Compare commits
2 Commits
a2ba539192
...
6e27a8d443
Author | SHA1 | Date | |
---|---|---|---|
6e27a8d443 | |||
d73b9a5ace |
BIN
ABuggerCrackMe2/ABuggerCrackMe2.exe
Normal file
BIN
ABuggerCrackMe2/ABuggerCrackMe2.exe
Normal file
Binary file not shown.
23
ABuggerCrackMe2/keygen/keygen3.deps.json
Normal file
23
ABuggerCrackMe2/keygen/keygen3.deps.json
Normal file
@ -0,0 +1,23 @@
|
|||||||
|
{
|
||||||
|
"runtimeTarget": {
|
||||||
|
"name": ".NETCoreApp,Version=v8.0",
|
||||||
|
"signature": ""
|
||||||
|
},
|
||||||
|
"compilationOptions": {},
|
||||||
|
"targets": {
|
||||||
|
".NETCoreApp,Version=v8.0": {
|
||||||
|
"keygen3/1.0.0": {
|
||||||
|
"runtime": {
|
||||||
|
"keygen3.dll": {}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"libraries": {
|
||||||
|
"keygen3/1.0.0": {
|
||||||
|
"type": "project",
|
||||||
|
"serviceable": false,
|
||||||
|
"sha512": ""
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
BIN
ABuggerCrackMe2/keygen/keygen3.dll
Normal file
BIN
ABuggerCrackMe2/keygen/keygen3.dll
Normal file
Binary file not shown.
BIN
ABuggerCrackMe2/keygen/keygen3.exe
Normal file
BIN
ABuggerCrackMe2/keygen/keygen3.exe
Normal file
Binary file not shown.
19
ABuggerCrackMe2/keygen/keygen3.runtimeconfig.json
Normal file
19
ABuggerCrackMe2/keygen/keygen3.runtimeconfig.json
Normal file
@ -0,0 +1,19 @@
|
|||||||
|
{
|
||||||
|
"runtimeOptions": {
|
||||||
|
"tfm": "net8.0",
|
||||||
|
"frameworks": [
|
||||||
|
{
|
||||||
|
"name": "Microsoft.NETCore.App",
|
||||||
|
"version": "8.0.0"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"name": "Microsoft.WindowsDesktop.App",
|
||||||
|
"version": "8.0.0"
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"configProperties": {
|
||||||
|
"System.Reflection.Metadata.MetadataUpdater.IsSupported": false,
|
||||||
|
"System.Runtime.Serialization.EnableUnsafeBinaryFormatterSerialization": true
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
43
ABuggerCrackMe2/solve.txt
Normal file
43
ABuggerCrackMe2/solve.txt
Normal file
@ -0,0 +1,43 @@
|
|||||||
|
dnspy
|
||||||
|
|
||||||
|
DES Encrypt
|
||||||
|
key,iv: Encoding.ASCII.GetBytes("ABugger2");
|
||||||
|
加密结果以base64形式表示
|
||||||
|
|
||||||
|
检查Key文本框是否为空
|
||||||
|
检查DES加密(Key文本)==license文件内容
|
||||||
|
检查DES加密(license文件路径)=="DIYCtpqJYWygsw1V7MbQdyxPnWMKkR4/"
|
||||||
|
|
||||||
|
通过解密可得:
|
||||||
|
license文件需要放C:\CrackMes\File
|
||||||
|
其内容为DES加密的key的Base64,key和iv上面写了
|
||||||
|
|
||||||
|
|
||||||
|
private void btnCheck_Click(object sender, EventArgs e)
|
||||||
|
{
|
||||||
|
if (this.open.ShowDialog() == DialogResult.OK)
|
||||||
|
{
|
||||||
|
string fileName = this.open.FileName;
|
||||||
|
try
|
||||||
|
{
|
||||||
|
string text;
|
||||||
|
using (StreamReader streamReader = new StreamReader(fileName))
|
||||||
|
{
|
||||||
|
text = streamReader.ReadLine();
|
||||||
|
}
|
||||||
|
if (this.txtName.Text != "" && Form1.EncryptDES(this.txtName.Text) == text && Form1.EncryptDES(fileName) == "DIYCtpqJYWygsw1V7MbQdyxPnWMKkR4/")
|
||||||
|
{
|
||||||
|
this.lblMode.Text = "Trial mode";
|
||||||
|
this.lblMode.ForeColor = Color.Green;
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
MessageBox.Show("KeyFile is invalid");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
catch
|
||||||
|
{
|
||||||
|
MessageBox.Show("I can't open file! :(");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
51
ABuggerCrackMe2/source/keygen1.sln
Normal file
51
ABuggerCrackMe2/source/keygen1.sln
Normal file
@ -0,0 +1,51 @@
|
|||||||
|
|
||||||
|
Microsoft Visual Studio Solution File, Format Version 12.00
|
||||||
|
# Visual Studio Version 17
|
||||||
|
VisualStudioVersion = 17.11.35303.130
|
||||||
|
MinimumVisualStudioVersion = 10.0.40219.1
|
||||||
|
Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "keygen1", "keygen1\keygen1.csproj", "{D0E162E3-FC99-4405-BEE1-AB85D9D41DA9}"
|
||||||
|
EndProject
|
||||||
|
Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "keygen2", "keygen2\keygen2.csproj", "{2446CB50-1882-4219-9DB0-E7F5517E6E20}"
|
||||||
|
EndProject
|
||||||
|
Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "keygen3", "keygen3\keygen3.csproj", "{BC47A6DE-7F9D-4D65-A996-69FB778C95F3}"
|
||||||
|
EndProject
|
||||||
|
Global
|
||||||
|
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||||
|
Debug|Any CPU = Debug|Any CPU
|
||||||
|
Debug|x86 = Debug|x86
|
||||||
|
Release|Any CPU = Release|Any CPU
|
||||||
|
Release|x86 = Release|x86
|
||||||
|
EndGlobalSection
|
||||||
|
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||||
|
{D0E162E3-FC99-4405-BEE1-AB85D9D41DA9}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||||
|
{D0E162E3-FC99-4405-BEE1-AB85D9D41DA9}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||||
|
{D0E162E3-FC99-4405-BEE1-AB85D9D41DA9}.Debug|x86.ActiveCfg = Debug|x86
|
||||||
|
{D0E162E3-FC99-4405-BEE1-AB85D9D41DA9}.Debug|x86.Build.0 = Debug|x86
|
||||||
|
{D0E162E3-FC99-4405-BEE1-AB85D9D41DA9}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||||
|
{D0E162E3-FC99-4405-BEE1-AB85D9D41DA9}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||||
|
{D0E162E3-FC99-4405-BEE1-AB85D9D41DA9}.Release|x86.ActiveCfg = Release|x86
|
||||||
|
{D0E162E3-FC99-4405-BEE1-AB85D9D41DA9}.Release|x86.Build.0 = Release|x86
|
||||||
|
{2446CB50-1882-4219-9DB0-E7F5517E6E20}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||||
|
{2446CB50-1882-4219-9DB0-E7F5517E6E20}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||||
|
{2446CB50-1882-4219-9DB0-E7F5517E6E20}.Debug|x86.ActiveCfg = Debug|x86
|
||||||
|
{2446CB50-1882-4219-9DB0-E7F5517E6E20}.Debug|x86.Build.0 = Debug|x86
|
||||||
|
{2446CB50-1882-4219-9DB0-E7F5517E6E20}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||||
|
{2446CB50-1882-4219-9DB0-E7F5517E6E20}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||||
|
{2446CB50-1882-4219-9DB0-E7F5517E6E20}.Release|x86.ActiveCfg = Release|x86
|
||||||
|
{2446CB50-1882-4219-9DB0-E7F5517E6E20}.Release|x86.Build.0 = Release|x86
|
||||||
|
{BC47A6DE-7F9D-4D65-A996-69FB778C95F3}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||||
|
{BC47A6DE-7F9D-4D65-A996-69FB778C95F3}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||||
|
{BC47A6DE-7F9D-4D65-A996-69FB778C95F3}.Debug|x86.ActiveCfg = Debug|x86
|
||||||
|
{BC47A6DE-7F9D-4D65-A996-69FB778C95F3}.Debug|x86.Build.0 = Debug|x86
|
||||||
|
{BC47A6DE-7F9D-4D65-A996-69FB778C95F3}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||||
|
{BC47A6DE-7F9D-4D65-A996-69FB778C95F3}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||||
|
{BC47A6DE-7F9D-4D65-A996-69FB778C95F3}.Release|x86.ActiveCfg = Release|x86
|
||||||
|
{BC47A6DE-7F9D-4D65-A996-69FB778C95F3}.Release|x86.Build.0 = Release|x86
|
||||||
|
EndGlobalSection
|
||||||
|
GlobalSection(SolutionProperties) = preSolution
|
||||||
|
HideSolutionNode = FALSE
|
||||||
|
EndGlobalSection
|
||||||
|
GlobalSection(ExtensibilityGlobals) = postSolution
|
||||||
|
SolutionGuid = {01ED3EE8-E89A-4A27-AF68-EF2490CB6BD7}
|
||||||
|
EndGlobalSection
|
||||||
|
EndGlobal
|
144
ABuggerCrackMe2/source/keygen3/Form1.Designer.cs
generated
Normal file
144
ABuggerCrackMe2/source/keygen3/Form1.Designer.cs
generated
Normal file
@ -0,0 +1,144 @@
|
|||||||
|
namespace keygen3
|
||||||
|
{
|
||||||
|
partial class Form1
|
||||||
|
{
|
||||||
|
/// <summary>
|
||||||
|
/// Required designer variable.
|
||||||
|
/// </summary>
|
||||||
|
private System.ComponentModel.IContainer components = null;
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Clean up any resources being used.
|
||||||
|
/// </summary>
|
||||||
|
/// <param name="disposing">true if managed resources should be disposed; otherwise, false.</param>
|
||||||
|
protected override void Dispose(bool disposing)
|
||||||
|
{
|
||||||
|
if (disposing && (components != null))
|
||||||
|
{
|
||||||
|
components.Dispose();
|
||||||
|
}
|
||||||
|
base.Dispose(disposing);
|
||||||
|
}
|
||||||
|
|
||||||
|
#region Windows Form Designer generated code
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Required method for Designer support - do not modify
|
||||||
|
/// the contents of this method with the code editor.
|
||||||
|
/// </summary>
|
||||||
|
private void InitializeComponent()
|
||||||
|
{
|
||||||
|
textBox1 = new TextBox();
|
||||||
|
button1 = new Button();
|
||||||
|
button2 = new Button();
|
||||||
|
label1 = new Label();
|
||||||
|
button3 = new Button();
|
||||||
|
label3 = new Label();
|
||||||
|
label4 = new Label();
|
||||||
|
textBox3 = new TextBox();
|
||||||
|
SuspendLayout();
|
||||||
|
//
|
||||||
|
// textBox1
|
||||||
|
//
|
||||||
|
textBox1.Location = new Point(12, 31);
|
||||||
|
textBox1.Name = "textBox1";
|
||||||
|
textBox1.Size = new Size(305, 23);
|
||||||
|
textBox1.TabIndex = 0;
|
||||||
|
//
|
||||||
|
// button1
|
||||||
|
//
|
||||||
|
button1.Location = new Point(323, 12);
|
||||||
|
button1.Name = "button1";
|
||||||
|
button1.Size = new Size(115, 41);
|
||||||
|
button1.TabIndex = 1;
|
||||||
|
button1.Text = "Generate License";
|
||||||
|
button1.UseVisualStyleBackColor = true;
|
||||||
|
button1.Click += Button1_Click;
|
||||||
|
//
|
||||||
|
// button2
|
||||||
|
//
|
||||||
|
button2.Location = new Point(323, 59);
|
||||||
|
button2.Name = "button2";
|
||||||
|
button2.Size = new Size(115, 42);
|
||||||
|
button2.TabIndex = 1;
|
||||||
|
button2.Text = "Check";
|
||||||
|
button2.UseVisualStyleBackColor = true;
|
||||||
|
button2.Click += Button2_Click;
|
||||||
|
//
|
||||||
|
// label1
|
||||||
|
//
|
||||||
|
label1.AutoSize = true;
|
||||||
|
label1.Location = new Point(12, 13);
|
||||||
|
label1.Name = "label1";
|
||||||
|
label1.Size = new Size(29, 15);
|
||||||
|
label1.TabIndex = 2;
|
||||||
|
label1.Text = "Key:";
|
||||||
|
//
|
||||||
|
// button3
|
||||||
|
//
|
||||||
|
button3.Location = new Point(323, 107);
|
||||||
|
button3.Name = "button3";
|
||||||
|
button3.Size = new Size(115, 41);
|
||||||
|
button3.TabIndex = 3;
|
||||||
|
button3.Text = "Restart as Admin";
|
||||||
|
button3.UseVisualStyleBackColor = true;
|
||||||
|
button3.Click += Button3_Click;
|
||||||
|
//
|
||||||
|
// label3
|
||||||
|
//
|
||||||
|
label3.AutoSize = true;
|
||||||
|
label3.Location = new Point(242, 133);
|
||||||
|
label3.Name = "label3";
|
||||||
|
label3.Size = new Size(75, 15);
|
||||||
|
label3.TabIndex = 6;
|
||||||
|
label3.Text = "By Chenx221";
|
||||||
|
//
|
||||||
|
// label4
|
||||||
|
//
|
||||||
|
label4.AutoSize = true;
|
||||||
|
label4.Location = new Point(12, 74);
|
||||||
|
label4.Name = "label4";
|
||||||
|
label4.Size = new Size(49, 15);
|
||||||
|
label4.TabIndex = 7;
|
||||||
|
label4.Text = "License:";
|
||||||
|
//
|
||||||
|
// textBox3
|
||||||
|
//
|
||||||
|
textBox3.Location = new Point(12, 92);
|
||||||
|
textBox3.Name = "textBox3";
|
||||||
|
textBox3.Size = new Size(305, 23);
|
||||||
|
textBox3.TabIndex = 8;
|
||||||
|
//
|
||||||
|
// Form1
|
||||||
|
//
|
||||||
|
AutoScaleDimensions = new SizeF(7F, 15F);
|
||||||
|
AutoScaleMode = AutoScaleMode.Font;
|
||||||
|
ClientSize = new Size(446, 156);
|
||||||
|
Controls.Add(textBox3);
|
||||||
|
Controls.Add(label4);
|
||||||
|
Controls.Add(label3);
|
||||||
|
Controls.Add(button3);
|
||||||
|
Controls.Add(label1);
|
||||||
|
Controls.Add(button2);
|
||||||
|
Controls.Add(button1);
|
||||||
|
Controls.Add(textBox1);
|
||||||
|
FormBorderStyle = FormBorderStyle.FixedSingle;
|
||||||
|
MaximizeBox = false;
|
||||||
|
Name = "Form1";
|
||||||
|
Text = "KeyGen For ABuggerCrackMe2";
|
||||||
|
ResumeLayout(false);
|
||||||
|
PerformLayout();
|
||||||
|
}
|
||||||
|
|
||||||
|
#endregion
|
||||||
|
|
||||||
|
private TextBox textBox1;
|
||||||
|
private Button button1;
|
||||||
|
private Button button2;
|
||||||
|
private Label label1;
|
||||||
|
private Button button3;
|
||||||
|
private Label label3;
|
||||||
|
private Label label4;
|
||||||
|
private TextBox textBox3;
|
||||||
|
}
|
||||||
|
}
|
221
ABuggerCrackMe2/source/keygen3/Form1.cs
Normal file
221
ABuggerCrackMe2/source/keygen3/Form1.cs
Normal file
@ -0,0 +1,221 @@
|
|||||||
|
using System.Diagnostics;
|
||||||
|
using System.Runtime.InteropServices;
|
||||||
|
using System.Security.Cryptography;
|
||||||
|
using System.Security.Principal;
|
||||||
|
using System.Text;
|
||||||
|
|
||||||
|
namespace keygen3
|
||||||
|
{
|
||||||
|
public partial class Form1 : Form
|
||||||
|
{
|
||||||
|
[DllImport("user32.dll", SetLastError = true, CharSet = CharSet.Unicode)]
|
||||||
|
static extern IntPtr FindWindow(string? lpClassName, string lpWindowName);
|
||||||
|
|
||||||
|
[DllImport("user32.dll", SetLastError = true, CharSet = CharSet.Auto)]
|
||||||
|
static extern IntPtr FindWindowEx(IntPtr hwndParent, IntPtr hwndChildAfter, string lpszClass, string lpszWindow);
|
||||||
|
|
||||||
|
[DllImport("user32.dll", SetLastError = true)]
|
||||||
|
private static extern bool EnumChildWindows(IntPtr hWndParent, EnumWindowsProc lpEnumFunc, IntPtr lParam);
|
||||||
|
|
||||||
|
[DllImport("user32.dll", SetLastError = true)]
|
||||||
|
static extern IntPtr GetDlgItem(IntPtr hDlg, int nIDDlgItem);
|
||||||
|
|
||||||
|
[DllImport("user32.dll", CharSet = CharSet.Unicode, SetLastError = false)]
|
||||||
|
static extern IntPtr SendMessage(IntPtr hWnd, uint Msg, IntPtr wParam, StringBuilder? lParam);
|
||||||
|
|
||||||
|
[DllImport("user32.dll", CharSet = CharSet.Auto, SetLastError = false)]
|
||||||
|
static extern IntPtr SendMessage(IntPtr hWnd, uint Msg, IntPtr wParam, IntPtr lParam);
|
||||||
|
|
||||||
|
[DllImport("user32.dll", SetLastError = true)]
|
||||||
|
private static extern bool GetClassName(IntPtr hWnd, StringBuilder lpClassName, int nMaxCount);
|
||||||
|
|
||||||
|
[DllImport("user32.dll", SetLastError = true)]
|
||||||
|
private static extern bool GetWindowText(IntPtr hWnd, StringBuilder lpString, int nMaxCount);
|
||||||
|
|
||||||
|
const uint WM_SETTEXT = 0x000C;
|
||||||
|
const uint BM_CLICK = 0x00F5;
|
||||||
|
private delegate bool EnumWindowsProc(IntPtr hwnd, IntPtr lParam);
|
||||||
|
|
||||||
|
public Form1()
|
||||||
|
{
|
||||||
|
InitializeComponent();
|
||||||
|
UpdateWindowTitle();
|
||||||
|
}
|
||||||
|
|
||||||
|
private void UpdateWindowTitle()
|
||||||
|
{
|
||||||
|
Text += IsRunningAsAdministrator() ? " (Admin)" : " (Non-Admin)";
|
||||||
|
button3.Enabled = !IsRunningAsAdministrator();
|
||||||
|
}
|
||||||
|
|
||||||
|
private static bool IsRunningAsAdministrator()
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
var identity = WindowsIdentity.GetCurrent();
|
||||||
|
var principal = new WindowsPrincipal(identity);
|
||||||
|
return principal.IsInRole(WindowsBuiltInRole.Administrator);
|
||||||
|
}
|
||||||
|
catch
|
||||||
|
{
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private void Button1_Click(object sender, EventArgs e)
|
||||||
|
{
|
||||||
|
string value = textBox1.Text;
|
||||||
|
if (string.IsNullOrEmpty(value))
|
||||||
|
{
|
||||||
|
MessageBox.Show("Key不能为空");
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
byte[] bytes = Encoding.ASCII.GetBytes("ABugger2");
|
||||||
|
string result = DESEncrypt(value, bytes, bytes);
|
||||||
|
textBox3.Text = result;
|
||||||
|
|
||||||
|
string directoryPath = @"C:\CrackMes";
|
||||||
|
string filePath = Path.Combine(directoryPath, "File");
|
||||||
|
|
||||||
|
try
|
||||||
|
{
|
||||||
|
if (!Directory.Exists(directoryPath))
|
||||||
|
{
|
||||||
|
Directory.CreateDirectory(directoryPath);
|
||||||
|
}
|
||||||
|
|
||||||
|
File.WriteAllText(filePath, result);
|
||||||
|
MessageBox.Show("文件保存成功!");
|
||||||
|
}
|
||||||
|
catch (UnauthorizedAccessException)
|
||||||
|
{
|
||||||
|
MessageBox.Show("保存文件失败,请尝试以管理员身份运行应用程序。");
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
MessageBox.Show($"保存文件失败: {ex.Message}");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private void Button2_Click(object sender, EventArgs e)
|
||||||
|
{
|
||||||
|
string value = textBox1.Text;
|
||||||
|
if (string.IsNullOrEmpty(value))
|
||||||
|
{
|
||||||
|
MessageBox.Show("Key不能为空");
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
if (!File.Exists(@"C:\CrackMes\File"))
|
||||||
|
{
|
||||||
|
MessageBox.Show("许可证文件尚未生成");
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
AutoMode(value);
|
||||||
|
}
|
||||||
|
|
||||||
|
private void Button3_Click(object sender, EventArgs e)
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
string exePath = Application.ExecutablePath;
|
||||||
|
var processInfo = new ProcessStartInfo
|
||||||
|
{
|
||||||
|
FileName = exePath,
|
||||||
|
UseShellExecute = true,
|
||||||
|
Verb = "runas",
|
||||||
|
Arguments = ""
|
||||||
|
};
|
||||||
|
Process.Start(processInfo);
|
||||||
|
Application.Exit();
|
||||||
|
}
|
||||||
|
catch (System.ComponentModel.Win32Exception)
|
||||||
|
{
|
||||||
|
MessageBox.Show("权限提升请求被拒绝。");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
public static string DESEncrypt(string plainText, byte[] key, byte[] iv)
|
||||||
|
{
|
||||||
|
using var des = DES.Create();
|
||||||
|
des.Key = key;
|
||||||
|
des.IV = iv;
|
||||||
|
|
||||||
|
using var encryptor = des.CreateEncryptor(des.Key, des.IV);
|
||||||
|
var plainBytes = Encoding.UTF8.GetBytes(plainText);
|
||||||
|
using var memoryStream = new MemoryStream();
|
||||||
|
using var cryptoStream = new CryptoStream(memoryStream, encryptor, CryptoStreamMode.Write);
|
||||||
|
cryptoStream.Write(plainBytes, 0, plainBytes.Length);
|
||||||
|
cryptoStream.FlushFinalBlock();
|
||||||
|
return Convert.ToBase64String(memoryStream.ToArray());
|
||||||
|
}
|
||||||
|
|
||||||
|
public static string DESDecrypt(string encryptedText, byte[] key, byte[] iv)
|
||||||
|
{
|
||||||
|
using var des = DES.Create();
|
||||||
|
des.Key = key;
|
||||||
|
des.IV = iv;
|
||||||
|
|
||||||
|
using var decryptor = des.CreateDecryptor(des.Key, des.IV);
|
||||||
|
var encryptedBytes = Convert.FromBase64String(encryptedText);
|
||||||
|
using var memoryStream = new MemoryStream(encryptedBytes);
|
||||||
|
using var cryptoStream = new CryptoStream(memoryStream, decryptor, CryptoStreamMode.Read);
|
||||||
|
using var reader = new StreamReader(cryptoStream, Encoding.UTF8);
|
||||||
|
return reader.ReadToEnd();
|
||||||
|
}
|
||||||
|
|
||||||
|
private static IntPtr[] childHandles = new IntPtr[10];
|
||||||
|
private static int childCount = 0;
|
||||||
|
|
||||||
|
private static bool EnumChildWindowsProc(IntPtr hwnd, IntPtr lParam)
|
||||||
|
{
|
||||||
|
if (childCount >= childHandles.Length)
|
||||||
|
return false; // Stop enumeration if the array is full
|
||||||
|
|
||||||
|
childHandles[childCount++] = hwnd;
|
||||||
|
return true; // Continue enumeration
|
||||||
|
}
|
||||||
|
|
||||||
|
private static void AutoMode(string username)
|
||||||
|
{
|
||||||
|
string windowTitle = "ABuggerCrackMe#2";
|
||||||
|
IntPtr hWnd = FindWindow(null, windowTitle);
|
||||||
|
|
||||||
|
if (hWnd == IntPtr.Zero)
|
||||||
|
{
|
||||||
|
MessageBox.Show("窗口未找到");
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
//int usernameControlId = 0x402C4;
|
||||||
|
//int submitButtonId = 0x6028A;
|
||||||
|
//IntPtr usernameHwnd = GetDlgItem(hWnd, usernameControlId);
|
||||||
|
//IntPtr submitButtonHwnd = GetDlgItem(hWnd, submitButtonId);
|
||||||
|
|
||||||
|
//IntPtr usernameHwnd = FindWindowEx(hWnd, IntPtr.Zero, "Edit", string.Empty);
|
||||||
|
//IntPtr submitButtonHwnd = FindWindowEx(hWnd, IntPtr.Zero, "Button", string.Empty);
|
||||||
|
|
||||||
|
childCount = 0;
|
||||||
|
EnumChildWindows(hWnd, EnumChildWindowsProc, IntPtr.Zero);
|
||||||
|
if (childCount < 5)
|
||||||
|
{
|
||||||
|
MessageBox.Show("控件未找到");
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
IntPtr usernameHwnd = childHandles[4];
|
||||||
|
IntPtr submitButtonHwnd = childHandles[3];
|
||||||
|
|
||||||
|
if (usernameHwnd == IntPtr.Zero || submitButtonHwnd == IntPtr.Zero)
|
||||||
|
{
|
||||||
|
MessageBox.Show("控件未找到");
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
StringBuilder usernameToSet = new(username);
|
||||||
|
|
||||||
|
SendMessage(usernameHwnd, WM_SETTEXT, IntPtr.Zero, usernameToSet);
|
||||||
|
MessageBox.Show("请在稍后弹出的文件选框中选择C:\\CrackMes\\File文件");
|
||||||
|
SendMessage(submitButtonHwnd, BM_CLICK, IntPtr.Zero, IntPtr.Zero);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
120
ABuggerCrackMe2/source/keygen3/Form1.resx
Normal file
120
ABuggerCrackMe2/source/keygen3/Form1.resx
Normal file
@ -0,0 +1,120 @@
|
|||||||
|
<?xml version="1.0" encoding="utf-8"?>
|
||||||
|
<root>
|
||||||
|
<!--
|
||||||
|
Microsoft ResX Schema
|
||||||
|
|
||||||
|
Version 2.0
|
||||||
|
|
||||||
|
The primary goals of this format is to allow a simple XML format
|
||||||
|
that is mostly human readable. The generation and parsing of the
|
||||||
|
various data types are done through the TypeConverter classes
|
||||||
|
associated with the data types.
|
||||||
|
|
||||||
|
Example:
|
||||||
|
|
||||||
|
... ado.net/XML headers & schema ...
|
||||||
|
<resheader name="resmimetype">text/microsoft-resx</resheader>
|
||||||
|
<resheader name="version">2.0</resheader>
|
||||||
|
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
|
||||||
|
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
|
||||||
|
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
|
||||||
|
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
|
||||||
|
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
|
||||||
|
<value>[base64 mime encoded serialized .NET Framework object]</value>
|
||||||
|
</data>
|
||||||
|
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
|
||||||
|
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
|
||||||
|
<comment>This is a comment</comment>
|
||||||
|
</data>
|
||||||
|
|
||||||
|
There are any number of "resheader" rows that contain simple
|
||||||
|
name/value pairs.
|
||||||
|
|
||||||
|
Each data row contains a name, and value. The row also contains a
|
||||||
|
type or mimetype. Type corresponds to a .NET class that support
|
||||||
|
text/value conversion through the TypeConverter architecture.
|
||||||
|
Classes that don't support this are serialized and stored with the
|
||||||
|
mimetype set.
|
||||||
|
|
||||||
|
The mimetype is used for serialized objects, and tells the
|
||||||
|
ResXResourceReader how to depersist the object. This is currently not
|
||||||
|
extensible. For a given mimetype the value must be set accordingly:
|
||||||
|
|
||||||
|
Note - application/x-microsoft.net.object.binary.base64 is the format
|
||||||
|
that the ResXResourceWriter will generate, however the reader can
|
||||||
|
read any of the formats listed below.
|
||||||
|
|
||||||
|
mimetype: application/x-microsoft.net.object.binary.base64
|
||||||
|
value : The object must be serialized with
|
||||||
|
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
|
||||||
|
: and then encoded with base64 encoding.
|
||||||
|
|
||||||
|
mimetype: application/x-microsoft.net.object.soap.base64
|
||||||
|
value : The object must be serialized with
|
||||||
|
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
|
||||||
|
: and then encoded with base64 encoding.
|
||||||
|
|
||||||
|
mimetype: application/x-microsoft.net.object.bytearray.base64
|
||||||
|
value : The object must be serialized into a byte array
|
||||||
|
: using a System.ComponentModel.TypeConverter
|
||||||
|
: and then encoded with base64 encoding.
|
||||||
|
-->
|
||||||
|
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
|
||||||
|
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
|
||||||
|
<xsd:element name="root" msdata:IsDataSet="true">
|
||||||
|
<xsd:complexType>
|
||||||
|
<xsd:choice maxOccurs="unbounded">
|
||||||
|
<xsd:element name="metadata">
|
||||||
|
<xsd:complexType>
|
||||||
|
<xsd:sequence>
|
||||||
|
<xsd:element name="value" type="xsd:string" minOccurs="0" />
|
||||||
|
</xsd:sequence>
|
||||||
|
<xsd:attribute name="name" use="required" type="xsd:string" />
|
||||||
|
<xsd:attribute name="type" type="xsd:string" />
|
||||||
|
<xsd:attribute name="mimetype" type="xsd:string" />
|
||||||
|
<xsd:attribute ref="xml:space" />
|
||||||
|
</xsd:complexType>
|
||||||
|
</xsd:element>
|
||||||
|
<xsd:element name="assembly">
|
||||||
|
<xsd:complexType>
|
||||||
|
<xsd:attribute name="alias" type="xsd:string" />
|
||||||
|
<xsd:attribute name="name" type="xsd:string" />
|
||||||
|
</xsd:complexType>
|
||||||
|
</xsd:element>
|
||||||
|
<xsd:element name="data">
|
||||||
|
<xsd:complexType>
|
||||||
|
<xsd:sequence>
|
||||||
|
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||||
|
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
|
||||||
|
</xsd:sequence>
|
||||||
|
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
|
||||||
|
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
|
||||||
|
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
|
||||||
|
<xsd:attribute ref="xml:space" />
|
||||||
|
</xsd:complexType>
|
||||||
|
</xsd:element>
|
||||||
|
<xsd:element name="resheader">
|
||||||
|
<xsd:complexType>
|
||||||
|
<xsd:sequence>
|
||||||
|
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||||
|
</xsd:sequence>
|
||||||
|
<xsd:attribute name="name" type="xsd:string" use="required" />
|
||||||
|
</xsd:complexType>
|
||||||
|
</xsd:element>
|
||||||
|
</xsd:choice>
|
||||||
|
</xsd:complexType>
|
||||||
|
</xsd:element>
|
||||||
|
</xsd:schema>
|
||||||
|
<resheader name="resmimetype">
|
||||||
|
<value>text/microsoft-resx</value>
|
||||||
|
</resheader>
|
||||||
|
<resheader name="version">
|
||||||
|
<value>2.0</value>
|
||||||
|
</resheader>
|
||||||
|
<resheader name="reader">
|
||||||
|
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||||
|
</resheader>
|
||||||
|
<resheader name="writer">
|
||||||
|
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||||
|
</resheader>
|
||||||
|
</root>
|
17
ABuggerCrackMe2/source/keygen3/Program.cs
Normal file
17
ABuggerCrackMe2/source/keygen3/Program.cs
Normal file
@ -0,0 +1,17 @@
|
|||||||
|
namespace keygen3
|
||||||
|
{
|
||||||
|
internal static class Program
|
||||||
|
{
|
||||||
|
/// <summary>
|
||||||
|
/// The main entry point for the application.
|
||||||
|
/// </summary>
|
||||||
|
[STAThread]
|
||||||
|
static void Main()
|
||||||
|
{
|
||||||
|
// To customize application configuration such as set high DPI settings or default font,
|
||||||
|
// see https://aka.ms/applicationconfiguration.
|
||||||
|
ApplicationConfiguration.Initialize();
|
||||||
|
Application.Run(new Form1());
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
12
ABuggerCrackMe2/source/keygen3/keygen3.csproj
Normal file
12
ABuggerCrackMe2/source/keygen3/keygen3.csproj
Normal file
@ -0,0 +1,12 @@
|
|||||||
|
<Project Sdk="Microsoft.NET.Sdk">
|
||||||
|
|
||||||
|
<PropertyGroup>
|
||||||
|
<OutputType>WinExe</OutputType>
|
||||||
|
<TargetFramework>net8.0-windows</TargetFramework>
|
||||||
|
<Nullable>enable</Nullable>
|
||||||
|
<UseWindowsForms>true</UseWindowsForms>
|
||||||
|
<ImplicitUsings>enable</ImplicitUsings>
|
||||||
|
<Platforms>AnyCPU;x86</Platforms>
|
||||||
|
</PropertyGroup>
|
||||||
|
|
||||||
|
</Project>
|
BIN
ac_crackme_1.78/Crackme1.exe
Normal file
BIN
ac_crackme_1.78/Crackme1.exe
Normal file
Binary file not shown.
22
ac_crackme_1.78/RuleZ.txt
Normal file
22
ac_crackme_1.78/RuleZ.txt
Normal file
@ -0,0 +1,22 @@
|
|||||||
|
Crackme1.exe
|
||||||
|
Written in Visual Basic 6
|
||||||
|
Only numbers as passwd.
|
||||||
|
Everything is legal. No Rules :)
|
||||||
|
|
||||||
|
|
||||||
|
This Crackme is Written by Acid_Cool_178 and [The Bug Tracker]
|
||||||
|
We are great friends and newbies.
|
||||||
|
Acid_Cool_178 is a proud newbie member of Hellforge
|
||||||
|
The Bug Tracer haz no group, reason ?? no internet :(
|
||||||
|
|
||||||
|
In IRC our nick are Acid_Cool_178 : [AC_178] or |AC_178| and
|
||||||
|
The bug Tracker : [TBT] or |TBT|
|
||||||
|
Channel : #cracking4newbies #cracking and #coding
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
When you have cracked this crackme please send a e-mail to Acid_Cool_178 and tell him how you did it..
|
||||||
|
|
||||||
|
acid_cool_178@hotmail.com
|
||||||
|
|
||||||
|
Greetings too my VB book :)
|
34
ac_crackme_1.78/solve.txt
Normal file
34
ac_crackme_1.78/solve.txt
Normal file
@ -0,0 +1,34 @@
|
|||||||
|
代码量太少了
|
||||||
|
调试前前拿ida跑了下
|
||||||
|
然后密码就有了
|
||||||
|
2951
|
||||||
|
|
||||||
|
004023A9 | B9 04000280 | mov ecx,80020004 |
|
||||||
|
004023AE | B8 0A000000 | mov eax,A | eax:@BaseThreadInitThunk@12, 0A:'\n'
|
||||||
|
004023B3 | BB 08000000 | mov ebx,8 |
|
||||||
|
004023B8 | 66:81FE 870B | cmp si,B87 | <--
|
||||||
|
004023BD | 8B35 78104000 | mov esi,dword ptr ds:[<__vbaVarDup>] | 00401078:"阛鶲B<頞鶛鵒h 鶲愗隣斀颫浇颫"
|
||||||
|
004023C3 | 894D A4 | mov dword ptr ss:[ebp-5C],ecx |
|
||||||
|
004023C6 | 894D B4 | mov dword ptr ss:[ebp-4C],ecx |
|
||||||
|
004023C9 | 8945 9C | mov dword ptr ss:[ebp-64],eax | eax:@BaseThreadInitThunk@12
|
||||||
|
004023CC | 8945 AC | mov dword ptr ss:[ebp-54],eax | eax:@BaseThreadInitThunk@12
|
||||||
|
004023CF | C745 84 E41D4000 | mov dword ptr ss:[ebp-7C],crackme1.401DE4 | 401DE4:L"Crackme_1"
|
||||||
|
004023D6 | 899D 7CFFFFFF | mov dword ptr ss:[ebp-84],ebx |
|
||||||
|
004023DC | 8D95 7CFFFFFF | lea edx,dword ptr ss:[ebp-84] | edx:EntryPoint
|
||||||
|
004023E2 | 8D4D BC | lea ecx,dword ptr ss:[ebp-44] |
|
||||||
|
004023E5 | 75 3E | jne crackme1.402425 | 判断核心
|
||||||
|
004023E7 | FFD6 | call esi | success
|
||||||
|
004023E9 | 8D55 8C | lea edx,dword ptr ss:[ebp-74] | edx:EntryPoint
|
||||||
|
004023EC | 8D4D CC | lea ecx,dword ptr ss:[ebp-34] |
|
||||||
|
004023EF | C745 94 C41D4000 | mov dword ptr ss:[ebp-6C],crackme1.401DC4 | 401DC4:L"YOU DID IT"
|
||||||
|
004023F6 | 895D 8C | mov dword ptr ss:[ebp-74],ebx |
|
||||||
|
004023F9 | FFD6... | call esi |
|
||||||
|
0040240D | FF15 24104000 | call dword ptr ds:[<Ordinal#595>] |
|
||||||
|
00402413 | 8D55 9C... | lea edx,dword ptr ss:[ebp-64] | edx:EntryPoint
|
||||||
|
00402423 | EB 3C | jmp crackme1.402461 |
|
||||||
|
00402425 | FFD6 | call esi | Fail
|
||||||
|
00402427 | 8D55 8C | lea edx,dword ptr ss:[ebp-74] | edx:EntryPoint
|
||||||
|
0040242A | 8D4D CC | lea ecx,dword ptr ss:[ebp-34] |
|
||||||
|
0040242D | C745 94 FC1D4000 | mov dword ptr ss:[ebp-6C],crackme1.401DFC | 401DFC:L"Fucking Shit"
|
||||||
|
00402434 | 895D 8C | mov dword ptr ss:[ebp-74],ebx |
|
||||||
|
00402437 | FFD6 | call esi |
|
Loading…
Reference in New Issue
Block a user