CSAW 2013 Reversing 100

Reversing 100 CSAW 2013

Credit to Ryan

This challenge was fairly simple you are given a Windows PE. When you run the PE it opens a box titled flag and contains garbage characters.

When opening the program in IDA pro we noticed this line right away.

The executable checks if the program is being debugged and if it is it will print the key. All we had to do from there was run the program in Ida Pro with the Local Win32 debugger to see the message box that contains the key.

CSAW 2013 Reversing 100

Reversing 100 CSAW 2013

Credit to Ryan

This challenge was fairly simple you are given a .NET executable that prompts you for a password:

To see the password check function we used .NET reflector to view the source code. The source code is as follows:

All we needed to do to get the program to print the key is to find the result of num2 ^  num3 which is 13371337255. From here we put in 13371337255 and had the program print the key.