Pages

Wednesday, June 2, 2021

Reverse Engineering ELF for beginner : crackmes.one - 476f64's easyAF

 Hi All 


Here we are with another easy challenge from crackmes.one this time we are going to deal with an ELF file format : it s the executable file format for linux so you can download the challenge from this link : 

http://crackmes.one/crackme/5eae2d6633c5d47611746500


after unzipping the file in Linux machine (for me i use kali linux ) we have to check the executable with file command : 

 

 So it s a 64 bit ELF file with header( header not striped) then i m going to run readelf command to check headers and more details : 

 So even if you try to debug the program he will be able to detect the start of the program

you can run also readelf -a command to have more information about the file program headers, sections and segments headers : 


 

GLIBCXX it seems that our executable use C++ language it s time to run the program : 

 

 Nice the program request a password that we have to find so i suggest to use strings command before start debugging the program maybe we can find some useful information : 

  

We have some clear strings used in the executable file yeh that we can try as a password let's try :

 

 YeesπŸ˜‚πŸ˜‚πŸ˜‚πŸ˜‚ I think we have finished the challenge before to start debugging πŸ˜‹.

Thank you for reading and see you in the next challenge.


Kind regards 

OffensiveNoob

No comments:

Post a Comment

Offensive Lab : simple Format string challenge

 Hi All  Today i will write about a very easy challenge from Offensive LAB where you can solve it through using reverse engineering techniq...