CrackMe 2 // ConfuserEx 1.0.0-custom

[lucifeey]

Difficulty :  4/10
Language : .NET
Platform : Windows
OS Version : All
Packer / Protector : ConfuserEx 1.0.0-custom

Description :

Find out the password and give a tutorial how u got that.

Screenshot :

Spoiler

 

CrackMe02.exe

Edited April 8, 2017 by lucifeey
Forgot OS Version

[Gyrus]

Difficulty: 4/100

Password:

Spoiler

GladUFoundThis!

Run the crackme using dnSpy, do not set initial breakpoint. Break (Ctrl+Break) the execution. Debugger lands on:

mscorlib -> System.IO -> __ConsoleStream -> ReadFileNative()

Step out (Shift+F11). Enter any password. Keep stepping out untill you reach:

CrackMe02 -> ejdGIfwNyDgtHkPvvAolmbGeopHDb -> SJVWQsKldSOfuZPsxaVVTZTVvhnG()

Step out again. Password is in Locals list.

[cawk]

hmm? what have you changed apart from renaming?

all of codecrackers tool worked fine for this nothing has changed

 

https://gyazo.com/8659b2b143352da7dec08db2b587f103

 

put a bp there on the unpacked file and the pass will be in the locals 

[lucifeey]

1 hour ago, cawk said:

hmm? what have you changed apart from renaming?

I just changed unclearly the type charset, so it forces to use normal chars. and the wonderful attribute so some deobfuscators wont detect it as confuserex.

Edited April 10, 2017 by lucifeey
.

[XenocodeRCE]

Well in short, no real modification, only minor useless addings. I wrote a tutorial on how to custom ConfuserX the right way on rtn-team website

[atom0s]

On 4/10/2017 at 11:08 PM, XenocodeRCE said:

Well in short, no real modification, only minor useless addings. I wrote a tutorial on how to custom ConfuserX the right way on rtn-team website

Is this post still on rtn's site? I don't see a thread about this there. Would be interested in reading it.

[cawk]

On 22/04/2017 at 2:45 AM, atom0s said:

Is this post still on rtn's site? I don't see a thread about this there. Would be interested in reading it.

https://www.rtn-team.cc/board/showthread.php?tid=277&pid=818#pid818

 

last post in this thread

[atom0s]

10 hours ago, cawk said:

https://www.rtn-team.cc/board/showthread.php?tid=277&pid=818#pid818

 

last post in this thread

 

Thanks was looking for a thread of its own didn't think it would be a reply to another thread. Cheers for the link.