Jump to content
Tuts 4 You

Unpackme Challenge 6 / At4re : 2007++


Recommended Posts

Posted (edited)

:thumbsup:

Challenge_2007___.rar

link updated

:yahoo: Good luck For all

Super Cracker & Angel-55 yes this is a real challenge fOr you, les autres essy.

... hmmmmmmmmmm Try agin :flowers:

Edited by Teddy Rogers
Added authors crackme to their post...
Teddy Rogers
Posted

Mouradpr, you are aware you can attach your crackme to your topic? It is much easier for people here to download the attachment directly from your post than it is for them to go to a file sharing site.

Just a thought... :rolleyes:

Ted.

Posted

OK Mr. Teddy thnks thnks :)

Posted

plz help me : wath is a method for attach the files & sorry for my english :)

Teddy Rogers
Posted

When you start a new topic in the "attachments" box click on "choose", select your crackme. Click on the "upload" button. When you have done that click on the "Manage Current Attachments" box which is located above the "choose" and "uploads" options. In the drop down option that appears select the green "+". A reference will appear in the post window (where you type your text), this will enable people to download your crackme directly from this forum...

Ted.

SuperCRacker
Posted

Nothing special except during a certain stage of dumping ...

SC.

unpacked.zip

Posted

file not working "SuperCracker"

Tryagin :)

Posted

thanks Teddy

Posted (edited)

Lol Mouard didn't i say get harder :lol:

An easy one but i think i unpacked such one :dunno:

could be but at least i unpacked it easly thanks for the challenge

but get harder next time :evil2:

Solution: http://www.zshare.net/download/208543286baba1/

Cheers To All !!

Edited by Angel-55
Posted

This one has a nice OllyDBG exit thing on second packer OEP. It is a OllyDBG disassm bug that closes Olly. Just wondering if the patched SND version is affected?

Posted

@Angel-55: Your unpacked one crashes like the one from SupeRCracker...

Or is it just me ? :unsure:

Posted (edited)
@Angel-55: Your unpacked one crashes like the one from SupeRCracker...

Or is it just me ? :unsure:

Hello,

Dont working for me too :D @SC the same. I

UnPacked_fixed.zip

Edited by PiONEER
Posted

UFO-Pu55y, Weired :dunno:

it works fine here even SC's too !!

that's a real problem even PiONEER says

it doesn't work with him that sucks any idea ?!

i checked the file seems good to me nothing wrong

in it and the author says it works for him and that it's a good

solution now i'am a bit confused :unsure: WTF is wrong with the file....... :huh:

Any way PiONEER's works here too so nothing is wrong

can any more guys test the aolutions for us and thanks in advanced :D

Cheers To All

[ Good Remark UFO-Pu55y Thanks For Reporting ]

Posted
UFO-Pu55y, Weired :dunno:

it works fine here even SC's too !!

that's a real problem even PiONEER says

it doesn't work with him that sucks any idea ?!

i checked the file seems good to me nothing wrong

in it and the author says it works for him and that it's a good

solution now i'am a bit confused :unsure: WTF is wrong with the file....... :huh:

Easy bro! Check this -->

slnapnv1.jpg

greetz B)

Posted (edited)
UFO-Pu55y, Weired :dunno:

it works fine here even SC's too !!

that's a real problem even PiONEER says

it doesn't work with him that sucks any idea ?!

i checked the file seems good to me nothing wrong

in it and the author says it works for him and that it's a good

solution now i'am a bit confused :unsure: WTF is wrong with the file....... :huh:

Slightly off topic, but a request to Angel-55. Dude, can you please stop with these strangely formatted psots. They look like pyramids and make my eyes go funny :blink:

It would be appreciated man - you write some good stuff but you make it really hard to read sometimes! Just be slightly less hasty on the 'Enter' key - normal paragraphs are good :)

Edited by Loki
Posted (edited)

Lol, Loki my friend first Deroko says no Capital letter in each word i think i did it because i got used to writting API's, secondly this arranged text i think i got it through arranging keygen codes to make it look better and readable to me :D

sorry bro' didn't mean to make your eyes go funny hhh my fault sorry again........i think this one looks better my finger keeps jumping to that f**ken ENTER and that's a problem !!

PiONEER, you can't remove that jump "NOP" it's the Debugger check this means you have something on

your systems that alerts this check maybe your olly was opened else it just can't run so it should work like usuall without any crashes or Exits !!

thanks for the complements, i glad you enjoy reading some of my posts

Cheers To All

Edited by Angel-55
Posted

Hello,

No ! OllyDBG isn

Posted

Of course it runs it continues execution without debugger checks now that really sucks

try executing xADT on your machine while ollydbg isn't running perhaps it catches the reason of your crashes

i think something is running on your machine but another idea try reversing the JNZ to JE after the IsDebuggerPresent

then run file outside and inside olly to check diffrences and don't use hidding plugins or modified olly's "Original" only please just to be sure of it, it shoudl crash outside the debugger after you reversed that jump and work inside a debugger these are the changes that shoudl be caused through that changement try it and see results please we might have an answer !!

Cheers To All

Posted

I am happy that this challenge Grace

SuperCRacker
Posted
file not working "SuperCracker"

Tryagin :)

Strange, it's working for me. I redownloaded the file from this board and is still working. Maybe you have left Olly opened when you tried to open the prog.

SC.

Posted

No Mr SC Olly Closed, try agin

Posted

Hello,

@Killboy n1, Works fine :) OllyDBG is open works too :) nice

greetz B)

Posted

Yeah, nice work Killboy it works here i had problems with import reconstructor so i had to add some more code till it worked here and it works on other PC's too i can sure that !! anyway i add an import guess which ?! and got it a few injection didn't harm at all and it works now fully on any system, the solution is fixed and attached here don't get shocked of my way !! :D

Well, a few information about the problem that you all had i discovered that he added the API's "FindWindowA & IsDebuggerPresent" maually so he injected them and added a few code to run them through now when he packed the file the packer of course got them in handle so to get there address he had to use GetProcAddress to get there addresses back and that ensured that both API's get there address on every machine "that sucks" i know when we tried unpackign of course we removed the packers process among with it went GetProcAddress API which makes the file without any address for both API's although it can be fixed by including API's in ImportREC and getting bigger size adding them manually and fixing dump but my problem was that the file program didn't work that good here so i had to go my way

and returned the packers way "almost" to get both address and fix them everything is simple here the problem was his trick which was supported by the packer in a usefull way :D thanks mourad for this challenge i enjoyed very much and hope to see more comming from you and others as well................ !!

Cheers To All

UnPacked_Final.rar

Posted (edited)

PiONNER's & Killboy's dump working fine for me...

Greets

/EDIT

@Angel-55:

Ah, posting at the same time, lol

Your dump's working fine now ;)

Edited by Ufo-Pu55y

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...