Posted April 8, 20178 yr Difficulty : 4/10Language : .NETPlatform : WindowsOS Version : AllPacker / Protector : ConfuserEx 1.0.0-custom Description : Find out the password and give a tutorial how u got that. Screenshot : Spoiler CrackMe02.exe Edited April 8, 20178 yr by lucifeey Forgot OS Version
April 10, 20178 yr Solution Difficulty: 4/100 Password: Spoiler GladUFoundThis! Run the crackme using dnSpy, do not set initial breakpoint. Break (Ctrl+Break) the execution. Debugger lands on: mscorlib -> System.IO -> __ConsoleStream -> ReadFileNative() Step out (Shift+F11). Enter any password. Keep stepping out untill you reach: CrackMe02 -> ejdGIfwNyDgtHkPvvAolmbGeopHDb -> SJVWQsKldSOfuZPsxaVVTZTVvhnG() Step out again. Password is in Locals list.
April 10, 20178 yr hmm? what have you changed apart from renaming? all of codecrackers tool worked fine for this nothing has changed https://gyazo.com/8659b2b143352da7dec08db2b587f103 put a bp there on the unpacked file and the pass will be in the locals
April 10, 20178 yr Author 1 hour ago, cawk said: hmm? what have you changed apart from renaming? I just changed unclearly the type charset, so it forces to use normal chars. and the wonderful attribute so some deobfuscators wont detect it as confuserex. Edited April 10, 20178 yr by lucifeey .
April 11, 20178 yr Well in short, no real modification, only minor useless addings. I wrote a tutorial on how to custom ConfuserX the right way on rtn-team website
April 22, 20178 yr On 4/10/2017 at 11:08 PM, XenocodeRCE said: Well in short, no real modification, only minor useless addings. I wrote a tutorial on how to custom ConfuserX the right way on rtn-team website Is this post still on rtn's site? I don't see a thread about this there. Would be interested in reading it.
April 23, 20178 yr On 22/04/2017 at 2:45 AM, atom0s said: Is this post still on rtn's site? I don't see a thread about this there. Would be interested in reading it. https://www.rtn-team.cc/board/showthread.php?tid=277&pid=818#pid818 last post in this thread
April 23, 20178 yr 10 hours ago, cawk said: https://www.rtn-team.cc/board/showthread.php?tid=277&pid=818#pid818 last post in this thread Thanks was looking for a thread of its own didn't think it would be a reply to another thread. Cheers for the link.
Create an account or sign in to comment