🍀 Find Your Lucky Numbers! Crack this Assembly Challenge! 🍀
Ready to get lucky? In this reverse engineering challenge, we're on the hunt for the "lucky numbers" hidden within an assembly language binary. Join me as we dissect the code, analyze syscalls, and use a bit of algebra to unlock the secrets!
This video is your guide to mastering assembly analysis. We'll break down the binary step-by-step, revealing how to manipulate data, understand the DAA instruction, and ultimately, find those elusive lucky numbers to claim victory.
🔥 What will you uncover? 🔥
- Assembly language analysis techniques.
- Deciphering and using syscalls.
- Data manipulation in assembly.
- The mystery of the DAA instruction, revealed.
- How algebra can help you find your "lucky numbers".
⏱️ Video Breakdown: ⏱️
- 00:00 Introduction: Are you feeling lucky?
- 00:38 Initial Triage: Let's assess our chances.
- 01:14 Static Analysis in Ghidra: Reading the tea leaves.
- 01:45 Analyzing Syscalls: Following the lucky trail.
- 02:58 Modifying Data Fields: Changing our fortune?
- 03:35 Analyzing Another Syscall: Double the luck?
- 05:10 Analyzing main functionality: The heart of the challenge.
- 06:36 Add with Carry (ADC) Explanation: Adding to our luck.
- 07:40 Explaining the Mysterious DAA Instruction: Unlocking a secret.
- 14:20 Continuing with our Analysis: Pressing our luck.
- 16:04 Finding the Lucky Numbers: The moment of truth!
- 16:58 Using a bit of Algebra: The lucky formula.
- 17:58 Proving our Answer: Did we get lucky?
- 19:04 Getting the Flag: Strike it rich!
- 19:10 Conclusion: Was it skill or luck?
🔗 Resources for the Lucky: 🔗
- 32-bit Syscall Reference: https://syscalls32.paolostivanin.com/
- 64-bit Syscall Reference: https://blog.rchapman.org/posts/Linux_System_Call_Table_for_x86_64/
- Stack Overflow Answer: https://unix.stackexchange.com/questions/464858/pass-stdout-fd-to-read-system-call-but-it-still-works-fine
- Excellent DAA video: https://www.youtube.com/watch?v=Rl9QtvlsAMw
- Binary-coded decimal: https://en.wikipedia.org/wiki/Binary-coded_decimal
Resources:
- Download my VM here: https://drive.google.com/drive/folders/1SvyC1C2AkuaC-FNWvY0_Bhh-OhzZ5pJb?usp=sharing
- Download the binary here: https://www.crackmes.one/crackme/5e567e1d33c5d4439bb2dca0 (The binary is password protected: crackmes.one)
Connect with Me:
- Twitter: https://twitter.com/jaybailey216
- Mastodon: https://mastodon.social/@jaybailey216
- Instagram: [https://instagram.com/jaybailey_216?igshid=1