Quote:
[Originally Posted by NeOXOeN]if you have like exe which uses command promt command like
crack.exe [pass]
how can you use or type that in olly..
since if you run it in olly it say like "no pass inserted"
so exe needs insert [pass].. to run exe properlly..
how can you do that?? |
This could be easy to do depending on how it was coded there are several ways.
1. Open the Crack.exe in olly
2. Click the E button.
3. Right click on kernal32.dll
4. Select view names.
5. Scroll down and find something like lstrcmpA.
6. Hit F2 to set a break point on this.
7. Run the exe in olly and type 123 for the password.
8. Olly will break and you will see in the lower right hand window your typed password "123"
9. Right below it is the real password, It was comparing it to your fake one you typed in.
This is one way of trying to find a password. There are other ways to do this also. You could look in a hex dump and the password could be stored right in the dump.
Another way is to open the crack.exe in olly.
Right click in the cpu window code and select search for all strings.
This will display all of the strings in the exe. Possibly ones like.
"no pass inserted"
Clicking on this will jump to the code that has this and you can look above it or below it to see the real password, If it is stored in hex.
Or you can reverse this part of the code so it runs without a password, or takes any password you type.
This is all simple password protections, mainly on beginner crackmes/genmes.
It gets better when they hide them in data.