downloadbrowseavatar's catwalk

Download a.zip, 9 kb (password: crackmes.de)
Browse contents of a.zip

Run a.exe

What is the username and password to get this output:

48 130 2 94 2 1 0 2 129 129 0 217 154 214 65 205 45 143 246 148 136 235 105 124 110 196 39 43 218 7 169 30 51 100 2 118 220 103 83 112 63 31 214 23 149 221 170 108 225 65 114 65 195 90 120 55 50 222 77 60 166 179 219 213

Difficulty: 3 - Getting harder
Platform: Windows
Language: C/C++

Published: 29. Feb, 2016
Downloads: 706

Rating

Waiting for at least 3 votes
(we have only 1).

Rate this crackme:

Send a message to avatar »

View profile of avatar »

Solutions

Solution by acruel, published 12. jul, 2016; download (2 kb), password: crackmes.de or browse.

acruel has not rated this crackme yet.

Submit your solution »

Discussion and comments

acruel
03. Mar, 17:21
Kind of weird. Anyway, I got the output.
Extreme Coders
05. Mar, 09:38
Exploiting buffer overflow.

any 10 letter username followed by [alt + numpad 3]
any password
acruel
05. Mar, 11:49
@Extreme Coders

Not exactly.

.text:00402D19 mov ecx, [ebp+var_3C]
.text:00402D1C cmp [ebp+var_40], ecx
.text:00402D1F jz loc_402DFC
avatar
Author
05. Mar, 19:50
@Extreme Coders:

what is the [Alt + numpad 3] supposed to produce? I believe it's Ctrl-C (ASCII ETX) which will terminate the program. Your solution does not work for me.
Extreme Coders
05. Mar, 20:12
@avatar:

alt + numpad 3 = ♥
Try this:

username: 0123456789♥
pass: 123
avatar
Author
06. Mar, 01:11
@Extreme Coders: nice
masihamasiha
04. Apr, 10:08
hi @avatar.
I analyzed the code. the user must contain 11 character. the ASCII code for 11th char must be between 0 and 10 excluding 0 and 10 themselves.
----------------------------------------------------------------
here is the logic in code:
MOVZX EAX,BYTE PTR DS:[User 11th char]
TEST AL,AL
JZ 00402DDD
MOVZX EAX,BYTE PTR DS:[User 11th char]
CMP AL,0A
JA 00402DDD
MOVZX EAX,BYTE PTR DS:[User 11th char]
TEST AL,AL
JZ SHORT 00402D19

none of the jumps mus not be taken.
-------------------------------------------------------------
I tried the tab key as the 11th character whose ASCII code is 9 and it is working.
masihamasiha
04. Apr, 10:10
I forgot to mention that the password can be everything.

You may leave your comment, thoughts and discuss this crackme with other reversers here.
Acting childish will not be tolerated.
HTML and such will be left as-is, so don't try.