| SP network cipher |
Delirium |
xorNT Keygen — Solution & Reverse‑Engineering Tutorial |
2026-10-01 09:59 |
View |
| thefirsttest |
vetementsvmnts |
The password is compared as a decimal integer rather than a string. Using static analysis, I disassembled the main function to find the comparison cmp eax, 0x72abb3c9 and the scanf format string "%d\n |
2026-10-01 08:56 |
View |
| easyjerk |
hugoway |
Brute force using transform function |
2026-10-01 01:22 |
View |
| custom protector |
Sukia |
FUN |
2026-09-30 20:54 |
View |
| very simple keycheck |
b1902290 |
Password confirmation via ghidra |
2026-09-30 17:57 |
View |
| Fugsv1.1 |
arshi |
Comprehensive Writeup |
2026-09-29 15:44 |
View |
| Next generation Keygen |
arshi |
Comprehensive Writeup |
2026-09-29 10:06 |
View |
| Wheredakey |
mxvlpr |
Found expected password using ltrace |
2026-09-27 18:37 |
View |
| Quintessence |
petik |
quintessence-solve |
2026-09-27 18:13 |
View |
| Getting started patch-me |
vetementsvmnts |
A beginner patching challenge featuring control flow obfuscation. Solved by identifying the junk branch and patching the string reference from failure to success using Ghidra |
2026-09-27 17:15 |
View |
| find a real key |
zeroflag |
Static analysis and GDB/GEF solution tracing two validation loops, a transformed byte buffer and XOR-based flag checking. Manual reconstruction and step-by-step walkthrough included. |
2026-09-27 12:41 |
View |
| Bobs gambling |
MrBinser |
Integer overflow vulnerability writeup for crackme_bobgambling.exe |
2026-09-27 06:45 |
View |
| Wheredakey |
7H40 |
Basic analysis & hex decoding |
2026-09-26 15:27 |
View |
| ZEXOR-v1(Linux version) |
AlanCcE |
Gathering the serial key and patching it right after |
2026-09-26 02:53 |
View |
| keygen_1 by tvk6843 |
dynaspinner64 |
Keygen that generates the serial based on the seed for the current hour and minute |
2026-09-26 02:01 |
View |
| Wheredakey |
petik |
|
2026-09-25 19:23 |
View |
| Fixed Easy Crackme |
DopeSchiggy |
Found the password through static analysis in Ghidra by following cross-references from the success/failure strings. |
2026-09-24 19:27 |
View |
| Wheredakey |
Redhound |
I first analyzed the Wheredakey crackme with SnikrFlow and used its sinks command to identify the strcmp function used for password validation. I then opened the binary in Ghidra, located the strcmp |
2026-09-24 16:44 |
View |
| very simple keycheck |
DopeSchiggy |
Found the hardcoded key and patched the password check using Ghidra. |
2026-09-24 14:53 |
View |
| simple crackme |
dynaspinner64 |
Decrypt the password with the key used during input comparison |
2026-09-24 11:20 |
View |
| Fugs |
arshi |
Unpacked 3-layer Python loader (b85+xor+zlib+marshal, custom FC18 codec+HMAC pages, sm_xor) to FUGS-obfuscated crackme, ignored decoy hash check, inverted per-byte transform (95x256 brute force) to re |
2026-09-24 10:16 |
View |
| muhemed crackme |
dynaspinner64 |
Find the password used in strcmp() via ltrace |
2026-09-24 07:26 |
View |
| Accsess me please :) |
dynaspinner64 |
Find the integer value to enter from the comparison |
2026-09-24 06:51 |
View |
| U Can't Pass |
dynaspinner64 |
Patch the compared value to pass an opaque predicate |
2026-09-24 03:56 |
View |
| Back To The beginning Keygen |
dynaspinner64 |
Generate a hardcoded key with random values for indices that aren't checked |
2026-09-23 12:33 |
View |
| j333 by josamont |
dynaspinner64 |
Find the password stored in plaintext in the binary |
2026-09-23 11:38 |
View |
| Back To The beginning Keygen |
adr3n68 |
Ghidra aproximation |
2026-09-22 21:03 |
View |
| argc |
zeroflag |
GDB/GEF solution tracing a modified argc through _start, argv handling and strcmp validation. Step-by-step walkthrough included. |
2026-09-22 18:25 |
View |
| vvsc by elijunior01 |
vetementsvmnts |
Solution for VVSC |
2026-09-22 18:23 |
View |
| Password And Flag in C |
xttrnela |
Found the password using GDB debugger |
2026-09-21 16:58 |
View |
| Tricky challenge or is it ? |
sh0k0n1c |
Decrypt XOR string seen in the entry point of program |
2026-09-21 13:07 |
View |
| My First crackme |
Shiro5550 |
check strings |
2026-09-20 13:41 |
View |
| Pass CrackMe |
bestaireverser |
Collapsed the VM layer to its final byte predicate. |
2026-09-20 10:01 |
View |
| Tricky challenge or is it ? |
fon37 |
Just a simple static reverse |
2026-09-20 06:07 |
View |
| Find the password Windows ver |
fon37 |
understanding the assembly code |
2026-09-19 02:24 |
View |
| Tricky challenge or is it ? |
acheylate |
The secret string is: supersecret123 |
2026-09-18 07:35 |
View |
| Product Activation |
ok |
activate interprets libcerberus.so as bytecode for a custom vm with an mmu. traced it via ptrace, reversed the opcode set and the seeded rolling hash check, key fell out of the recurrence |
2026-09-18 00:21 |
View |
| sygil (gui version for linux) |
ok |
Keygen for any alias: FNV-1a-32 hash, fold (h>>16)^(h&0xFFFF), format syg-%08x-%04x-%08x. TracerPid anti-debug XORs 0xDEADBEEF when traced. Verified in GUI. |
2026-09-17 23:19 |
View |
| Find the password |
kaya |
Password HVUHADN — recovered by cross-referencing the result strings and disassembling the check at 0x100fd: the password is stored as two overlapping 4-byte XOR constants (0x48555648 'HVUH' + 0x4e444 |
2026-09-17 22:19 |
View |
| easy_reverse |
zeroflag |
Static analysis and GDB/GEF solution exploring argc/argv, pointers and character-based validation. Step-by-step walkthrough included. |
2026-09-17 19:14 |
View |
| Auth Pin |
tor1 |
ConfuserEx-obfuscated PIN check where the secret was hiding in plain sight — PIN as a raw int, strings only Base64-encoded. |
2026-09-17 18:40 |
View |
| user-pass. |
tor1 |
Manual unpacking of an Agile.NET packer with anti-debug, then AES key/IV extraction to decrypt the credentials — all statically, without letting the app run under a debugger. |
2026-09-17 18:36 |
View |
| a bit of a challenge |
Kontar |
https://kontar0.github.io/writeups/crackme-04.html |
2026-09-17 14:07 |
View |
| KeygenMe |
xttrnela |
Made a keygen which calculates correct serial |
2026-09-17 11:15 |
View |
| Monsignors Crackme |
xttrnela |
Found the password using Ghidra decompiler. |
2026-09-17 10:34 |
View |
| a bit of a challenge |
nomnomheapnom |
Name is hashed with 32-bit FNV-1a plus two rotating accumulators, then fmix32-avalanched; "%08x%08x%08x" gives the 24-char sigil. ptrace(TRACEME) anti-debug only; trivial forward keygen. |
2026-09-17 05:45 |
View |
| good kitty |
SOURAV |
|
2026-09-17 05:17 |
View |
| vvsc by elijunior01 |
SOURAV |
- Takes numeric password as input - Checks if the password is correct or not - If password is correct then print **Allowed access** else **Access denied** |
2026-09-17 05:15 |
View |
| Simple crackme |
SOURAV |
I gave a random input at first and **ltrace** command was able to trace the library function calls made and we can see it loaded the user input as **args1** and the original key as **args2**. Of cours |
2026-09-17 05:12 |
View |
| PrettyDamnEasy |
SOURAV |
- Takes user input string (**found %s by examining 0x201a**). - Checks if the string is correct or wrong. - If string is correct then it prints **Correct password** else **Wrong password, try another* |
2026-09-17 05:10 |
View |
