Username: 
Password: 
Restrict session to IP 
Online within 1d

pointers?  Go to the The Last Hope challenge

Global Rank: 566
Totalscore: 46996
Posts: 37
Thanks: 21
UpVotes: 24
Registered: 14y 25d
stormsurfer`s Avatar



Last Seen: 9y 135d
The User is Offline
pointers?
Google/translate2Thank You!1Good Post!1Bad Post! link
Can I get some pointers on this? I've been working on it for a few good hours now and got nothing, it's very frustrating. I cracked it and removed the anti ptrace function to be able to use gdb on it, but I don't see the username any where. I didn't even began to look in the password section.

I also think I disabled the CAPS check, but not sure what the lc function does, at first I tought it check the lenghts of the username string but then I noticed I only enter it when I use all caps in the username (like AAAAA). in any case I can find my username string in the stack but I don't see the real username any where. I feel like I'm shooting blanks.

also does the md5 strings in the binary have anything do to with the user or pass? or they just decoy?
Global Rank: 24
Totalscore: 390563
Posts: 263
Thanks: 215
UpVotes: 274
Registered: 18y 257d






Last Seen: 114d 1h
The User is Offline
RE: pointers?
Google/translate2Thank You!2Good Post!1Bad Post! link
You did something wrong along the way Drool
Global Rank: 720
Totalscore: 37819
Posts: 19
Thanks: 17
UpVotes: 24
Registered: 9y 3d
FranzT`s Avatar
Last Seen: 114d 7h
The User is Offline
RE: pointers?
Google/translate2Thank You!1Good Post!1Bad Post! link
I did it the hard way: decompile everything -- the program is small enough to be done manually -- then analyze the code.
It was fun.
Global Rank: 7939
Totalscore: 1349
Posts: 3
Thanks: 3
UpVotes: 3
Registered: 7y 115d
Last Seen: 3y 112d
The User is Offline
RE: pointers?
Google/translate1Thank You!1Good Post!0Bad Post! link
read http://www.exploit-db.com/papers/13234/ , use ida + gdb +python
Redknee, ckclark, silenttrack, n0tHappy, nonfungiblesecurity, stormsurfer, quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 14472 times.

PHP Fatal Error(1): Constant E_STRICT is deprecated since 8.4, the error level was removed in www/protected/config.php line 6


Backtrace starts in [unknown file] line ?. GWF_Debug::shutdown_function() core/inc/util/GWF_Debug.php line 109. GWF_Debug::error_handler().... core/inc/util/GWF_Debug.php line 180.