Tuesday, September 24, 2013

CSAW 2013 Reversing 100

Reversing 100 CSAW 2013

Credit to Ryan

This challenge was fairly simple you are given a Windows PE. When you run the PE it opens a box titled flag and contains garbage characters.

When opening the program in IDA pro we noticed this line right away.

The executable checks if the program is being debugged and if it is it will print the key. All we had to do from there was run the program in Ida Pro with the Local Win32 debugger to see the message box that contains the key.

No comments:

Post a Comment