I found the function where there is the md5 o simply hex char sequence, and that is used in a function with best… ever… strings . is that the right function ?
I tried to get flag but all of them fake.
If I run debug and enter the flag, result will “Login success!”; but I directly run script, it’s failed.
I tried to modify some instruction but error.
Please give me some hint!!!
Thanks so much!
Edit: Too many fake flags but I eventually found the right one. So headache…
Has anyone gotten Ida to run/debug this, it keeps giving me an error because it not a ‘standard’ executable. I think I understand how it was compiled… but that doesn’t help me run it
Man, I took way longer on this than I really needed to. Once I realized what was happening, and tread carefully, I knew right where to go. Good challenge!
I used mainly GDB and objdump for this. Also needed Capstone for some more analysis.
For anybody who’s still stuck, let me try to give some non-spoiler hints (if these count as spoilers, feel free to remove this):
(GDB) Catchpoints may help you figure things out a bit.
Read the description of the challenge, it’s important.
@Chainmanner said:
Man, I took way longer on this than I really needed to. Once I realized what was happening, and tread carefully, I knew right where to go. Good challenge!
I used mainly GDB and objdump for this. Also needed Capstone for some more analysis.
For anybody who’s still stuck, let me try to give some non-spoiler hints (if these count as spoilers, feel free to remove this):
(GDB) Catchpoints may help you figure things out a bit.
Read the description of the challenge, it’s important.
Hello, Is anybody else stuck in a part of code that seems to only acces and manipulate a particular adress in memory, i’m just starting to think that the main function didn’t load properly, i don’t know if it is for a particular antidebug mechanism that i haven’t seen or what can it be…