CrackMe« Practices for Newbies
PROJECT 5: zipfile.exe

Re: Re: Brute force attack wHat is it?
Monday, 15-Feb-99 13:48:23
    212.211.18.137 writes:

    Jeff,

    The nice thing about brute forcing is that it isn't just restricted to things like this. Imagine: you have a serial/name you want to reverse in some program only it is too difficult or time consuming to get to grips with. What do you do ? Here is one possibility: you have code typically like

    call pwdcheck
    or eax,eax
    jnz badguy

    or whatever. What you can do is make some program changes, depending on how the program works, to something like:

    call pwdcheck
    or eax,eax
    jz nowhere // make it loop to nowhere, or stop in some way
    inc pwd
    jmp tryagain // back to the call pwdcheck.

    Then let it run, until it starts to loop on the same place. The effect is that the program can be made to crack itself. Of course this can be set up in SoftIce when you get the idea, break in now and again to see how its going,etc...

    Cronos.


    Cronos


Message thread:

Brute force attack was successful (Dr. Zen) (13-Feb-99 22:26:29)

Back to main board