Author: HCF
Date: 2024-04-25 09:12
Summary: This is my solution:
Length Check in Check Password Function:
At a point in the Check Password function, a check is made on the string length, which must be 7 characters long.
0x00005555555552b3 : mov DWORD PTR [rbp-0x18],0xfffffff9
0x00005555555552d8 : mov eax,DWORD PTR [rbp-0x18]
0x00005555555552db : neg eax
0x00005555555552dd : cdqe
0x00005555555552df : cmp rdx,rax
0x00005555555552e2 : sete al
0x00005555555552e5 : test al,al
0x00005555555552e7 : je 0x5555555553c8
Loading Constant Strings into rsi:
In these 3 points, constant strings are loaded into the rsi variable
0x0000555555555298 : lea rsi,[rip+0xd66] # 0x555555556005
0x000055555555529f : mov rdi,rax
0x0000555555555317 : lea rsi,[rip+0xceb] # 0x555555556009
0x000055555555531e : mov rdi,ra
0x0000555555555326 : lea rax,[rbp-0x60]
0x000055555555532a : lea rsi,[rip+0xcda] # 0x55555555600b
End of assembler dump.
(gdb) x/s $rsi
0x555555556005: "dec"
(gdb) b *0x000055555555531e
Breakpoint 6 at 0x55555555531e
(gdb) c
Continuing.
Loading writeup...