Log in

View Full Version : F-Secure Reverse Engineering Challenge (September 7th)


Kayaker
September 13th, 2007, 00:22
I just want to repost this lost thread as it could be very interesting. I won't post the original replies, but I think we can discuss it anew.

This was originally posted by the member Roll:

Quote:
Hello everyone.

Just noticed that there is going to be another challenge from F-Secure and thought some of you might want to participate.
Here is their blog post about it:
http://www.f-secure.com/weblog/archives/archive-092007.html#00001271


It's been 6 days since the challenge started so I think there's a very good chance that there has been a winner already.

Taking into account the rule that
It is not allowed to publish the solution on public forums.


Unless there are objections, I don't see a problem with discussing it as is usually done with a mini-project, which means

DON'T SPOIL IT FOR ANYONE ELSE!

However, it's always fun and instructive to discuss how to go about analyzing such a reversing challenge and some of the code techniques it uses, but to let people ultimately discover the answer themselves.

In any case, this thread has done the Phoenix and is free to fly again.

Cheers,
Kayaker

wtbw
September 13th, 2007, 06:36
I won

Last I heard (a few days ago) there hadn't been any other responses; each year they give a second ticket out at random to one of the other first ten finishers, so if anyone wants a good chance of winning one I'd hurry up and give it a go

evlncrn8
September 13th, 2007, 08:16
congrats wtbw... this was the driver jobbie yeh?

wtbw
September 13th, 2007, 08:32
Yeah. I'll keep fairly mum about the actual mechanisms at the moment (especially as I actually want them to give me the ticket...), but I found it quite fun.

I think I can probably get away with a comment on technique/tools, but I guess that's a slight hint by itself so I'll base64 it:
Code:
TXkgbWFpbiB0b29scyB3ZXJlIChpbiBvcmRlciBvZiBtb3N0IHRpbWUgc3BlbnQgaW4pIE9sbHlEYmcv
VWx0cmFFZGl0L1ZTL0lEQSwgd2l0aCBhIGxpdHRsZSBMb3JkUEUgYW5kIFNvZnRJQ0Uu