Reverse Engineering Challenge - Find The Password

preview_player
Показать описание
In this video we reverse engineer a Windows binary to determine the correct password. This uses a very simple function to modify the user input before comparing it to a static password. Watch to figure out how I solved this challenge!

Download the binary here:

Follow me on social media:

Don't like videos? Check out my blog:

#reverseengineering #ghidra #reversingwithbailey
Рекомендации по теме
Комментарии
Автор

So there might be room to exploit the buffer overflow but I couldn't quite get it to work. In the video I mentioned that I didn't see a lot of A's on the stack. Well that's because the user_input is modified before it is stored on the stack in that for loop so I did corrupt the stack it just didn't hold the value I was expecting because of the modification. Again there might be something to this there might not. If you end up exploiting it let me know!

jaybailey