본문 바로가기

WARGAME/Reversing.Kr

Reversing kr CSHARP

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
= [0x02,0x8d,0x68,0x1e,0x0b,0x3f,0xde,0xff,0xFF0xFF10x150x170x9B20x150x900x1F0x8F0xFF,0xFF0xFF0x600x1E0x490x2D310x150x160x9B2,0x180x900x1F0x8F0xFF0xFF0xFF0x600x1E0x450x2D,310x150x160x9B20x160x900x1F0x8F0xFF0xFF,0xFF0x600x1E0x560x2D310x150x160x9B20x17,0x900x1F0x8F0xFF0xFF0xFF0x600x1E0x4C0x2D3,10x150x160x9B20x1E0xA0x900x1F0x8F0xFF0xFF,0xFF0x600x1E0x2B0x2D310x150x160x9B20x1D,0x900x1F0x8F0xFF0xFF0xFF0x600x1F0xF00xFF0xFF,0xFF0x2D310x150x160x9B20x190x900x1F0x8F,0xFF0xFF0xFF0x600x1E0x1C0x2D310x150x160x9B,20x1A0x900x1F0x8F0xFF0xFF0xFF0x600x1E0x30,0x2D310x150x160x9B20x1E80x900x1F0x8F0xFF,0xFF0xFF0x600x1F0xE10xFF0xFF0xFF0x2D310x15,0x160x9B20x1C0x900x1F0x8F0xFF0xFF0xFF0x60,0x1F0xED0xFF0xFF0xFF0x2D310x150x160x9B2,0x1E90x900x1F0x8F0xFF0xFF0xFF0x600x1F0xA2,0xFF0xFF0xFF0x2D310x150x160x9B20x1B0x90,0x1F0x8F0xFF0xFF0xFF0x600x1E0x740x2D310x15,0x160x9B0x29]
num = 0
 
 
print hex(a[18])
print a[35]
print a[52]
print a[69]
print a[87]
print a[124]
print a[141]
print a[159]
print a[179]
print a[200]
print a[220]  
 
print "\n"
print "\n"
 
for x in range(0,len(a)):
    a[x] += 1
    a[x] &= 0xFF
    num += a[x] & 0xFF
 
a[18= (num - 38) & 0xFF
a[35= (num - 3) & 0xFF
a[52= (num ^ 39) & 0xFF
a[69= (num - 21) & 0xFF
a[87= (71 - num) & 0xFF
a[124= (num ^ 114) & 0xFF
a[141= (num ^ 80) & 0xFF
a[159= (235 - num) & 0xFF
a[179= (106 + num) & 0xFF
a[200= (36 -num) & 0xFF
a[220= (num - 3) & 0xFF
 
print str(18+ "     ======   " + hex(a[18])
print str(35+ "     ======   " + hex(a[35])
print str(52+ "     ======   " + hex(a[52])
print str(69+ "     ======   " + hex(a[69])
print str(87)+ "     ======   " + hex(a[87])
print str(124+ "     ======   " + hex(a[124])
print str(141+ "     ======   " + hex(a[141])
print str(159+ "     ======   " + hex(a[159])
print str(179+ "     ======   " + hex(a[179])
print str(200+ "     ======   " + hex(a[200])
print str(220+ "     ======   " + hex(a[220])
 
for i in range(len(a)):
    print hex(a[i]).replace("0x",""),
cs


소스가 많이 더러움


이렇게 나오는데

1
2
3
4
5
6
7
8
9
10
11
12
print chr(16^74),
print chr(17^87),
print chr(33^77),
print chr(51^70),
print chr(68^29),
print chr(102^49),
print chr(51^117),
print chr(160^238),
print chr(144^241),
print chr(181^226),
print chr(238^163),
print chr(17^44),
cs

이걸 돌리면 값이 나오는데 그값을 base64로 디코딩



hack.py


test.py


test.txt


test11.txt






'WARGAME > Reversing.Kr' 카테고리의 다른 글

reversing kr autohotkey2  (0) 2016.03.30
reversing kr windows kernel  (0) 2015.05.14
Raversing kr HateIntel  (0) 2015.04.10
Reversing kr CSHOP  (0) 2015.04.10
Reversing kr Ransomware  (0) 2015.04.07