Klinzter Posted March 22, 2013 Share Posted March 22, 2013 This is a crackme using vb.netthe modified app should accept any key and say registered.if you crack it mention what tools you used!CrackMe.rar Link to comment Share on other sites More sharing options...
Solution kao Posted March 22, 2013 Solution Share Posted March 22, 2013 Perhaps you could spend some time reading this forum and learning basics before making your next attempt? This is not even a 5-minute challenge. 3 bytes changed. Used tools: ILSpy and HIEW (but any good .NET decompiler and hex editor will do). Most people would use de4dot, Reflector and Reflexil - but that would modify the entire executable. crackme-patched.zip 1 Link to comment Share on other sites More sharing options...
Klinzter Posted March 22, 2013 Author Share Posted March 22, 2013 kao, thats exactly what I was looking for.. I way to crack it without modifying the entire exe file..now my question to you since the file is obfuscated how did you manage to find the location to patch.. Link to comment Share on other sites More sharing options...
kao Posted March 22, 2013 Share Posted March 22, 2013 Obfuscation is just a minor slowdown if you know what you're looking for. Start with your crackme without obfuscation. Learn to find the important comparison and patch it using Reflexil - there are plenty of tutorials about that. Then learn to make the same patch using hex editor - there are tutorials about that as well. And after that - try to do the same with your obfuscated crackme. You'll see that it's just slightly harder because function names and strings are gone.. Link to comment Share on other sites More sharing options...
atom0s Posted March 22, 2013 Share Posted March 22, 2013 Here's mine patched. Tools used: - de4dot (Removal of SmartAssembly) - Greywolf (IL editor to remove various IL from the button click method to force always registered.) Original function was:private void method_0(object sender, EventArgs e) { try { if (Operators.CompareString(this.vmethod_4().Text, "6594682899080", false) == 0) { this.vmethod_2().Text = "Registered!"; } else { this.vmethod_2().Text = "Not Registered!"; } } catch (Exception expr_3D) { ProjectData.SetProjectError(expr_3D); Exception ex = expr_3D; Debug.Print("cmdStart_Click: " + ex.Message); ProjectData.ClearProjectError(); } }Cracked.7z Link to comment Share on other sites More sharing options...
Accede Posted March 22, 2013 Share Posted March 22, 2013 my try tools used:reflector + reflexil plugin@atom0s thx for the tip with GreywolfCracked2.7z Link to comment Share on other sites More sharing options...
Hadits follower Posted March 22, 2013 Share Posted March 22, 2013 Crackedfile offset = 0x3080 patch = 17 Link to comment Share on other sites More sharing options...
kao Posted March 22, 2013 Share Posted March 22, 2013 (edited) @Death: your patch will work incorrectly, if correct serial will be entered. EDIT: Nevermind, I'm wrong. Nice patch! Edited March 22, 2013 by kao Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now