›

[Reversing] Exatlon

BlWaspBlWasp
in Challenges

Hello everyone,

I've seen there is no topic about this challenge, so I start it. Anybody has an idea about this it ? Cause I have reversed a lot with Ida but I can't find anything... And when I see the first blood speed, I think I'm missing something...

Thanks in advance !

Tagged:
«1

Comments

  • NikoASRNikoASR

    I used IDA too, If you follow the input you can understand what's going on, but maybe there are easier way to achieve the flag

    Hack The Box

  • GlenRunciterGlenRunciter

    Yeah I'm having a bit of trouble as well, could use a nudge...

    Hack The Box

  • shaswata56shaswata56

    why the hell it's not working!

    shaswata56
    ** Life is simple, we make it complex just out of curiosity **

  • rshackleford85rshackleford85

    yeah i found what i believe is a possible password but it's a long string and the program won't accept it as a password. i've also checked for bitwise operations to see if it and's or xor's the string but i just confused myself even more. any nudges would be appreciated. thx

  • shaswata56shaswata56

    Type your comment> @rshackleford85 said:

    yeah i found what i believe is a possible password but it's a long string and the program won't accept it as a password. i've also checked for bitwise operations to see if it and's or xor's the string but i just confused myself even more. any nudges would be appreciated. thx

    same here!

    shaswata56
    ** Life is simple, we make it complex just out of curiosity **

  • m0ticm0tic

    Type your comment> @rshackleford85 said:

    yeah i found what i believe is a possible password but it's a long string and the program won't accept it as a password. i've also checked for bitwise operations to see if it and's or xor's the string but i just confused myself even more. any nudges would be appreciated. thx

    You are in the right direction. I would suggest to enter any character as the user input (for instance a 'Z') and see how the program transforms such value and compares it with the string that you have found. Try the same with a 'Y', and so on until you find the pattern.

  • BlWaspBlWasp

    EDIT : Solved it ! However, I didn't understand the goal of this chall... I've full guessed how to get the flag

  • cybrxx0cybrxx0
    edited May 2020

    load this into IDA / Ghidra. Don't read the decompilation.. carefully find the responsible function. I did everything manually like the guys mentionned above but when you understand the code it's super easy to convert/script it

  • InsomniacOGInsomniacOG

    Do you believe it's possible to complete this challenge with GDB? Mainly since I have no clue how IDA works

  • yb4Iym8f88yb4Iym8f88

    I think yes, if you can go thru mangled names and read an assembler.

  • HomeSenHomeSen

    @InsomniacOG said:

    Do you believe it's possible to complete this challenge with GDB? Mainly since I have no clue how IDA works

    To find out what is going on, yes, GDB might be of help. But in order to not get lost, it is advised to first find out what part of the program you want to investigate with GDB. If IDA is too confusing for you, I'd suggest trying Ghidra. It is pretty intuitive to use, and also has a pseudo-c decompiler built in ;)

    Hack The Box
    GREM | OSCE | GASF | eJPT

  • GhodragGhodrag

    Type your comment> @rshackleford85 said:

    yeah i found what i believe is a possible password but it's a long string and the program won't accept it as a password. i've also checked for bitwise operations to see if it and's or xor's the string but i just confused myself even more. any nudges would be appreciated. thx

    I'm stuck here as well, i think i have a possible password but the program wont accept it. If anyone who's using r2 could help me out I'd appreciate!

  • AcapetisAcapetis
    edited May 2020

    i found set of numbers that i think it's possibly password but its not working and i have no idea to go next. T T

  • davihackdavihack
    edited May 2020

    Dear Santa,
    I wish to be a good reverser, so maybe I will stop looking the screen with a retarded face for hours.

    davihack

  • dosxuzdosxuz

    Type your comment> @davihack said:

    Dear Santa,
    I wish to be a good reverser, so maybe I will stop looking the screen with a retarded face for hours.

    davihack

    I do the same thing....

  • tobrahatobraha

    Got the flag, but only by extrapolating rather than actually reversing this thing. If anyone could give me a breakdown of that one function, I'd much appreciate it!

  • haugerhauger

    After solving the challenge, I can say that it can be solved without debugging or decompiling the code; of course, I did some analysis using Cutter/Radare2 initially but I did not completely reverse the code.

  • idevilkzidevilkz

    can I ask someone to give me a helping hand with this. more like i want to understand it.
    I have loaded it into ghidra and can see some data but don't know how to manipulate it

  • pranavms13pranavms13

    i got a long number string. i am stuck here. can anyone tell me if im in the right direction ?

  • pranavms13pranavms13
    edited June 2020

    okay. i was able to solve this.
    this was pretty interesting one.
    pm for a nudge.
    Hack The Box

  • davihackdavihack
    edited June 2020

    Ok actually was really easy!!
    Guys be careful this binary is compressed take a look to strings and google!
    The "hard" part is decoding the password!

    Hack The Box

  • REFFYREFFY

    I solve it :)
    pm for a nudge

  • idevilkzidevilkz

    can I ask someone to hold my hand through this one. using IDA, I have found a possible long string but thats about it. Reversing is something new to me so getting confused very easily

  • wh4twh4twh4twh4t

    Type your comment> @m0tic said:

    Type your comment> @rshackleford85 said:

    yeah i found what i believe is a possible password but it's a long string and the program won't accept it as a password. i've also checked for bitwise operations to see if it and's or xor's the string but i just confused myself even more. any nudges would be appreciated. thx

    You are in the right direction. I would suggest to enter any character as the user input (for instance a 'Z') and see how the program transforms such value and compares it with the string that you have found. Try the same with a 'Y', and so on until you find the pattern.

    This was the nudge I needed. Thanks

  • qoqo123qoqo123

    is it had to do with ul***g ?

  • coiltagcoiltag
    edited June 2020

    I was able to solve it by reversing to narrow down to the actual functions, then used Python with GDB scripts. (May the brute force be with you)

    Just out of curiosity, is it U**** compressed? I feel it's not, but cannot confirm.

  • k4wldk4wld

    This box is insane.

    k4wld
    Discord: k4wld#5627

  • alienumalienum

    Type your comment> @k4wld said:

    This box is insane.

    I agree

  • sh4d0wlesssh4d0wless

    really cool challenge
    eline sağlık OctopusTR :)


    Hack The Box

    You can pm me on discord sh4d0wless#6154

  • SparreSparre
    edited July 2020

    Could use a nudge as well. Spent hours in ghidra finding tons of strings, none that make much sense. Found nothing in the functions either.

Sign In to comment.