2026-10-05 19:16 |
View |
| Automata Simulation |
sh0k0n1c |
Change byte_14000B0E8 to 1 easy |
2026-10-05 12:45 |
View |
| thefirsttest |
Shadow@41 |
Analyzed the binary using Ghidra, found the password validation logic in main(), and converted the required hexadecimal value to decimal to obtain the correct password. |
2026-10-05 05:31 |
View |
| muhemed crackme |
HunterInPlainText |
My Process for Cracking Muhemed Crackme by HunterInPlainText |
2026-10-05 01:10 |
View |
| tropes_safe_cracker_1 by trope |
Glitch_Baby |
Ghidra failed to decompile properly |
2026-10-04 21:56 |
View |
| thefirsttest |
acheylate |
Crackme Write-Up |
2026-10-04 16:25 |
View |
| custom protector |
DeepDominance |
I have published the complete writeup in my GitHub repository |
2026-10-04 15:35 |
View |
| Wheredakey |
HunterInPlainText |
I used strings for quick triage, Ghidra to identify basic program functionality, and gdb to analyze the register values before the strcmp. |
2026-10-04 14:52 |
View |
| thefirsttest |
petik |
thefirsttest-solve |
2026-10-03 08:56 |
View |
| Mini LLM Sentinel |
petik |
mini-llm-sentinel-solve |
2026-10-03 08:45 |
View |
| Hecate linux/unix |
Glitch_Baby |
FNV-1a hashing used |
2026-10-02 20:32 |
View |
| catgirl.crack |
Glitch_Baby |
My first .NET crackme |
2026-10-02 20:25 |
View |
| very simple keycheck |
wiusiwisiw |
really simple |
2026-10-02 18:04 |
View |
| really easy |
Glitch_Baby |
Did static analysis |
2026-10-02 16:24 |
View |
| Wheredakey |
eual |
Basic Analysis and Disassemblyusing GDB |
2026-10-01 12:53 |
View |
| Matryoshka VM |
Delirium |
# MatryoshkaVM Crackme — Write-up / Tutorial |
2026-10-01 10:57 |
View |
| SP network cipher |
Delirium |
xorNT Keygen — Solution & Reverse‑Engineering Tutorial |
2026-10-01 09:59 |
View |
| thefirsttest |
vetementsvmnts |
The password is compared as a decimal integer rather than a string. Using static analysis, I disassembled the main function to find the comparison cmp eax, 0x72abb3c9 and the scanf format string "%d\n |
2026-10-01 08:56 |
View |
| easyjerk |
hugoway |
Brute force using transform function |
2026-10-01 01:22 |
View |
| custom protector |
Sukia |
FUN |
2026-09-30 20:54 |
View |
| very simple keycheck |
b1902290 |
Password confirmation via ghidra |
2026-09-30 17:57 |
View |
| Fugsv1.1 |
arshi |
Comprehensive Writeup |
2026-09-29 15:44 |
View |
| Next generation Keygen |
arshi |
Comprehensive Writeup |
2026-09-29 10:06 |
View |
| Wheredakey |
mxvlpr |
Found expected password using ltrace |
2026-09-27 18:37 |
View |
| Quintessence |
petik |
quintessence-solve |
2026-09-27 18:13 |
View |
| Getting started patch-me |
vetementsvmnts |
A beginner patching challenge featuring control flow obfuscation. Solved by identifying the junk branch and patching the string reference from failure to success using Ghidra |
2026-09-27 17:15 |
View |
| find a real key |
zeroflag |
Static analysis and GDB/GEF solution tracing two validation loops, a transformed byte buffer and XOR-based flag checking. Manual reconstruction and step-by-step walkthrough included. |
2026-09-27 12:41 |
View |
| Bobs gambling |
MrBinser |
Integer overflow vulnerability writeup for crackme_bobgambling.exe |
2026-09-27 06:45 |
View |
| Wheredakey |
7H40 |
Basic analysis & hex decoding |
2026-09-26 15:27 |
View |
| ZEXOR-v1(Linux version) |
AlanCcE |
Gathering the serial key and patching it right after |
2026-09-26 02:53 |
View |
| keygen_1 by tvk6843 |
dynaspinner64 |
Keygen that generates the serial based on the seed for the current hour and minute |
2026-09-26 02:01 |
View |
| Wheredakey |
petik |
|
2026-09-25 19:23 |
View |
| Fixed Easy Crackme |
DopeSchiggy |
Found the password through static analysis in Ghidra by following cross-references from the success/failure strings. |
2026-09-24 19:27 |
View |
| Wheredakey |
Redhound |
I first analyzed the Wheredakey crackme with SnikrFlow and used its sinks command to identify the strcmp function used for password validation. I then opened the binary in Ghidra, located the strcmp |
2026-09-24 16:44 |
View |
| very simple keycheck |
DopeSchiggy |
Found the hardcoded key and patched the password check using Ghidra. |
2026-09-24 14:53 |
View |
| simple crackme |
dynaspinner64 |
Decrypt the password with the key used during input comparison |
2026-09-24 11:20 |
View |
| Fugs |
arshi |
Unpacked 3-layer Python loader (b85+xor+zlib+marshal, custom FC18 codec+HMAC pages, sm_xor) to FUGS-obfuscated crackme, ignored decoy hash check, inverted per-byte transform (95x256 brute force) to re |
2026-09-24 10:16 |
View |
| muhemed crackme |
dynaspinner64 |
Find the password used in strcmp() via ltrace |
2026-09-24 07:26 |
View |
| Accsess me please :) |
dynaspinner64 |
Find the integer value to enter from the comparison |
2026-09-24 06:51 |
View |
| U Can't Pass |
dynaspinner64 |
Patch the compared value to pass an opaque predicate |
2026-09-24 03:56 |
View |