It appears that you're running an Ad-Blocker. This site is monetized by Advertising and by ">User Donations; we ask that if you find this site helpful that you whitelist us in your Ad-Blocker, or make a ">Donation to help aid in operating costs.
Previous Thread
Next Thread
Print Thread
Rate This Thread
#26051 - 10/27/03 03:43 PM Reverse engineering challenge: I answered  
Joined: Aug 2003
Posts: 240
paradox Offline
paradox  Offline

Joined: Aug 2003
Posts: 240
New Zealand
reverse engineering is all about manipulating programs to do what you want.
e.g changing notepad to accept a bigger buffer and anything else you want..
What i've started you off on is serial fishing this is the best way to start
learning about debugging and deadlisting i'll explain it as we progress through
the tutorial..

w32dasm (debugger - good for deadlisting)
brain (not really required this time wink )
We begin by loading the program.. so we can check for error boxes and find
string refrences. Basically get a general idea of how the program works
and operates, in this case you just enter a serial and try register it..
Well we enter any random data we want '12t31t' for example..
then we click register shocked an error box we write this down and then close the program
now we have a string refrence to work with..
So we load up w32dasm and then click on Dissasmbler in the menu you choose to
open a file to dissasemble
find your program and open it.. you will see it decompiling etc and giving you
asm instructions when its done, it should look like this
Disassembly of File: ugnuno.exe
Code Offset = 00001000, Code Size = 00002000
Data Offset = 00004000, Data Size = 00001000

Number of Objects = 0004 (dec), Imagebase = 00400000h

Object01: .text RVA: 00001000 Offset: 00001000 Size: 00002000 Flags: 60000020
Object02: .rdata RVA: 00003000 Offset: 00003000 Size: 00001000 Flags: 40000040
Object03: .data RVA: 00004000 Offset: 00004000 Size: 00001000 Flags: C0000040
Object04: .rsrc RVA: 00005000 Offset: 00005000 Size: 00028000 Flags: 40000040

if you dont see something like that and you see wingdings you will have to change your font
again click on Dissasmbler in the menu you choose to
font >
and just choose a font smile now that that is out of the way we want to get all the string refrences
to get these you click on the button next to the printer icon it says strn ref in blue text
click on that and a dialog pops up.. he what do you know the silly programmer has a string refrence
to the answer :| thats how simple it was just checking string refrences smile next i will go more indepth
and make it so you actually have to get the serial number out of the program.. and of course there
will be a tut at the end of the week to guide you through if you can't find the time to search for answers

The wise make mistakes, the fools repeat them
When you have eliminated the impossible, that which remains, however improbable, must be the truth
Sponsored Links
#26052 - 11/25/03 05:32 PM Re: Reverse engineering challenge: I answered  
Joined: Oct 2002
Posts: 616
weeve Offline
UGN Super Poster
weeve  Offline
UGN Super Poster

Joined: Oct 2002
Posts: 616
The Beach
fun fun:) very informative. I was hoping this was on reverse social engineering, But there are many forms of engineering, and revere processes. Just as there are many names to a hacker, and many hackers who are un-named. Kinda like anyone on the human genome project is a hacker imo.

"Beware the Jabberwock, my son!
The jaws that bite, the claws that catch!
Beware the Jubjub bird, and shun
The frumious Bandersnatch!"

Member Spotlight
Portland, OR; USA
Posts: 7,202
Joined: February 2002
Show All Member Profiles 
Forum Statistics
Average Daily Posts0
Most Online1,567
Apr 25th, 2010
Latest Postings
by Cyrez on 12/16/17 09:19 AM
Okay WTF?
by HenryMiring on 09/27/17 08:45 AM
The History Thread...
by Gremelin on 08/11/17 07:11 PM
my old account still exists!
by Gremelin on 08/11/17 07:02 PM
My friend NEEDS your HELP!
by Lena01 on 07/21/17 07:06 AM
I'm having fun with this guy.
by gabithompson730 on 07/20/17 08:50 AM
I want to upgrade my phone
by gabithompson730 on 07/20/17 08:49 AM
Top Posters(All Time)
UGN Security 41,392
Gremelin 7,202
§intå× 3,255
SilentRage 1,273
Ice 1,146
pergesu 1,136
Infinite 1,041
jonconley 955
Girlie 908
unreal 860
Top Liked Users (All Time)
§intå× Likes: 3
Black Beard Likes: 1
Cold Sunn Likes: 1
Crime Likes: 1
Cyrez Likes: 1
fleshwound Likes: 1
Ghost Likes: 2
Gremelin Likes: 12
Ice Likes: 1
ninjaneo Likes: 1
Powered by UBB.threads™ PHP Forum Software 7.6.0
(Snapshot build 20170206)