seksiBoi Posted March 30, 2020 Share Posted March 30, 2020 (edited) Language : C# Difficulty : idk Platform : Windows Packer/obfuscator : COrona_obfuscator Description : Want To see if the protections is good enough. Corona_Vm is basically SOme one modded KOIVM idk if its good so yeah ScreenSHot Spoiler VT :https://www.virustotal.com/gui/file/892dccbe1089f8b59827c1199f61cd40e8f74b9642b9965648d457dfd45fe425/detection DL : https://bayfiles.com/n8U0jdkbo9/ConsoleApp2_exe ConsoleApp2.zip Edited March 30, 2020 by CodeExplorer Link to comment Share on other sites More sharing options...
localhost0 Posted March 30, 2020 Share Posted March 30, 2020 (edited) hmm nice load method thnx bro Edited March 31, 2020 by mamo434376 Link to comment Share on other sites More sharing options...
kuri Posted April 8, 2020 Share Posted April 8, 2020 That's MemeVM Link to comment Share on other sites More sharing options...
CodeExplorer Posted April 9, 2020 Share Posted April 9, 2020 18 hours ago, kuri said: That's MemeVM This one??? https://github.com/csharpHub/MemeVM Link to comment Share on other sites More sharing options...
TobitoFatito Posted April 9, 2020 Share Posted April 9, 2020 41 minutes ago, CodeExplorer said: This one??? https://github.com/csharpHub/MemeVM nope just checked it some koivm with junk added Link to comment Share on other sites More sharing options...
Solution Washi Posted April 13, 2020 Solution Share Posted April 13, 2020 (edited) Very mature choice for username and password. 😑 Spoiler user: HattanisGAy pass: Noone ISgay Tutorial: Spoiler No need for unpacking. Everything is visible in the debugger: Tutorial using WinDBG: Run program without debugger Attach WinDBG, load SOS extension. Break execution, !dumpheap -strings. Create a copy of the output Continue execution, Enter random username and pasword. Break execution, !dumpheap -strings again. Notice string "HattanisGAy" is added. Must be username repeat previous two steps, but this time fill in correct username. Observe password. Tutorial using dnSpy: Run program without debugger Attach dnSpy. Think of a username (e.g. "washi") and password (e.g. "1234") combi Add breakpoint on String.Equals(string a, string b) with condition a == "washi" || b == "washi" Continue execution, enter random user-pass Breakpoint hits, observe correct username. Do the same with password. Edited April 13, 2020 by Washi Added missing words. 2 2 Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now