首页
社区
课程
招聘
[转帖]熊猫卫士 : Crackme 01
发表于: 2009-7-8 02:05 5619

[转帖]熊猫卫士 : Crackme 01

2009-7-8 02:05
5619
收藏
免费 0
支持
分享
最新回复 (9)
雪    币: 452
活跃值: (10)
能力值: ( LV6,RANK:90 )
在线值:
发帖
回帖
粉丝
2
这个、这个? 怎么玩呀?
2009-7-8 15:47
0
雪    币: 210
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
3
crack me 阿.

一些小提示.
1. UPX
2. argv 1.
2009-7-11 15:05
0
雪    币: 216
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
4
你发的木马吧!点了没反应!举报!
2009-7-11 23:29
0
雪    币: 210
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
5
难道没有人要看看吗 ?
2009-7-12 00:22
0
雪    币: 216
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
6
在看雪发这种帖子,不应该吧!
2009-7-12 08:02
0
雪    币: 538
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
7
http://pandalabs.pandasecurity.com/archive/Panda-Challenge-_2D00_-_2200_All-that-glitters-is-not-gold_2200_.aspx


http://pandalabs.pandasecurity.com/archive/Panda-Challenge.aspx




熊猫卫士的 挑战赛吗?

Easy challenge: 150€ Amazon Gift Card
- Medium challenge: 250€ Amazon Gift Card
- Hard challenge: 450€ Amazon Gift Card
2009-7-12 18:45
0
雪    币: 210
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
8
对啊.

我已经完成了. 但老是觉得没那么简单. 哈哈

有大牛帮忙看看吗?
2009-7-12 22:55
0
雪    币: 538
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
9
官方公布了解题方法:
http://pandalabs.pandasecurity.com/archive/1st-Panda-Challenge-solution-_2600_-winners.aspx


我一开始是枚举,看汇编后,然后写程序枚举,汗吖。。。

然来还有 a smarter way:
去壳看,导出图片,看到:
To solve
almost each
known challenge you could
easily find
a solution.
Look carefully
on each word,
on each sentence, because
knowledge is hidden.
At this time you'd probably
take into account that this is not
more than garbage or
encrypted text...

仔细看:
To solve
almost each
known challenge you could
easily find
a solution.
Look carefully
on each word,
on each sentence, because
knowledge is hidden.
At this time you'd probably
take into account that this is not
more than garbage or
encrypted text...

Took a Look At me
记事本打开,会看到:
>>> USE easy_challenge as pwd!!!! (STAGE 1/2)<<<


一就开始,我也是这样,我怎么没看到哩,这么粗心。。。机器跑了N久还没出来。。。
2009-7-14 11:20
0
雪    币: 210
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
10
我的答案

$ file Panda\ International\ Challenge\ 1.exe
Panda International Challenge 1.exe: MS-DOS executable PE  for MS Windows (console) Intel 80386 32-bit

$ strings Panda\ International\ Challenge\ 1.exe  | head
!This program cannot be run in DOS mode.
Rich
.reloc
UPX1
.rsrc
3.03

Seems like its packed.
Trace the file and we discover the OPE => 0x004011E0
Dump the file and fix with LordPE.

Start IDAPro and start to trace _main

_main : (Part i)

.reloc:0040117E                 cmp     [esp+3Ch+argc], 2
.reloc:00401183                 jnz     short loc_4011CB

if argv[1] = (null) then we need to quit

_main : (Part ii)
Step into sub_401000

.reloc:00401192                 call    sub_401000
.reloc:00401017                 cmp     ecx, 0Eh

if argv[1] less then 14 char , quit

Strings the unpacked binary :
$ strings de_Panda\ International\ Challenge\ 1.exe | grep STAGE
!>>> USE easy_challenge as pwd!!!! (STAGE 1/2)<<<  

Run the binary :
Run : Panda International Challenge 1.exe  easy_challenge
Complete Answer is : Use "C:\ORIC ATMOS.EXE" as key for second stage.

还是没有完成.
2009-7-16 01:17
0
游客
登录 | 注册 方可回帖
返回
//