RDGMax Posted April 29, 2015 Posted April 29, 2015 Hello my friends here a new crackme version... again! Crackme Revision 5! The Difficulty increased a bit! Level 5 of 10 +New tricks added Thanks my friends! RDG.Crackme.net.v5.2015.zip.rar
kao Posted April 29, 2015 Posted April 29, 2015 Buggy/non-working by default on Win7 x64. Reason - certain features require administrator rights, but EXE manifest doesn't say so.
RDGMax Posted April 29, 2015 Author Posted April 29, 2015 Tested on windows xp, seven, 8 & 10 32 / 64 bits show any error? message?
kao Posted April 29, 2015 Posted April 29, 2015 No error, just the 2nd process won't run, you get "bad boy" message right away. Right-click and "Run as administrator" solves the problem. Probably. At least it seems to run as intended. It might be as well that my antivirus (Bitdefender) doesn't like the dirty tricks you're using.
RDGMax Posted April 29, 2015 Author Posted April 29, 2015 try to run as admin of course. i added some anti debug code. K
kao Posted April 30, 2015 Posted April 30, 2015 kao : 7633465232716745375433704C547441676C49476D583364356253377056314435396D456F44796C7A5574643156443354486B574E59366C5048634578595A577633465232716745375433704C547441676C49476D583364356253377056314435396D456F44796C7A5574643156443354486B574E59366C5048634578595A577633465232716745375433704C547441676C49476D583364356253377056314435396D456F44796C7A5574643156443354486B574E59366C5048634578595A5731457461736A43724730426231412B6C2B7145376D513D3D May I suggest that you reconsider the protection, as antiviruses really really hate it? 3
RDGMax Posted April 30, 2015 Author Posted April 30, 2015 I should upload directly the level 10 hehe. all this version can be solved using process hacker.because the serial can be found on the memory. the Level 6 include different authentication method kao you are a machine!
kao Posted April 30, 2015 Posted April 30, 2015 @RDGMax: thank you for kind words. It was actually not that different from previous one. All the main protections (anti-patch, anti-debug, encrypted strings, hidden good boy message, etc.) are the same as before. The biggest change was that you added an extra check (probably because of my tutorial ): if (Strings.Len(correctSerial) == Strings.Len(enteredSerial)) // this check is new in v5{ if (Operators.CompareString(correctSerial, enteredSerial, false) == 0) { goodBoy(); }}So, instead of logging CompareString parameters, I logged Strings.Len parameters. Easy as pie. 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now