Jump to content
Tuts 4 You
  • 0
Kurapica

[Don't touch ME] - Part 1

Question

Kurapica

Difficulty : NAN
Language : Delphi
Platform : Windows x64
OS Version : Windows 7
Packer / Protector : None

Description :

Challenge : Make the application show a different message when clicking the button.

by default, it shows a simple "Hello World !" message.

Here are the challenge rules :

1 - No patching is allowed, It doesn't matter how you solve it as long as the SHA-1 of the original file stays "9F1CCEBBDAB4A0CEEC30C61F1D64C4B1DEAE8CBE"

2 - If your solution includes any coding then it should only be C#.

3 - Writing a simple tutorial is obligatory, don't post your solution if you don't want to write a tutorial.

4 - Don't use dUP / uPPP or similar tools but you can write your own tools if needed.

5 - your solution should be able to show the VA of the OEP and view first 9 bytes of that address before the victim loads kernel32.dll !

Screenshot :

Attached.

Part 1.rar

2016-09-21_172439.png

Edited by Kurapica (see edit history)
  • Like 1

Share this post


Link to post

10 answers to this question

Recommended Posts

  • 0
Kurapica

crystal clear solution :D

I forgot to enable ASLR which made it easier :(

Although my intention was to show how to hunt the ImageBase dynamically for a 64bit victim.

well done

 

Edited by Kurapica (see edit history)
  • Like 2

Share this post


Link to post
  • 0
Kurapica

@dex73r : although this can be a valid solution but crystalboy's solution is better because it's showing the concept I wanted.

Share this post


Link to post
  • 0
Kurapica

I posted Part 2 but Teddy seems busy to approve it until now.

Share this post


Link to post
  • 0
Loki

I think I fornicated up and deleted it :S

Apologies - can you repost? I was trying to remove some other spam and appear to have deleted the wrong topic.

Share this post


Link to post
  • 0
Kurapica

done ...

Share this post


Link to post
  • 0
Teddy Rogers

Approved!

Ted.

Share this post


Link to post
  • 0
Loki

Thanks K - that's what happens when you give a retard mod privileges ;)

Share this post


Link to post
  • 0
Kurapica

Take it easy man :D

$hit happens

Share this post


Link to post

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...