1. Post #121
    Gold Member

    June 2006
    1,084 Posts
    Well IDA really dosnt like that, it seems to think it is one of the shortest programs ever.
    lol. it's packed. IDA is pretty useless for unpacking things.
    Reply With Quote Edit / Delete Reply Windows 7 United States Show Events Disagree Disagree x 1Dumb Dumb x 1 (list)

  2. Post #122

    March 2012
    5 Posts
    Well then may I ask, how is what I sent wrong? something in the setup changes each and every run.
    If you alter the string I sent in memory, the output changes completely, so it is the key or the plaintext.
    we know the plaintext or the key must be changing to get the output we are, so it kind of leaves no option, unless I am missing something majorly

    Edited:

    I admit btw I am probably being dumb and missing something majorly simple
    From what I can tell, the encryption is being salted, possibly through the system time, which would explain a changing output.
    Reply With Quote Edit / Delete Reply Windows XP United States Show Events Agree Agree x 1Disagree Disagree x 1 (list)

  3. Post #123
    ..............
    nekosune's Avatar
    February 2009
    1,827 Posts
    lol. it's packed. IDA is pretty useless for unpacking things.
    Even with something packed, you would expect code to unpack, not 3 jumps and an xor. I wasnt saying that it was right, I was actually commenting that IDA must be wrong in this case.

    Edited:

    From what I can tell, the encryption is being salted, possibly through the system time, which would explain a changing output.
    Yeah, in the code you can see a queryperformancecounter call.
    Reply With Quote Edit / Delete Reply Windows 7 United Kingdom Show Events Dumb Dumb x 3 (list)

  4. Post #124
    itty-bitty pretty kitty
    Dennab
    September 2008
    9,837 Posts
    Well, since it turns out I'm horrible at making challenges, should we just make Zeh Matt's rar the real challenge?
    Reply With Quote Edit / Delete Reply Windows 7 United States Show Events Disagree Disagree x 6Funny Funny x 2Agree Agree x 1 (list)

  5. Post #125

    March 2012
    5 Posts
    Even with something packed, you would expect code to unpack, not 3 jumps and an xor. I wasnt saying that it was right, I was actually commenting that IDA must be wrong in this case.

    Edited:



    Yeah, in the code you can see a queryperformancecounter call.
    Pretty certain that I found it. Guess we'll see when he responds. If I'm right, it was pretty easy.


    Well, since it turns out I'm horrible at making challenges, should we just make Zeh Matt's rar the real challenge?
    I must be missing something on his, because I just extracted the RAR and ran it. I'm guessing it is something in the EXE itself that needs extracted?
    Reply With Quote Edit / Delete Reply Windows XP United States Show Events Agree Agree x 1 (list)

  6. Post #126
    ..............
    nekosune's Avatar
    February 2009
    1,827 Posts
    Well, I got Supersnail's challenge correctly in the end it seems. took me a night of solid work to though.

  7. Post #127
    dajoh's Avatar
    March 2011
    625 Posts
    I must be missing something on his, because I just extracted the RAR and ran it. I'm guessing it is something in the EXE itself that needs extracted?

    Zeh Matt's executable is protected, he wants you to remove the protection.
    Reply With Quote Edit / Delete Reply Windows 7 Sweden Show Events Agree Agree x 1 (list)

  8. Post #128
    ..............
    nekosune's Avatar
    February 2009
    1,827 Posts
    Well, since it turns out I'm horrible at making challenges, should we just make Zeh Matt's rar the real challenge?
    So I basically spent the whole night on nothing?, well , apart from getting to understand some debuggers better.

  9. Post #129
    itty-bitty pretty kitty
    Dennab
    September 2008
    9,837 Posts
    So I basically spent the whole night on nothing?, well , apart from getting to understand some debuggers better.
    Maybe you'll have to do both? I dunno, I'm waiting for agree/disagrees.

  10. Post #130
    ..............
    nekosune's Avatar
    February 2009
    1,827 Posts
    Maybe you'll have to do both? I dunno, I'm waiting for agree/disagrees.
    Well there is a disagree from me for obvious reasons, I mean it is kind of off to change the thing needed midway through.
    Reply With Quote Edit / Delete Reply Windows 7 United Kingdom Show Events Agree Agree x 2 (list)

  11. Post #131
    Gold Member
    uitham's Avatar
    March 2010
    1,889 Posts
    Ah well, screw the bus pirate and logic sniffer, I am back to my simulated circuit hacking, with ruckingenur :c

  12. Post #132
    That Dog
    Ehmmett's Avatar
    March 2009
    12,807 Posts
    This competition was really well organized.
    Reply With Quote Edit / Delete Reply Windows 7 United States Show Events Funny Funny x 6Agree Agree x 3 (list)

  13. Post #133
    ..............
    nekosune's Avatar
    February 2009
    1,827 Posts
    Ah well, screw the bus pirate and logic sniffer, I am back to my simulated circuit hacking, with ruckingenur :c
    ooh thanks for showing me a brilliant game

    Edited:

    Well I finished all four missions.
    Reply With Quote Edit / Delete Reply Windows 7 United Kingdom Show Events Agree Agree x 1Friendly Friendly x 1 (list)

  14. Post #134
    That Dog
    Ehmmett's Avatar
    March 2009
    12,807 Posts
    So does nekosune win?
    Nobody knows because the competition is that well organized.

  15. Post #135
    ..............
    nekosune's Avatar
    February 2009
    1,827 Posts
    So does nekosune win?
    Nobody knows because the competition is that well organized.
    I think snail is waiting to see how many dislikes/likes the post about changing to Zeh Matt's version gets.

  16. Post #136
    itty-bitty pretty kitty
    Dennab
    September 2008
    9,837 Posts
    So does nekosune win?
    Nobody knows because the competition is that well organized.
    only two people have gotten it so far, so it's not over yet

  17. Post #137

    March 2012
    5 Posts
    only two people have gotten it so far, so it's not over yet
    I haven't gotten a response from you as far as whether or not I was right.

  18. Post #138
    ..............
    nekosune's Avatar
    February 2009
    1,827 Posts
    I haven't gotten a response from you as far as whether or not I was right.
    Your supposed to PM, not put it on snail's visitor wall.
    Reply With Quote Edit / Delete Reply Windows 7 United Kingdom Show Events Informative Informative x 1 (list)

  19. Post #139
    itty-bitty pretty kitty
    Dennab
    September 2008
    9,837 Posts
    I haven't gotten a response from you as far as whether or not I was right.
    I sent one; you weren't.

  20. Post #140
    Gold Member
    Dennab
    May 2011
    436 Posts
    The Entry Point has to be restored so it starts at the right position inside the executable and the extra section removed that my protector creates, enjoy :)
    Reply With Quote Edit / Delete Reply Windows 7 Germany Show Events Optimistic Optimistic x 1 (list)

  21. Post #141
    ..............
    nekosune's Avatar
    February 2009
    1,827 Posts
    Anyone else been doing this or has it been mostly forgotten?
    Reply With Quote Edit / Delete Reply Windows 7 United Kingdom Show Events Dumb Dumb x 1 (list)

  22. Post #142
    itty-bitty pretty kitty
    Dennab
    September 2008
    9,837 Posts
    Anyone else been doing this or has it been mostly forgotten?
    It's funny because there's only been two winners so far.

  23. Post #143
    Gold Member
    Dennab
    May 2011
    436 Posts
    It's funny because there's only been two winners so far.
    I hope I didn't mess this up

    Edit: I see whats going on, 7 days for this? This is overkill

  24. Post #144
    itty-bitty pretty kitty
    Dennab
    September 2008
    9,837 Posts
    I hope I didn't mess this up

    Edit: I see whats going on, 7 days for this? This is overkill
    Apparently not, because only two people have got it.

  25. Post #145
    ..............
    nekosune's Avatar
    February 2009
    1,827 Posts
    Well looks like this is going to last slightly longer then wednesday

  26. Post #146
    Map in a box's Avatar
    July 2009
    7,054 Posts
    Only a week.

  27. Post #147
    itty-bitty pretty kitty
    Dennab
    September 2008
    9,837 Posts
    Only a week.
    I didn't really plan on being banned.

    So yeah, nekosune and Zeh Matt win. Congrats! Prizes.

  28. Post #148
    ..............
    nekosune's Avatar
    February 2009
    1,827 Posts
    I didn't really plan on being banned.

    So yeah, nekosune and Zeh Matt win. Congrats! Prizes.
    Is the dangerous prototypes prize, one, or two seperate prizes?

  29. Post #149
    itty-bitty pretty kitty
    Dennab
    September 2008
    9,837 Posts
    Is the dangerous prototypes prize, one, or two seperate prizes?
    I actually dunno. Vote, I guess, because it wasn't really specified.

  30. Post #150
    ..............
    nekosune's Avatar
    February 2009
    1,827 Posts
    I actually dunno. Vote, I guess, because it wasn't really specified.
    Well either way, that would be what I choose as prize, if seperate, I dunno which would choose yet.

  31. Post #151

    March 2012
    1 Posts
    Didn't try to participate in the challenge, but wondering if the author/winners could publish the solution/resolution steps.

    I think it would be interesting to the rest of the community to learn a bit about it.

  32. Post #152
    ..............
    nekosune's Avatar
    February 2009
    1,827 Posts
    Is there any word yet on whether they are seperate or not?

  33. Post #153
    itty-bitty pretty kitty
    Dennab
    September 2008
    9,837 Posts
    Is there any word yet on whether they are seperate or not?
    Not yet, let's just assume they're separate.

  34. Post #154
    ..............
    nekosune's Avatar
    February 2009
    1,827 Posts
    I must admit, the actual source code is something I would be intrested in seeing also, I have seen it in assembly instructions only at this point, so seeing what it was would be intresting.

  35. Post #155
    Parad0x0217's Avatar
    May 2011
    73 Posts
    I don't see how anyone can be declared a winner because no one knew which challenge to even attempt.

  36. Post #156
    itty-bitty pretty kitty
    Dennab
    September 2008
    9,837 Posts
    I don't see how anyone can be declared a winner because no one knew which challenge to even attempt.
    Yes they did.
    The one I provided.

  37. Post #157
    Parad0x0217's Avatar
    May 2011
    73 Posts
    Well I just hoped this competition was a bit more organized.
    Reply With Quote Edit / Delete Reply Windows 7 United States Show Events Agree Agree x 1 (list)

  38. Post #158
    itty-bitty pretty kitty
    Dennab
    September 2008
    9,837 Posts
    Well I just hoped this competition was a bit more organized.
    Why don't you organize another one then?
    Reply With Quote Edit / Delete Reply Windows 7 United States Show Events Zing Zing x 2 (list)

  39. Post #159
    Parad0x0217's Avatar
    May 2011
    73 Posts
    Why don't you organize another one then?
    Because I know not to start something I cannot follow through on.

  40. Post #160
    ..............
    nekosune's Avatar
    February 2009
    1,827 Posts
    I actually fail to see the confusion about which one to do (I admit I was for a moment, but then got a clear reply on the thread), he asked if it should be switched to it, and everyone basically disagreed.
    The option of something changing does not mean that it has allready changed, ie should have assumed until snail said directly otherwise, it was still the one file he uploaded.