Hacking Challenge

Onetoomanysodas · Post by **Onetoomanysodas** » Fri Jan 06, 2006 5:32 pm

Well I made a small little example of a program that protects a program with a password. The thing is, multiple passwords are possible. I dare anyone to break this security and ScreenShot the success screen. Just to show how confident I am of this matter, the first person (if anyone) who can break in before Friday Januaray 13th, 2006 will recieve $20.00 from me personally. Good Luck

Oh yeah, and don't just guess a ***** password, if you randomnly guess and get in then i'll tell you to go ***** a *****.

This is the program in a zip file

superaison · Post by **superaison** » Fri Jan 06, 2006 7:26 pm

humumumumumumu, what form is it in?!

Onetoomanysodas · Post by **Onetoomanysodas** » Fri Jan 06, 2006 11:35 pm

superaison wrote:what form is it in?!

o_O ?

dos mes · Post by **dos mes** » Sat Jan 07, 2006 1:35 am

you spelled access wrong

superaison · Post by **superaison** » Sat Jan 07, 2006 9:39 am

what form is the code in? form1,2? frmsuccess???

Patrickssj6 · Post by **Patrickssj6** » Sat Jan 07, 2006 10:28 am

Omg i think he used that aehh "zor" thingy.I think it was calle "zor"

Onetoomanysodas · Post by **Onetoomanysodas** » Sat Jan 07, 2006 12:12 pm

superaison wrote:what form is the code in? form1,2? frmsuccess???

frmSuccess is the success screen you are shown once you enter the password correctly or in this case, if you get this form to show without problems, you win. And yes I'm sorry I did spell access wrong, I usually don't make teip0z that often

The code for checking the password is in Form1.

EDIT:

Patrickssj6 wrote:Omg i think he used that aehh "zor" thingy.I think it was calle "zor"

Uhm, what?

superaison · Post by **superaison** » Sat Jan 07, 2006 12:13 pm

ok, gimme a hour

modder4321 · Post by **modder4321** » Sat Jan 07, 2006 1:31 pm

zor = decompiler basicly with it u can decompiler it to source edit so it works.

xbox7887 · Post by **xbox7887** » Sun Jan 08, 2006 1:47 am

For all of those attempting to disassemble it and make the failure jump to the successful output, theres a check that makes sure there are some characters present in the box, that assembly line is located at offset 0x428984. Then you follow that jump which takes you to offset 428b9f. Right now I'm too tired to go much further but you can break it down and its fairly easy to read.

EDIT: other interesting strings, form2 contains "Thank you for logging in", ELEGANCE is probably printed....I searched for the frmsuccess, came across JFIF, which is indicative of a jpeg image, compared with another jpeg to rebuild the header and put together an image consisting of red and yellowish-orange "flames" which is most likely the background. For those who are curious to see the image themselves, it starts at offset 0x278D when looking at the exe in a hex editor. Just copy and paste into a separate file and save as .jpeg.

Point being, people don't need a password to look through protected material

Onetoomanysodas · Post by **Onetoomanysodas** » Sun Jan 08, 2006 11:27 am

Good work but the point is getting to use the program because it will be protecting an active program.

kornman00 · Post by **kornman00** » Sun Jan 08, 2006 9:11 pm

Heres a database file with a great deal of the exe documented (events, gui objects, etc)
download

xbox7887 · Post by **xbox7887** » Sun Jan 08, 2006 9:36 pm

nice

Onetoomanysodas · Post by **Onetoomanysodas** » Sun Jan 08, 2006 10:21 pm

You guys suck

Onetoomanysodas · Post by **Onetoomanysodas** » Thu Jan 12, 2006 11:43 am

Contest ends tomorrow. The source code will be released for teaching/information purposes.

xbox7887 · Post by **xbox7887** » Thu Jan 12, 2006 1:28 pm

lol the source can't teach you how to hack, in fact it makes the concept that much harder to grasp

live2board · Post by **live2board** » Thu Jan 12, 2006 9:27 pm

I think he means so that people can understand how passwords and things are encrypted.

Onetoomanysodas · Post by **Onetoomanysodas** » Thu Jan 12, 2006 11:38 pm

live2board wrote:I think he means so that people can understand how passwords and things are encrypted.

Lol yes exactly, you took the words from my mouth. Plagiarism!

modder4321 · Post by **modder4321** » Sat Jan 14, 2006 5:21 am

its not hard.

1 way of encrypting which is my favorite is...

encode the pass into hex then simply strrev it.

then u got an encoded pass lmao

Teh 1337z0rs · Post by **Teh 1337z0rs** » Sat Jan 14, 2006 5:21 pm

Ha, its funny how you put it on a site that is all about reverse engineering.