Posted April 29, 201510 yr Hello my friends here a new crackme version... again! Crackme Revision 5! The Difficulty increased a bit! Level 5 of 10 +New tricks added Thanks my friends! RDG.Crackme.net.v5.2015.zip.rar
April 29, 201510 yr Buggy/non-working by default on Win7 x64. Reason - certain features require administrator rights, but EXE manifest doesn't say so.
April 29, 201510 yr No error, just the 2nd process won't run, you get "bad boy" message right away. Right-click and "Run as administrator" solves the problem. Probably. At least it seems to run as intended. It might be as well that my antivirus (Bitdefender) doesn't like the dirty tricks you're using.
April 30, 201510 yr kao : 7633465232716745375433704C547441676C49476D583364356253377056314435396D456F44796C7A5574643156443354486B574E59366C5048634578595A577633465232716745375433704C547441676C49476D583364356253377056314435396D456F44796C7A5574643156443354486B574E59366C5048634578595A577633465232716745375433704C547441676C49476D583364356253377056314435396D456F44796C7A5574643156443354486B574E59366C5048634578595A5731457461736A43724730426231412B6C2B7145376D513D3D May I suggest that you reconsider the protection, as antiviruses really really hate it?
April 30, 201510 yr Author I should upload directly the level 10 hehe. all this version can be solved using process hacker.because the serial can be found on the memory. the Level 6 include different authentication method kao you are a machine!
April 30, 201510 yr @RDGMax: thank you for kind words. It was actually not that different from previous one. All the main protections (anti-patch, anti-debug, encrypted strings, hidden good boy message, etc.) are the same as before. The biggest change was that you added an extra check (probably because of my tutorial ): if (Strings.Len(correctSerial) == Strings.Len(enteredSerial)) // this check is new in v5{ if (Operators.CompareString(correctSerial, enteredSerial, false) == 0) { goodBoy(); }}So, instead of logging CompareString parameters, I logged Strings.Len parameters. Easy as pie.
Create an account or sign in to comment