Wednesday, July 17, 2013

HTS app13

As you see the hint, to complete this application, you need to base on the time of execution.
- Bruteforce (1-999) each number.
- start with number 1, then number 2 and number 3.
- When you get 3 number, do the same with number 4 that will show you the password when all 4 numbers are matched.
Note: When i bruteforce number 4th, I have to wait forever before I realize that i need me to hit Any Key to confirm; hence, you need to take care this number.

Tuesday, July 16, 2013

HTS app11

This app is so ridiculous. After reading some hints, i got it when I maximize app

HTS App10

This application is very easy to get a password.
- open app10win with vbdecompiler lite
- you will notice there are three functions but you can see only 1 button, so there will be a hidden thing.
- with ollydbg, change the address of command 1 function to that hidden function, you will get the correct password

Monday, July 15, 2013

hackthissite application 5+6

With OllyDbg
- Search for important text
- Trace the code and carefully examine what is stored in stack.

hackthissite application 4

What i need is ollydbg and vb decompiler lite
- Open app4 with vb decompiler lite
- wait until it decompiles completely
-  looking for addresses of Command1_click and Command1_mousemove
- attach app4 with ollydbg and run it.
- find address of JUMP to Command1_mousemove function
- change it with JUMP to Comand1_click function
-done.

Saturday, July 13, 2013

realistic mission 15,16

what i've learnt today are:
- read source code carefully
- unzip zipped file with password without password with pkcrack
- $$var =>$($var)
- override php variable with post and get

Friday, February 22, 2013

vmware errror on fedora

use command below if you get error kernel hearders version were not found when running vmware (of course you've installed kernel-devel..) 
cp /usr/include/linux/version.h /lib/modules/3.7.2-204.fc18.x86_64/build/include/linux/
 
update patch for kernel 3.8.x
http://communities.vmware.com/thread/432897