Foro de elhacker.net

Programación => Ingeniería Inversa => Mensaje iniciado por: Crack_X en 26 Febrero 2006, 02:31 am



Título: Otro Crack Me
Publicado por: Crack_X en 26 Febrero 2006, 02:31 am
Viendo que estan de moda poner crackme para practicar aqui les traigo uno algo complicado (quizas para algunos no) lo hizo un amigo mio.

http://s44.yousendit.com/d.aspx?id=0QX8VK6JNYHRB2LHTH1MC03DSW


Título: Re: Otro Crack Me
Publicado por: pERICOTE en 27 Febrero 2006, 04:09 am
Vaya, vaya, vaya, P-CODE con antidebbuger, eso si que esta para una semana entera de diversion, jejeje...
 ;D ;D ;D


Título: Re: Otro Crack Me
Publicado por: - n0sEcReT - en 27 Febrero 2006, 06:17 am
La clave es : P]jWdq^kxEr_LyfS

Pero como supe el serial ?

Pues vamos a dejar algo provechoso del post de Crack_X  aprendiendo unas de las tecnicas mas simples que podemos usar para obtener un serial de un crackme o programa , abajo en la imagen les muestro como hice para encontrar el serial , cabe destacar que esta tecnica no siempre funciona , pero siempre es bueno tenerla cuenta ...

(http://img520.imageshack.us/img520/307/crack2ji.gif)

Espero que les ayude a todos aquellos que son novatos en el tema.

Salu2 !  :) and Happy Cracking  ;)


Título: Re: Otro Crack Me
Publicado por: x4uth en 27 Febrero 2006, 11:30 am
pero es suerte casi, o quiza fallo en la programacion del crackme eso de comparar las claves como string pero no se puede probar como un metodo general, la proteccion antidebugger que tiene es muy facil de quitar, hasta hay un plug-in del olly que se la salta , el p-code tampoko es ostaculo pues hay debuggers de p-code (el WKTVBDE) ad+ hasta e leido por ahi que se puede descompilar y obtener el codigo fuente en vb similar al original

probar el crackme mio ^^ http://foro.elhacker.net/index.php/topic,110688.0.html todavia no me han enviado ninguna solucion...


Título: Re: Otro Crack Me
Publicado por: Crack_X en 27 Febrero 2006, 12:11 pm
 :o Muy buen metodo no me lo sabia.


Título: Re: Otro Crack Me
Publicado por: pERICOTE en 27 Febrero 2006, 14:15 pm
Me gustaria saber si han obtenido el mensaje de chico bueno, porque en mi maquina (con o sin debugger) lo unico que obtengo es el mensaje de "error en tiempo de ejecucion"...
 :-\ :-\ :-\


Título: Re: Otro Crack Me
Publicado por: Wan_Kenobi en 27 Febrero 2006, 15:16 pm
He intentado probar tu método pero tengo el obstaculo de la detección del debugger como puedo saltarme esta protección?.

Otra duda es que compruebo que el código no está empacado ,  por qué no veo el codigo en ensamblador , como si estuviera empacado????.

Otro pequeño inconveniente es que la password: P]jWdq^kxEr_LyfS no me funciona.


Título: Re: Otro Crack Me
Publicado por: - n0sEcReT - en 27 Febrero 2006, 21:54 pm
mmm como veo que varios tienen problemas con el sistema AntiDebugger les dejo aqui el plugin para el Olly para saltar al Debugger ( IsDebuggerPresent ) , el archivo esta en UUENCODE ,seleccionen todo lo que esta en el cuadro de codigo y guardenlo como por ejemplo : archivo.uue   y despues de guardarlo con la extensión .UUE  lo abren con el WinZip o WinRar y y veran el archivo HideDebugger.dll , pues copian este a la misma carpeta o donde tengan el Olly Debug y listo a Crackear sin Molestias !!


Código:
begin 644 HideDebugger.dll
M35J0``,````$````__\``+@`````````0```````````````````````````
M````````````````````@`````X?N@X`M`G-(;@!3,TA5&AI<R!P<F]G<F%M
M(&-A;FYO="!B92!R=6X@:6X@1$]3(&UO9&4N#0T*)`````````!010``3`$$
M`!([@D(``````````.``#B$+`0<*`!0````4````````?!0````0````,```
M````$``0`````@``!``````````$``````````!@````!`````````(`````
M`!```!``````$```$````````!````"@(@``PP```)0?``!0`````$```&`#
M`````````````````````````%```,0!````````````````````````````
M````````````````````````````````````````$```B```````````````
M`````````````````````"YT97AT````8Q,````0````%`````0`````````
M`````````"```.`N9&%T80```$0+````,`````0````8````````````````
M``!```#`+G)S<F,```!@`P```$`````$````'```````````````````0```
M0"YR96QO8P``&@(```!0````!````"```````````````````$```$(`````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M`````````````````````````````````````````````%@``(`U``"``@``
M@`````!N(@``8B(``%8B``!`(@```"$```XA```D(0``."$``$XA``!D(0``
M>"$``)0A``"F(0``MB$``,0A``#8(0``ZB$``/HA```.(@``(B(```````#B
M(```TB```,0@``"N(```G"```)`@``!^(```;"```````````````````%QO
M;&QY9&)G+FEN:0!(:7-T;W)Y`%!L=6=I;B!P871H``!<2&ED941E8G5G9V5R
M+FEN:0!/<'1I;VYS`$YO5V%R;FEN9P!087)A;65T97)S`#$P,#`P,#`P`"`\
M1F%I;&5D('1O(&%P<&QY('!R;W1E8W1I;VX@86=A:6YS="!)<T1E8G5G9V5R
M4')E<V5N=#X`0W)I=&EC86P@97)R;W(N`"`\06X@97)R;W(@;V-C=7)R960^
M`"`\1F%I;&5D('1O(&%P<&QY('!R;W1E8W1I;VX@86=A:6YS="!&:6YD5VEN
M9&]W+T5N=6U7:6YD;W=S/@`P("9$971A8VA\,2`F3W!T:6]N<WPR("9!8F]U
M=``Q("9/<'1I;VYS?#(@)D%B;W5T`$1E8G5G06-T:79E4')O8V5S<U-T;W``
M1&5B=6=G97(@:&%S(&)E96X@<W5C8V5S<V9U;&QY(&1E=&%C:&5D+@!5;F%B
M;&4@=&\@9&5T86-H(&1E8G5G9V5R+@!9;W5R('-Y<W1E;2!N;W0@<W5P<&]R
M=',@1&5B=6=!8W1I=F50<F]C97-S4W1O<"!F=6YC=&EO;BX`66]U(&UU<W0@
M<F5S=&%R="!/;&QY1&)G(&9O<B!T:&4@8VAA;F=E<R!T;R!T86ME(&5F9F5C
M="X`(#Q&86EL960@=&\@87!P;'D@<')O=&5C=&EO;B!A9V%I;G-T(%1E<FUI
M;F%T95!R;V-E<W,^`&YT9&QL+F1L;`!.=%%U97)Y26YF;W)M871I;VY0<F]C
M97-S`"`\1F%I;&5D('1O(&%P<&QY('!R;W1E8W1I;VX@86=A:6YS="!5;FAA
M;F1L960@97AC97!T:6]N('1R:6-K<SX`4G1L4F%I<V5%>&-E<'1I;VX`(#Q&
M86EL960@=&\@87!P;'D@<')O=&5C=&EO;B!A9V%I;G-T($]U='!U=$1E8G5G
M4W1R:6YG(&5X<&QO:70^````````````````````58OL@\3H5X-E_`!D_S4`
M````CT7HQT7L)!0`$,=%\,H3`!"-1>ADHP````")9?2);?B+?0AF@3]-6G4.
M`W\\@3]010``=0/_1?S_=>ADCP4`````@WW\`'0^B[^``````WT(D(M'#(7`
M="T#10A0_W4,_Q44$``0A<!T!8/'%.OCBW\0`WT(D(L'A<!T"CE%$'0'@\<$
MZ_`S_XO'7\G"#`"-20!5B^Q2BU4,BT40_W((CX"X````_W(,CX#$````_W(0
MCX"T````N`````!:R<.-20#'!5`R`!"4````:%`R`!#_%4`0`!`+P'0,,\"#
M/6`R`!`"#Y3`PXO_@WPD"`%U"O]T)`2/!>0R`!`SP$#"#`"0:'DP`!#_="0(
M_Q40$``0N&P```##C4D`55-65X-\)!1L#X*<`@``Z)3___\+P`^$CP(``/]T
M)!B/!>@R`!`SP*/T,@`0H_@R`!"C_#(`$*,`,P`0HP0S`!"C"#,`$+LD,P`0
M:``$``!3:@#_%3`0`!`+P`^$2@(``(O(C8`C,P`0@#A<=`A(XOCI-0(``,8`
M`&B0$``04_\5&!``$`O`#X0>`@``4V@`!```4VBQ$``0:*40`!!HG1``$/\5
M.!``$`O`#X3Z`0``:+(0`!!3_Q48$``0"\`/A.8!``!3:@!J`&H`_Q5<$``0
MOB0[`!!3:B!6:+$0`!!HS!``$&C$$``0_Q4X$``0"\!T"X`^,74&_P7T,@`0
M4VH@5FBQ$``0:-80`!!HQ!``$/\5.!``$`O`=3=3:.$0`!!HUA``$&C$$``0
M_Q5<$``04VH@5FBQ$``0:-80`!!HQ!``$/\5.!``$(7`#X18`0``O_@R`!"S
M,3/M.!YU,/\5*!``$&H.:,`P`!!H&#``$&@`,``04.B/`0``"\!T!?X'1>L*
M:.H0`!#H)`$``#A>`G4$_D<$13A>!74$_D<(13A>!G4$_D<,13A>!W4$_D<0
M16H`_Q4T$``0B_@+[71?:"HP`!!H`#``$%=H]!H`$.@M!```"\!T/&@\,``0
M:``P`!!7:$0;`!#H%`0``(7`=2UH*C``$&@`,``05VCT&@`0Z#,&```+P'4*
M:"(1`!#HV0```&@R$0`0Z),````X7@%U7VA/,``0:`TP`!!7:#0=`!#HR0,`
M``O`=#QH7C``$&@-,``05VAX'0`0Z+`#``"%P'4M:$\P`!!H#3``$%=H-!T`
M$.C/!0``"\!U"F@B$0`0Z'4```!H1Q$`$.@O````:(<P`!!J`&H`Z$$(``"#
MQ`QHG3``$&K_:@#H,`@``(/$##/`ZP,SP$A?7EM=PY!5B^R#Q(!65[YY,``0
MC7V`N0T```#\\Z2+=0A!@'PQ_P!U^/.DC46`4&H!:@#H[@<``(/$#%]>R<($
M`)!J$&AY,``0_W0D#/\UZ#(`$/\5;!``$,($`(O_58OL@\3@4U97_W4,_Q4T
M$``0"\!T.?]U$%#_%3P0`!`+P'0KB]B+?1AJ`%>-1>!04_]U"/\52!``$`O`
M=!&+SXUUX(M]%/SSIG0",]N+PU]>6\G"%`"+_U6+[(/$_&H`_W44_W40_W4,
M_W4(_Q4<$``0"\!U18U%_%!J!/]U%/]U#/]U"/\55!``$`O`="QJ`/]U%/]U
M$/]U#/]U"/\5'!``$%"-1?Q0_W7\_W44_W4,_W4(_Q54$``06,G"$`"0BT0D
M!`O`=2Z#/0@S`!``=!%HA!$`$/]T)`S_%1`0`!#K#VBB$0`0_W0D#/\5$!``
M$#/`0.L",\##C4D`58OLBT4("\`/A<(```"+10P+P'5Y:``P`!#_%300`!!H
MMA$`$%#_%3P0`!`+P'12@SWL,@`0``^$DP```(,]\#(`$``/A88```#_->PR
M`!#_T`O`="#_!?`R`!!J0&AY,``0:,T1`!#_->@R`!#_%6P0`!#K"FCV$0`0
MZ&C^___K3F@1$@`0Z%S^___K0H/X`74@:@!HK!D`$/\UZ#(`$&@L`0``_S7D
M,@`0_Q5\$``0ZQV#^`)U&&I`:'DP`!!H]C``$/\UZ#(`$/\5;!``$,G#B_\S
MP*/L,@`0H_`R`!"C&#,`$*,,,P`0HQ`S`!"C%#,`$,.-20!5B^Q35HM%##T0
M`0``=!<]$0$``'0^@_@0#X2J````,\#IV````(,E'#,`$`"[)#L`$+YG````
M@#LQ=0QJ`5;_=0C_%8`0`!!#1H/^;W7HZ:<```"+11!F@_AF=%MF@_AE=;R[
M)#L`$+YG````5O]U"/\5<!``$(/X`74%Q@,QZP/&`S!#1H/^;W7BQ@,`:"0S
M`!!H)#L`$&C6$``0:,00`!#_%5P0`!"%P'1/QP4<,P`0`0```.M#:@!J`&H0
M_W4(_Q5H$``0ZS*#/?0R`!`!=!Z#/1PS`!`!=15J0&AY,``0:$L2`!#_=0C_
M%6P0`!!J`/]U"/\5>!``$#/`0%Y;R<(0`%6+[/]U$/\5-!``$/]U%%#_%3P0
M`!"%P'0C4/]U$/]U#.BJ^/__A<!T$VH$C54(4E#_%2@0`!!0Z"/]___)PA``
MC4D`58OL4XM="(D=(#,`$/]U#%/_%5@0`!"#/?`R`!``="G'`P4```"A[#(`
M$(E#!&H7Z&,$``"#Q`0+P'0#B4,(QT,,`P$``#/`0%O)P@@`B_]5B^S_=0B/
M!>PR`!"!?1`"``$`#X7?````H2`S`!"#.`$/A=$```"#/?@R`!`!=0C_=0CH
MU````(,]_#(`$`!T)8,]##,`$`!U'/]U".@>`@``"\!U"FB$$@`0Z+S[____
M!0PS`!"#/0`S`!``=$"#/1`S`!``=3=HT3$`$&@R````:+PQ`!!H`#``$&C%
M$@`0:+L2`!#HS0(```O`=0IHWQ(`$.AS^____P40,P`0@ST$,P`0`'1`@ST4
M,P`0`'4W:#<R`!!H50```&CP,0`0:``P`!!H(!,`$&B[$@`0Z(0"```+P'4*
M:#(3`!#H*OO___\%%#,`$/]U$/]U#/]U"/\5)!``$,G"#`"058OL@\3X4_]U
M"&H`:CC_%400`!`+P'1[B47\:A?H&@,``(/$!`O`=&%0Z`<#``"#Q`0+P'14
MBYBL`P``@\,P:@!J!(U%^%!3_W7\_Q5($``0"\!T-8M=^(/#`FH`:@&-1?A0
M4_]U_/\52!``$`O`=!F`??@`=!/&1?@`:@&-1?A04_]U_.@V^____W7\_Q4@
M$``06\G"!`!5B^R#Q/S_=1#_%300`!#_=110_Q4\$``0A<!T*(E%_/]U"/]U
M$/]U#.AJ]O__A<!T$VH$C57\4E#_%2@0`!!0Z./Z___)PA``C4D`58OLBT4(
M.P7H,@`0=2/_=0QH)#<`$/\5$!``$`O`=!''!1@S`!`!````N+$0`!#K`XM%
M#%#_=0C_%600`!#)P@@`B_]5B^R+10@[!>@R`!!U&8,]&#,`$`%U$&@D-P`0
M_W4,_Q40$``0ZP__=1#_=0S_=0C_%700`!#)P@P`B_]5B^R#Q/Q3_W4(:@!J
M./\51!``$`O`#X35````B47\:A)HT#``$&AM,``0:``P`!!0Z,[Y__\+P'4A
M:A)HY#``$&AM,``0:``P`!#_=?SHL?G__X7`#X2+````@\`0HZLQ`!",#:\Q
M`!"-6/;_%2P0`!"CF#$`$&I`:``0``!H'0```&H`_W7\_Q5,$``0"\!T5*.U
M,0`0C`VY,0`0:@!H'0```&B4,0`04/]U_/\5'!``$`O`=!=H!P```&BT,0`0
M4_]U_.B2^?__A<!U&&@`@```:@#_-;4Q`!#_=?S_%5`0`!`SP%#_=?S_%2`0
M`!!86\G"!`"+_U6+[(/$^%-6:A3HT0```(/$!`O`#X2S````B47\_W4(_Q4T
M$``0_W4,4/\5/!``$`O`#X25````B]B+31R)`?]U$/\5-!``$%/_=0A0Z(+T
M__\+P'1WB_!J`&H$C47X4%;_=?S_%4@0`!`+P'1?.5WX=5IJ0&@`$```_W48
M:@#_=?S_%4P0`!`+P'1!B47X:@#_=1C_=110_W7\_Q4<$``0"\!T$VH$C47X
M4%;_=?SHL/C__X7`=15H`(```&H`_W7X_W7\_Q50$``0,\!>6\G"&`#,_R4(
M$``0_R4$$``0_R4`$``0S,Q((`````````````#T(```9!```/0?````````
M`````'HB```0$```Y!\`````````````B"(````0````````````````````
M`````````%@``(`U``"``@``@`````!N(@``8B(``%8B``!`(@```"$```XA
M```D(0``."$``$XA``!D(0``>"$``)0A``"F(0``MB$``,0A``#8(0``ZB$`
M`/HA```.(@``(B(```````#B(```TB```,0@``"N(```G"```)`@``!^(```
M;"`````````P`$-H96-K1&QG0G5T=&]N``"*`$1I86QO9T)O>%!A<F%M00"M
M`$5N9$1I86QO9P!*`4=E=%=I;F1O=U1E>'1!``!R`4ES1&QG0G5T=&]N0VAE
M8VME9```G0%-97-S86=E0F]X00#B`5-E;F1-97-S86=E00``(@)39717:6YD
M;W=497AT00``=7-E<C,R+F1L;```&@!#;&]S94AA;F1L90`A`$-O;G1I;G5E
M1&5B=6=%=F5N=```VP!'971#=7)R96YT4')O8V5S<P#<`$=E=$-U<G)E;G10
M<F]C97-S260`!P%'971-;V1U;&5&:6QE3F%M94$```D!1V5T36]D=6QE2&%N
M9&QE00``&P%'9710<FEV871E4')O9FEL95-T<FEN9T$``!\!1V5T4')O8T%D
M9')E<W,``%H!1V5T5F5R<VEO;D5X00#1`4]P96Y0<F]C97-S`/H!4F5A9%!R
M;V-E<W--96UO<GD`@@)6:7)T=6%L06QL;V-%>```A`)6:7)T=6%L1G)E945X
M`(<"5FER='5A;%!R;W1E8W1%>```C`)786ET1F]R1&5B=6=%=F5N=`"C`E=R
M:71E4')I=F%T95!R;V9I;&53=')I;F=!``"G`E=R:71E4')O8V5S<TUE;6]R
M>0``M0)L<W1R8V%T00``N0)L<W1R8VUP:4$`NP)L<W1R8W!Y00``:V5R;F5L
M,S(N9&QL``!/;&QY1&)G+D5810``````````````````````$CN"0@````#Z
M(@```0````4````%````R"(``-PB``#P(@``M!@``)04``"L%```>!@``(@9
M```+(P``'B,``"\C``!`(P``42,``````0`"``,`!`!(:61E1&5B=6=G97(N
M9&QL`%]/1$)'7U!L=6=I;F%C=&EO;@!?3T1"1U]0;'5G:6YD871A`%]/1$)'
M7U!L=6=I;FEN:70`7T]$0D=?4&QU9VEN;65N=0!?3T1"1U]0;'5G:6YR97-E
M=```````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````:V5R;F5L,S(N9&QL`'5S97(S,BYD
M;&P`27-$96)U9V=E<E!R97-E;G0`5V%I=$9O<D1E8G5G179E;G0`0V]N=&EN
M=65$96)U9T5V96YT`%-E=%=I;F1O=U1E>'1!`$=E=%=I;F1O=U1E>'1!`$]P
M96Y0<F]C97-S`$AI9&4@1&5B=6=G97(`2&ED92!$96)U9V=E<B!V,2XR+C-F
M`"`@0V]P>7)I9VAT("AC*2`R,#`U(&)Y($%S=&5R:7@`C4D`9*$8````BT`P
M#[9``L.+_U6+[(/L((M%$%:)1?B+10PS]HO_58OL@^P@BT40B47XBT4,5C/V
M2&ED92!$96)U9V=E<B!V,2XR+C-F#0H-"E1H:7,@<&QU9VEN(&%L;&]W<R!T
M;R!H:61E(&1E8G5G9V5R#0IF<F]M($ES1&5B=6=G97)0<F5S96YT($%022!F
M=6YC=&EO;BX-"@T*0V]D960@8GD@07-T97)I>`T*#0I"=6EL="!O;B!-87D@
M,3$@,C`P-2!A="`R,#HP-#HQ.`"-20"+11`]`````'4%,\")11!6B47XBT4,
MZ@```````(U)`.H```````"0@WPD!/]U#8-\)`@'=08SP(E$)`2XD)"0D/]T
M)!3_="04_W0D%/]T)!3_="04_]#"%`"+_XM4)`2!.@8``4!U.H-Z!`!U-(-Z
M"`!U+H-Z$`)U*(M"&#/).TH4=!Z`/`$E=`6#P0'K\,="%`0```#H`````%B-
M2!*)2ABXD)"0D%+_T,($`#HM*0``````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M`````````````````````````````````````0`%````&```@```````````
M`````````0`L`0``,```@````````````````````0`)!```2````&!```#\
M`@````````````````````````$`__\``````0```,`(R)`+``````"D`)X`
M`````$@`:0!D`&4`(`!$`&4`8@!U`&<`9P!E`'(`(`!;`$\`<`!T`&D`;P!N
M`',`70````@`D`$``50`80!H`&\`;0!A````````````!``"```#`5`^`(L`
M,``.`&4```#__X``4P!A`'8`90````````````0``@```P%0<`"+`#``#@!F
M````__^``$,`;`!O`',`90````````````````````<``%`$``,`G`!L`/__
M_____X``4`!R`&\`=`!E`&,`=``@`&$`9P!A`&D`;@!S`'0`.@``````````
M``0````#@`%0#``0`'@`"@!G````__^``$D`<P!$`&4`8@!U`&<`9P!E`'(`
M4`!R`&4`<P!E`&X`=```````````````!`````.``5`,`!L`>``*`&@```#_
M_X``1@!I`&X`9`!7`&D`;@!D`&\`=P`O`$4`;@!U`&T`5P!I`&X`9`!O`'<`
M<P````````````0````#@`%0#``F`'@`"@!I````__^``%0`90!R`&T`:0!N
M`&$`=`!E`%``<@!O`&,`90!S`',````````````$````"8`!6!@`,P!D``H`
M:@```/__@`!-`&4`=`!H`&\`9``@`#$````````````$````"8`!6!@`/@!D
M``H`:P```/__@`!-`&4`=`!H`&\`9``@`#(````````````$`````X`!4`P`
M2P!X``H`;````/__@`!5`&X`:`!A`&X`9`!L`&4`9``@`&4`>`!C`&4`<`!T
M`&D`;P!N`"``=`!R`&D`8P!K`',````````````$`````X`!4`P`5@!X``H`
M;0```/__@`!/`'4`=`!P`'4`=`!$`&4`8@!U`&<`4P!T`'(`:0!N`&<`(`!E
M`'@`<`!L`&\`:0!T```````````````$`````X`!4`P`=P!X``H`;@```/__
M@`!$`&4`=`!A`&,`:```````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````$```Q`$``)@SGS/T,U8T7S1E-'$TB325-)\TSC35--HTWS3D-.DT[C3S
M-`$U$34F-2TU035&-4LU435>-64U>C5_-8@UC362-9@UIS6P-;4UNC7`-<HU
MSS74-=HUXS7H->TU\S4`-@XV%38:-A\V,S9D-F\V=#9Z-H@VC3:3-J$VIC:L
M-KHVQ#;3-M@VWC;L-O$V]S8%-PHW$#<>-R@W,C=#-VDWGS>I-Z\WQC?4-^XW
M)C@_.%<X;CB".(HXE#B;.*4XRCC0.-4XW#CF./,X`#D,.1,Y&#D>.20Y*SDW
M.4HY4#E;.6$Y;SET.7HY@#F+.9`YE3F:.9\YI#G4.=HY\#D0.A\Z.SI`.D4Z
M2CI0.EHZ;SIW.H`ZBCJ/.I@ZHSJX.L(ZXSK].@<[#3L;.TP[7CMM.WX[ASN;
M.Z8[K#NU.[T[QSO,.]$[UCOD.^\[]3O^.P8\$#P5/!H\'SPM/#@\1SQ@/)T\
MN3S?//,\_3PC/3P]1CU,/58]7SUN/8`]B#V0/9D]JCW$/=8]VSW@/?$]]CW[
M/1,^&3XB/B<^/CY'/DT^63YC/G$^BSZ4/J`^SC[8/O`^$C\P/TD_<S^"/X@_
MCC\`````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
D````````````````````````````````````````````````
`
end

Y respecto a todos los errores que tienen no se que les pasara , yo no tuve ningun problema , estuve 2 minutos para encontrar el serial y sin problemas y Wan_Kenobi ese es el serial , sigue intentando ...

Salu2 !


Título: Re: Otro Crack Me
Publicado por: Wan_Kenobi en 27 Febrero 2006, 22:15 pm
No se que pasará ese crackme no me reconoce ese serial, puede ser que se quede cargado en algún lugar de la memoria pero no lo veo como proceso activo, y el antidebugger tampoco me funciona , me sigue saliendo la misma ventana como que detecta el debugger, de todas formas hasta que no reinicie el pc no te comento nada más.

Gracias por todo. ;)


Título: Re: Otro Crack Me
Publicado por: Wan_Kenobi en 27 Febrero 2006, 22:43 pm
Bueno ya he resuelto todos los problemas los digo por pasos.

1º el Olly que tenía instalado era el 1.10 para XP y no tenía la opción de plugins , por lo tanto puse otro Olly pero bajado de otro lado, y he instalado el plugin que has puesto aquí en un principio no me funcionó pero ya luego sí.

2º He seguido tus pasos y la sorpresa fue cuando me dio otro serial diferente al que has puesto aquí, este es el que me ha funcionado y no el que tú has puesto.

password: XMqfJ?cX\quJNCg<

Así que sacad vuestras propias conclusiones.

Gracias por todo.

PD. El OllyDbg que tenía instalado tenía la interface modificada y le faltaba la opción de plugins etc etc. por eso tenía tantas dificultades para seguir muchos tutos, que sirva de ejemplo para que no hagais el ridículo como yo.


Título: Re: Otro Crack Me
Publicado por: - n0sEcReT - en 27 Febrero 2006, 23:26 pm
No te estaras confundiendo de crackme Wan_Kenobi , prueva descargar de vuelta el archivo , jajajaja una Confusión terrible tdo esto xDDD, pongamonos de acuerdo cual crackme es al final !!!


Salu2 !


Título: Re: Otro Crack Me
Publicado por: Wan_Kenobi en 28 Febrero 2006, 00:15 am
 ;D jajajaja has sembrado en mi la duda y lo he vuelto ha descargar y todo jajaja, efectivamente es el mismo , he seguido todos los pasos que has dado y me coincide todo al 100% excepto el serial que es diferente, pero funciona y sale el msg: "Felicitaciones, has pasado la prueba".


Título: Re: Otro Crack Me
Publicado por: - n0sEcReT - en 28 Febrero 2006, 02:25 am
Yo tambien lo descargue de vuelta y es el mismo que tuve siempre , el serial que tu dices no funciona , sigue andando el que saque yo  :rolleyes: ...

Pues es simple , todos los que se llan bajado el crack que posteen sus opiniones , jeje me da risa , es raro este crackme xDDDD.


Salu2!   

(http://img525.imageshack.us/img525/2071/crackraro4gd.gif)


Título: Re: Otro Crack Me
Publicado por: Crack_X en 28 Febrero 2006, 02:33 am
Eso es porque es un keygen para cada uno crea un serial distinto. Intenten averiguar como lo crea el serial  ;)


Título: Re: Otro Crack Me
Publicado por: - n0sEcReT - en 28 Febrero 2006, 05:31 am
Pues segun mi examen del crackme metiendome en las entra�as del mismo

(http://img495.imageshack.us/img495/7128/18hz.gif)  ;)

Eh visto las API que usaron para el crackme :

Código:
Private Declare Sub IsDebuggerPresent Lib "kernel32" ()

Private Declare Function WriteProcessMemory Lib "kernel32" (ByVal hProcess As Long, lpBaseAddress As Any, lpBuffer As Any, ByVal nSize As Long, lpNumberOfBytesWritten As Long) As Long

Private Declare Function ReadProcessMemory Lib "kernel32" (ByVal hProcess As Long, lpBaseAddress As Any, lpBuffer As Any, ByVal nSize As Long, lpNumberOfBytesWritten As Long) As Long

Como asi tambien como obtiene el serial el crackme usando la llamada al kernel32.dll  GetComputerNameA donde , segun sea el nombre de la PC va a ser un numero de serie valido.

Para comprovar esto , le cambie el nombre e mi PC 3 veces , usando como nombre las letras  A,B y C
aqui les dejo los resultados :

         Nombre PC                    Serial Valido
         
                  A                                   `hpx`hpx@HPX`hpx
                 
                  B                                    puz?DINSX]bglqv{
                 
                  C                                    `flrx>DJPV\bhntz
                 

Pueden provar ustedes mismos cambiandole el nombre como A B o C y poniendo los seriales que saque para cada letra o bien sacar el serial para el nombre de su PC  ;)

Al final Wan_Kenobi no era tan rara la cosa jeje solo no habiamos pensado en eso   ;D .

Con estos datos ya podemos hacer un keygen como dijo Crack_X , pero ahora no tengo ganas de explicar , quizas en otra  :P

Salu2! and Happy Cracking !  :D