SoN's SoN CrackMe Bad Wolf
| Download Bad_Wolf.zip, 10 kb (password: crackmes.de) Browse contents of Bad_Wolf.zip This isn't testing your ability to reverse an algorithm as much as it's testing your ability to understand the rest of a program. Your goal in this crackme is to write a new DLL that will replace the included DLL. For those of you who write a lot of DLLs already, this shouldn't be very hard but hopefully it will help a few people to learn what's going on... (More inside)
Difficulty: 2 - Needs a little brain (or luck) | RatingWaiting for at least 3 votes View profile of SoN » |
Solutions
There are no solutions to this crackme yet. Have you solved it? Please write a tutorial and submit it here!
Discussion and comments
| astigmata 26. Apr 2006 | Dictionary attack with mistype and mutations has found the password. Done: tested 6,204,208 passwords in 03sec Attack speed (passwords per second): 1,617,785 :) |
|---|---|
| astigmata 26. Apr 2006 | open son bad wolf.dll with cff explorer to get NumberOfFunctions and Names. |
| astigmata 26. Apr 2006 | It's a good crackme It doesn't work yet because I don't know the handle of the Label, but have a look here http://thebigjo.free.fr/temp/SoN Bad Wolf.dll |
| SoN Author 26. Apr 2006 | You don't need the handle of the label at all. The DLL doesn't touch it. |
| astigmata 26. Apr 2006 | Is it allowed to make a self-patch from the dll call ? when you click register, it patches 2 bytes 0040222E . 52 65 67 69 73 74>ASCII "Registered to: U" 0040223E . 4E 52 45 47 49 53>ASCII "NREGISTERED",0 |
| SoN Author 26. Apr 2006 | No, it has to work like it's supposed to. :) |
| godhack 27. Apr 2006 | yes ,download!!!crack it! |
| SoN Author 27. Apr 2006 | Are you saying that people should crack it or that you cracked it? |
| godhack 27. Apr 2006 | of course that people crack it ,hehe |
| SoN Author 27. Apr 2006 | They should at least try, yes! We are currently working on a few more. All kinds of fun things. |
You may leave your comment, thoughts and discuss this crackme with other reversers here.
Acting childish will not be tolerated.
HTML and such will be left as-is, so don't try.