CRACKING LEVEL 1 | Defend the Web

dimooz
8 years ago | edited 5 years ago

2

Hi,

As already talked in this thread, that could be fun if we could have a Cracking or Reverse Engineering section in HT. I hope @flabbyrabbit will agree to add some of these levels, so I propose here a first level to solve (I made it myself), for anyone who’d like to try it. Enjoy! (feedback is welcome)

You’ve got a software, for which you know the validation code linked to a serial number. You need to retrieve the original serial number that generates the following validation code :

RRFFT-SDEPV-TBSRI-YBJQJ-SJOEF

[i]You can download the tool used to generate the key codes here

Hint (for lamerz):

Serial number is alphanumeric. Charset used here: [0-9a-z]

EDIT: feel free to PM me to submit your solutions, although you’ll know when you got it. I hope this level is not too much difficult, [s]I agree it could have been easier for a “level 1”[/s]. Please note that this challenge has been updated on 2019/10/28, now there should be only one valid solution. Good luck!

[left]Click here to access CRACKING LEVEL 0[/left] [right]Click here to access CRACKING LEVEL 2[/right]

WHO SOLVED IT? (in order of appearance)
Nov. 01, 2016 : @HackingGuy (congratulations! [applause] ;) )
Jan. 09, 2018 : @feuerstein

Vibhakar Solanki [gala]
8 years ago

0

please update your You can download the tool used to generate the key codes here.
link

dimooz
8 years ago

0

The link seems to be working correctly, can’t you download the file linked?

Vibhakar Solanki [gala]
8 years ago

0

It says id domain error

dimooz
8 years ago | edited 8 years ago

0

I don’t understand, if I click on the link the download does start here… Does anybody else have problem to download it?

tl0tr
8 years ago

1

I just tried it, its working fine for me. It’s an executable (.exe) file and I am on Linux and I like wine :(

Will try it on a VM though.

dimooz
8 years ago | edited 8 years ago

0

Thank you for your feedback, Mr @tlotr :) I’m sure you can make it working on Wine as well. What reverse engineering tool do you use usually? On my side now I use IDA32, this marvelous thing is able to generates some pseudo-code from binary files very well. It’s a “must-have” IMO.

Vibhakar Solanki [gala]
8 years ago

0

Can u upload it somewhere eles ???

dimooz
8 years ago | edited 8 years ago

0

[quote=gala]Can u upload it somewhere eles ??? [/quote]

Dunno, the download seems to be working from anywhere else.. and I don’t have another server to host the file right now (and I’m a bit lazy :p). Let’s hope that flabbyrabbit will agree to add a ‘cracking’ section on HT very soon? That could definitely solve the problem.

dimooz
8 years ago | edited 8 years ago

0

And the winner is : @HackingGuy

f0rk [HackingGuy]
8 years ago

1

Thanks @dimooz :p

It was quite fun to just get back into the challenge scene for a minute. I really hope more levels like these come out!

There’s no place like 127.0.0.1

6683102
8 years ago

0

Ctrl+f

6683102
8 years ago

0

How to pass level 1

dimooz
8 years ago

0

What level are you talking about, cracking_level_1? If so, please read documentation about reverse engineering, then analyse the provided tool and find by yourself (that’s the purpose of the challenge, remember?)

Marvin [PandaDystopia]
8 years ago

0

I think what he tries to say is: he’s stuck on main 1 xD

?!

dimooz
8 years ago

0

haha that’s what I thought ^^ anyway the answer remains the same!

[deleted user]
8 years ago

0

i can’t see anywhere written download

Kaneki13140
8 years ago

0

thanks you man

dimooz
8 years ago

0

[quote=terms]i can’t see anywhere written download [/quote]

Open your eyes, it’s here…

colthack
8 years ago

0

very good idea :D

life is longer than you think

[deleted user]
8 years ago

0

I am new here pls

dimooz
8 years ago

1

Still just one player has solved it at the moment (an easy way), even if some others tried.. I’ll post another cracking challenge if at least 3 challengers could solve this one. C'mon guys!

f0rk [HackingGuy]
8 years ago

1

Yes :)

I have a book or two to teach people how to reverse if they want it.
We should also think about making levels involving cryptography, cause those are always fun. :)

There’s no place like 127.0.0.1

Markb2
8 years ago

2

Hmm never seen this thread before. I’d like to take a look at this when I’m done (or extremely frustrated) with crypt 9. :)

dimooz
8 years ago | edited 8 years ago

0

[quote=HackingGuy]
I have a book or two to teach people how to reverse if they want it.
We should also think about making levels involving cryptography, cause those are always fun. [/quote]

But there’s already a ‘crypt’ section in HT levels… oh, you wanna say more levels in it?

Sprall
8 years ago

0

Sounds like a really good idea. I’d like to see more like basic 7 where you get to use your tools against the site and actually connect to it. More levels like that could be a lot of fun and really helpful.

f0rk [HackingGuy]
8 years ago

0

[quote=dimooz]But there’s already a ‘crypt’ section in HT levels… oh, you wanna say more levels in it?[/quote]

Nope :)
I just meant reversing levels that involve cryptography. ;)

There’s no place like 127.0.0.1

Markb2
8 years ago

0

Yes, exactly that. There are some crypt levels but they are not based on real cryptography. I probably will never solve real cryptography levels but I still think it would we a added value for the site.

f0rk [HackingGuy]
8 years ago

0

Although, the possibilities are endless, so if we’re to add this section we should also write some article or provide some links describing ethical reversing and advanced techniques for levels involving higher level things such as cryptography. :)

There’s no place like 127.0.0.1

Markb2
8 years ago

0

Would love that. I suck in exactly those two things; reversing and cryptography >.<

PenCrasher
8 years ago

0

The zip is not opening. Did i forget something?

dimooz
8 years ago | edited 8 years ago

0

No you didn’t, the zip should be opened without any pb.. I’ll check again if I can open it correctly from my side.

EDIT: it works like a charm here… opened with 7-zip and fileroller.

PenCrasher
8 years ago | edited 8 years ago

0

[quote=dimooz]No you didn’t, the zip should be opened without any pb.. I’ll check again if I can open it correctly from my side.[/quote] The zip opens and closes right after.

EDIT: Giving it another try now.

dimooz
8 years ago | edited 8 years ago

0

There’s nothing special with the zip file, it’s just a zip… However I’ve just added on new link just to be sure the download works, maybe you can give it a try.

dimooz
7 years ago

0

Someone else to try? I’d like to make a level2, I’d need more feedback on it..

Dannydeleto [dannydeleto]
6 years ago

0

I think Cracking/Reverse Engineering levels would be super fun to have here!

Ill give this a shot. I have reverse engineered many random things, but for some reason executables seem to be the bane of my existence! Which makes me sad because they are pretty much the most practical things to RE :( Do you recommend using IDA, any old hex editor, or something else?

f0rk [HackingGuy]
6 years ago

2

I recommend using whatever works ;)

There’s no place like 127.0.0.1

Dannydeleto [dannydeleto]
6 years ago

0

Ha! Alright, I’ll go download that…

fred [feuerstein]
6 years ago

0

I’ll have a look at this too :D

fred [feuerstein]
6 years ago

0

that wasn’t too hard :)

Micr0n [micr0n]
6 years ago

0

Maybe you have downloaded the key code generator, crack it in few days and when you were closer then you wrote: I’ll have a look, or maybe you are a really good crack man.

Hi

fred [feuerstein]
6 years ago

0

Maybe I just told you that I would have solved it ;)

dimooz
6 years ago | edited 6 years ago

0

Pretty sure @feuerstein is just a really good one. Or maybe this challenge is just too easy to solve?

dimooz
6 years ago | edited 6 years ago

0

I could make other challs like this one if some challengers are interested, I’m just waiting for completion by other challengers (this topic is a bit old now).

4 replies have been removed

f0rk [HackingGuy]
6 years ago

0

I can’t wait for the next one ;)

Maybe make an this one an ELF for us Linux users :P

BTW @dimooz , you should PM me. I have an interesting idea for the next level

There’s no place like 127.0.0.1

Ahmed_Aris
5 years ago

0

Nice Idea

dimooz
5 years ago

0

@Ahmed_Aris: did you try this challenge?

dimooz
5 years ago

1

Hi guys (and girls ^^),
I made another cracking challenge for those who are interested, you can give it a try here. Enjoy!

Dannydeleto [dannydeleto]
5 years ago

0

Thanks for posting here, so I got the ping in my notifications :) I’ll check it out soon!

dimooz
5 years ago

0

Challenge updated, a little bit harder now as there should be only one valid solution. Good luck challengers!