Friday, October 27, 2006

Crackmes: cyrex’s Linux CrackMe

Find the correct password to get the good boy message :) it would be great for an solution how you solve this , and with what i solve this
with the standard GNU Debugger (gdb)


Difficulty: 1 - Very easy, for newbies
Platform: Unix/Linux, etc.
Language: C/C++


[Solving the Crackme]


Solving crackmes is fun but if you screwed up, it sucks big time. Thank goodness, heavy tasks are over. Anyway, let us see what we can do with this.



joset@kee:~/src/crackmes/crackme_01$ ./crackme
-[ Linux CrackMe (Level:2) by cyrex ]-
-[ TODO: You have to get the valid Password ]-
Enter Password: 0x7d7
-[ Ohhhh, your skills are bad try again later ]-
joset@kee:~/src/crackmes/crackme_01$

Do we have to use the debugger first? How about this?



joset@kee:~/src/crackmes/crackme_01$ strings crackme
/lib/ld-linux.so.2
libc.so.6
printf
__deregister_frame_info
strcmp
scanf
_IO_stdin_used
__libc_start_main
__register_frame_info
__gmon_start__
GLIBC_2.0
PTRhP
QVhP
[^_]
-[ Linux CrackMe (Level:2) by cyrex ]-
-[ TODO: You have to get the valid Password ]-
Enter Password:
47ghf6fh37fbgbgj
-[ Good, You’re ready to begin linux reversing ]-
-[ Ohhhh, your skills are bad try again later ]-
joset@kee:~/src/crackmes/crackme_01$

Do you see what I see? What if we will try using that as the password?



joset@kee:~/src/crackmes/crackme_01$ ./crackme
-[ Linux CrackMe (Level:2) by cyrex ]-
-[ TODO: You have to get the valid Password ]-
Enter Password: 47ghf6fh37fbgbgj
-[ Good, You're ready to begin linux reversing ]-
joset@kee:~/src/crackmes/crackme_01$

There’s no protection at all just use the strings command. Trivial.

No comments: