Challenge of Reverse Engineering

View File DiamondVM This is a c# file protected with DiamondVM, a KoiVM mod which is really good. No OldRob will desvirtualize it. Submitter DanielTG Submitted 03/19/2021 Category UnPackMe (.NET)  

Difficulty : Probably 8 Language : C# .NET Platform : Windows (anyCPU) OS Version : Windows 7 Above Packer / Protector : CursedSheepMod (Modded Conf + VM) Description : Upload the Unpacked file and Give me a detailed tutorial. like... tell me the specific method or specific tools you used in order. as i said in the previous unpack challenges XD. you know the rest. ConsoleApplication3.exe

Difficulty : 2-3 Language : .NET Platform : Windows OS Version : Windows7+ Packer / Protector : PandaObfuscator (Modded Confuser) with Custom VM Description : Just basic UnpackMe, want to see if my obfuscator good/bad Screenshot : GetMe.7z

View File Simple KeygenMe 02 Provide a valid serial and User ID or make a keygen. Good Luck. Submitter johnfkingzton Submitted 03/12/2021 Category KeygenMe  

Difficulty : 5 (I think) Not sure Language : C# Platform : Windows x32 OS Version : Windows All Packer / Protector : PC-RET protection v1.1 Bronze :just unpack it. Silver: unpack + password of programm Gold: unpack + password + tutorial VirusTotal: https://www.virustotal.com/ru/file/2d0cbe8416c8bc72d73945eecc16cf754488e7a07d26926330e8f59f14afd8ca/analysis/1546348036/ Unpackme.exe

View File Not easy but not hard CrackMe Try to find the key Hint : The key countains - Specials - Caps - Non caps - Numbers Enter the key and you will see the results. Good luck. Submitter lopeg Submitted 09/12/2020 Category CrackMe

View File Tricky Goals: Bronze - Patch the crackme to show the correct message Silver - Bronze + explain what is happening I don't know why Windows Defender is giving a false positive. My past here should prove I am not here to harm anyone. I only used Appfuscator for renaming. I checked the file and I did not see any other obfuscation or anything annoying automatically inserted by Appfuscator (like outline method calls). Please extract all the files in a folder to make the exe work properly. Let's fight! Submitter LoLLo90 Submitted…

Language : C# Platform : Windows Build : x86-x64 Packer/Obfuscator : SafeVM Description : Anti-VM (Removed). I want to see how strong the protection is. Screenshot : UnpackME-OUT.rar

View File ClumsyVM This is my clumsy virtual machine 😃 Goals: Bronze - Patch the crackme to show the correct message Silver - Bronze + explain how the virtualized code works Gold - Silver + write a totally different virtualized code to pass the check Submitter LoLLo90 Submitted 01/31/2021 Category CrackMe  

View File godpow#7468 CrackMe This has an anti-debugger which will constantly look for strings that'll contain the name of debuggers such as De4dot and more.. Submitter henlo Submitted 12/08/2020 Category CrackMe  

GOOD LUCK **this tool no have much protection** How to unpack by Inwza007: 1. use ManagedJiterFr4 jit UnpackMe and CrackMe.exe and ____.netmodule 2. use confuser Methods Decryptor 1.0 3. use Module to Assembly 4.use Universal Fixer 1.0 5. Clean String with SAE 5. UnpackMe and CrackMe.rar

View File Olivia Mini Protector Try to unpack it ... Protections used: String Encryption Anti Dn-Spy Anti De4dot More Features Submitter KamiKaze Submitted 12/04/2020 Category UnPackMe (.NET)  

View File DotNetSafer This file is packed with DotNetSafer using the following protections; Constants Protection Mutation Protection ILDasm Protection Invalid Metadata Protection Invalid Cctor Protection Name Protection Goal : Unpack the file and detail the methods you used to bypass the above protection options. Submitter Prab Submitted 05/15/2020 Category UnPackMe (.NET)  

View File ConfusedDragon This is a .NET file which has been protected by an obfuscator me and a friend developed. It contains a lot of protection methods, common DNSpy/De4Dot tools will not help. DNSpy will fail to decompile and throw errors. Good luck. Submitter emlin Submitted 07/15/2020 Category UnPackMe (.NET)  

People who patch this instead of trying to find the key are boring :^) Language : C++ Platform : Windows x64 OS Version : Windows 10 Packer / Protector : None Description : This is a simple crackme i made over the course of the last 30 minutes. Hopefully you get a little fun out of it. Screenshot : crackme.exe

Difficulty : 6 Language : C++ Platform : Windows OS Version : Windows 7 Packer / Protector :VMProtect Ultimate 3.0.8 Description : Memory Protection -Yes Import protection -Yes Resource Protection -Yes Pack the output File -Yes Debugger - user-mode+Kernel-mode Virtualization Tools -Yes using VMProtect SDK. Screenshot : UnpackMe.7z

Difficulty : idk Language : .NET Platform : Windows x64 OS Version : All Packer / Protector : ConfuserEx 1.0.0 Description : Give the unpacked file + tutorial how to unpack it. [!] The file should be runnable after unpacking it [!] Screenshot : Spoiler UnPackMe01.zip

Difficulty: 3-5 Language : .NET Platform: Windows OS Version: All Packer / Protector : ConfuserEx Fork Description : Pretty heavily forked ConfuserEx and I'm not sure if it's good or not. If you get it cracked please post how you did it and don't just say "I used public tools", tell what tools and how. Thank you! Screenshot : Download : CrackMe.exe

View File Poetic AutoIt (string/integer obfuscation) This is a simple CrackMe consisting of an input. The correct input is two stanzas of a particular poem and will reveal a label of the poem title and author upon success. Otherwise, "Try again..." will be displayed. If I'm allowed to be picky, I'm primarily interested in scripted efforts to RegEx analyze strings/integers. Very little effort (as in none) went into hiding the correct string. The script was merely passed-through a self-made obfuscator. Full disclosure: It contains rudimentary debugger and compilation checks which, if failed, falls into a while loop with a one secon…

View File A crackme with math problem Just run it. It is an interesting math problem. No vm, no obfuscation. You can debug it with dnSpy even Visual Studio. You should use public method inside this crackme to generate a valid hex string and make program output correct string. Submitter wwh1004 Submitted 08/07/2020 Category CrackMe

View File CrackMeBoi I made a custom obfuscator and I haven't made any progress cracking it so please crack the file with my custom .NET obfuscator. Do not use OllyDbg or any software of that kind, you can use Mega Dumper and other tools similar. Submitter Ninjego1 Submitted 06/03/2020 Category CrackMe

Language : Python Platform : Windows OS Version : All Packer / Protector : My Protector (https://github.com/robert169/Python-Obfuscator) Description : Want to see how long it takes to get it unpacked, is easy tho but i want to know where can i improve it Spoiler Screenshot : Download : Protected.py

View File CrackMe 4 This file is protected by my custom C++ virtualizer and C# protector. The correct solution is to find the correct key and unpacked target. Enjoy it! Submitter 0X7C9 Submitted 07/01/2020 Category CrackMe

Language : C# .Net Platform : Windows x32/x64 OS Version : All Packer / Protector : DNGuard HVM 3.94 Description : Hi everyone,two solutions are accepted : 1. GOLD MEDAL = UNPACKING THE PROTECTOR 2. SILVER MEDAL = PATCHING THE TOOL Hope you will have some fun! *DO NOT PATCH THE CrackMe,THE GOAL IS TO PATCH THE .DLL PROTECTED WITH DNGUARD HVM OR UNPACK IT!* Can't upload larger file "Max total size 0.98MB" so i'll just put it on the link : https://anonfile.com/B9aae3P7n9/CrackMe_rar CrackMe.rar

Language : .NET Platform : Windows [x32/x64] OS Version : Windows 10 Packer / Protector : Habib Extreme Protector / .NET Reactor Description : Habib is my good friend. I want to know how strong is it ? If you can, write how you unpacked it. Virustotal link. Screenshot : Download : Habib.rar