Challenge of Reverse Engineering

View File Example CrackMe - Debug Blocker x64 This is an example for submitting a CrackMe in the Downloads section of the site. You can download the file and run Debug Blocker x64. Nothing too exciting will happen! The challenge here would be to patch the debug-blocker function so that it does not spawn a second process. Submitter Teddy Rogers Submitted 02/23/2020 Category CrackMe

This is an Enigma Protector_7.5 shell sample, whether it is Unpack, PatchHWID, or KeyGen, as long as it can successfully bypass registration, it is sufficient. Welcome friends to test, Using hardware ID encryption without popping up a registration box when changing computers, I think this one machine, one code solution is very challenging，I don't check anti virtual machine, but it cannot run on a virtual machine, which I find somewhat unbelievable..thank you. Insufficient forum member permissions, unable to post to the reverse challenge area. Sorry Name: tuts4you HWID: C16BF-8E2CA-FF15D-2CE16 KEY: BA23FLLESM75MTHXKU3Z8JNA3VJWLKCSZWV3PS76NAMJK5D3MRQ5ZYJ5ZPE9EKA…

Difficulty : 3 Language : Delphi Platform : Windows X86 OS Version : XP and above Packer / Protector : Enigma Protector 5.2 Description : Small unpackme for you guys to try. Screenshot : Enigma Protector 5.2 unpackme.rar

Here is a new unpackme protected with latest version of WinLicense (2.0.8.0). I put maximum protection, and locked it to hardware, so it requires a keyfile to run (provided of course). Goal is to unpack it, or also bypass of hardware lock (make program run on all machines) can be a good solution. Good luck. EvOlUtIoN wl2080_unpackme.rar

Here it is an unpackme wioth maximum VMProtect protection. It have also a boxed dll which should be a good and never seen target to unpack. Good luck. VMProtector_2.06_unpackme.rar

Themida v2.0.3.0 - UnpackMe Protection Level = V.HARD I give u Protection Details for making ur unpack easy ==Protection Options== Anti-Debugger Detection = Ultra Advanced API-Wrapping = Level2 Anti Dumpers = Enable Anti- Patching = File Patch (Sign Support) Entry Point Obfuscation = Enable Metamorph Security = Enable Resource Encryption = Enable Memory Guard = Enable VMWare/Virtual PC = Compatible Compression = App/Res/Secure Monitor Blockers = File Monitors/Registry Monitors Delphi/BCB Form = Enable When Debugger Found = Exit Silently Code Replace = Enable ==Advanced Option== Encrypt App = Enable .NET ASM = Enable Hide from PE = Type2 When U DID I…

View File WinLicense v3.1.3.0 x86 (All Protection Options) UnpackMe - WinLicense 3.1.3.0 x86 Full Protect HWID Lock + Entry Point Virtualization + Etc... HWID: 1111-2222-3333-4444-5555-6666-7777-8888 Author:boot From:Tuts4you Time:2023.04.02 Submitter boot Submitted 04/02/2023 Category UnPackMe  

View File Enigma Protector v6.9 I have protected a simple file with the Enigma Protector 6.9. Try to unpack. For a skilled reverser will not be as hard as it seems. HWID: A7707-65A71-43529-A59E1-41C2F-C5AA0-EB308-3F774 Name: tuts4you Key: BG8QC4UMZW3QMTH99U6ZTF8FJJNDAPKY5E2XNL3CMHRVUMLSB2QWRBSYBGF4RNHX7WC26W2GQMNBNPUU3YUTDXDS387A2UURMUVJ88P5PPC9ZCEQHFHW4J6ZQRAK7GW6DRK4QH4CGCEQM7F9K39J89S4CRARX3L3LPABBXU23M8QXP6A85L2CZFJZF66KF5NFTZ557872DA3 Submitter GIV Submitted 07/20/2021 Category U…

lARP64Pro 1.0.3 http://tuts4you.com/...d.php?view.2815 Ted. lARP64 Pro_Update.rar

Should be simple enough esp with CondZero's fantastic tool..... I'll post a valid key if the armadillo killers amoung us need help with secure sections. -acid Armadillo_v6.04_UnPackMe.rar

[ Solutions so far: JohnWho, What ] (read whole thread) Hello folks. Decided I would post this here as well, as we're lacking some exercise on these kinds of targets. Purpose: open up the test target, click OK on the message box. Use any tool you want to alter a byte in application's active memory (e.g.: "MZ" string at ImageBase) and another message will appear. Goal: make the 'bad' message never pop-up, but not through patching the all-too-clear JUMP. Inline VMProtect's CRC check method so the CALL always returns 1. Again, not through MOV EAX,1|RETN (P.S.: imagine you don't know where this function is in a well-obfuscated target). …

Hi A unpackme high and strong for you is crackers Files protected by Hefaz Protector Type protection = anti dump anti olly dongle lock Anti Debug Code Encryption / Decryption & Code Obfuscation :woot: O Security = 7 / 10 http://www.4shared.com/file/3Xuwmfmm/UnpackMe.html What do you see this file UnpackMe.zip

Attached is an unpackme from my own protector, Ultra version. Though lARP v2.0 Ultra supports compression, I haven't done so for this UnpackMe. I added quite a lot of features in comparison with Lite, Standard and Pro versions. It might have become harder to unpack but that's why I coded in a messagebox + exit (warning for debugging or VM), which should be an excellent point of attack. The real stuff doesn't have this messagebox nor exit though (See previous versions). Unpack and tell me about its flaws. I want to explicitly thank my buddy jstorme for providing me with ideas, testing on x64 and to always have kept pushing me over the edge. I would not have continued…

UnpackME 2009 - The Enigma Protect v1.55 FOR UR Support OK BEST OF LUCK eNjOy! UnpackME_2009.rar

Hello, i found a special crackme obfuscated with .net reactor 4.9. I think his version of .net reactor is modded Here's the file : http://www5.zippyshare.com/v/2225980/file.html I'm working with the file since 5 days and i didn't find any solution. If someone can help me Cra'ckMe.zip

Language : Python Platform : Windows OS Version : All Packer / Protector : Pyarmor + My Protector Description : Want to see if someone can unpack it, want to use this obfuscator for my future aplications in python Screenshot : Spoiler Download : Virustotal: https://www.virustotal.com/gui/file/fec987a11c8bdd47355529389d75f1f2cb0f980a763efa21e796dd1a21619989/detection Download: https://anonfile.com/3fn5o8gdo5/UnpackME_by_0x72_rar UnpackME by 0x72.rar

After lARP v2.0 Lite and lARP v2.0 Standard editions, here is an unpackme protected by lARP v2.0 Pro Ed. It is supposed to be challenging Have fun lena151. lARP_v2.0_Pro_UnpackMe.rar

Language : C# .Net Platform : Windows x32/x64 OS Version : All Packer / Protector : Agile.Net v6.6 Description : Hi everyone, hope one of you friends can unpack the target and teach us how to unpack it Screenshot : Secured.rar

Unapck Safengine! unpackme.rar

Difficulty : 8 Language : C++ Platform : Windows 32-bit and 64-bit OS Version : All Packer / Protector : VMProtect 3.0.9 Description : The objective is to interpret virtualized functions in the attached binaries. No additional options have been used - no memory protection, no import protection and no compression. The virtualized function(s) will execute when the following key(s) is/are pressed: VMP32 (V1) : P VMP32 (V2) : 1 and 2 VMP64 (V1) : P VMP64 (V2) : 1 and 2 The virtualized functions are not very large. Detailed information of the interpreting procedure/internals or a complete solution paper is pref…

Hi all, This file is compiled with Visual Studio 2010 (C++ Language) and protect one with VM_START/VM_END. New themida version have new VM system so I have use FISH32 White VM to protect this file ThemidaTest.rar

This unpackme is protected with the latest version of Xheo CodeVeil I hope u enjoy reversing this nice protection Regards, LibX // RETeam UnpackMe.rar

Difficulty : 10 Language : C# Platform : Windows OS Version : Winall Packer / Protector : DNGuard v3.80 - HVM not applied (will expire 26/12) Description : Provide serial or unpack me ggggg.rar

lARP v2.0 Ultimate My 2008 challenge is this small UnpackMe from Ultimate version of lARP protector. All options checked except pre-compression. Just unpack. Big thanks to my buddies Ufo-Pu55y for researching some really neat stuff and jstorme for his continued support and testing. Thanks guys, I shall remember you in my morning, noon and evening lARP prayers Remark1: when it's all too obvious that you are on a reverser's system, a lARP'ed file may display a warning or even crash, also outside debugger In such case, just unpack to remove all limitations Remark2: there is now some experimental code in lARP. Love and best care have been applied to make it, still, if …

Hi, All. Here are three unpackmes Protected by Safengine v2.2.1 From 'JC'. Some information about these UnpackMes. "default.exe" is Protected by Safengine 2.2.1 default options. "Middle.exe" is the Secondary protection options (somebody chose) Protected. "LOL.exe" is the Maximum protection options (somebody chose) Protected. Then,you will see some new tricks in this version ('JC' said)... Thanks to 'JC' for the sample he provided. Anyway hope All you will like it. You can grade for the three samples. SE2.2.1.rar