Application 6

[Monica]

It is highly suggested that you complete Basic missions before attempting Application missions.

If you need help with this mission, make sure you have a legitimate question. Questions like, "How can I find the password?" or "Where do I find the string?" is UNacceptable. Why? Because a.) You're stupid. b.) You obviously want to be spoonfed BECAUSE you're stupid or c.) You want to complete the mission for points because you think you can redeem them for a cheeseburger at McDonalds. I'll tell you what - below is a list of what you may need to know to complete many Application missions. Please note, not all are necessary to complete this particular mission.

In the end, we hope you do learn. That is the point of being here on HTS.

Knowledge May Be Required:
- Code Analysis/Hex-Editing
- ASM Knowledge
- Compiled Languages (i.e. C/C++, VB)
- Interpreted Languages (i.e. PHP, Perl)

Useful Tools:
- Ollydbg
- Decompiler

** P.S. Posting answers and/or spoilers (i.e. mission links, mission file names/gages, scripts/code) will DEFINITELY result in multiple warnings/bans.

The End.

[Defience]

So, what exactly are you trying to say?

[Desoxena]

So i'm very new to this so please bear with me; When doing this, what should I look at FIRST?

[fashizzlepop]

If you have completed 1-5, you would know where to look first. If you haven't, start at 1.

[SonicD007]

I just completed application 6 and I didn't really see much of a difference between application 5 and this. I solved them both the same way. I think I may have missed the learning portion of this exercise unless I learned it from application 5. Can someone PM me and clarify a little bit as to whether this exercise was about looking past "interesting CHAR values" useless information to find the answer or what? Appreciate any help. I really would like to learn as much as I can from these exercises. Thanks.

[cyberdrain]

I agree, the stack was very helpful in both, when you know which address to look for. Or is the point that we reverse the part where the value actually gets stored? Finding the password is a lot easier than finding the key generator part of the code. Did I do too little?

[atlas_fontaine]

The process used to get to the solution for this one seems exactly the same as that for application 5. Am I missing something here?

[strychnine]

yup, this is almost the same with app level 5 mission..understand the assemble instructions, you can solve this one..

[impulse_x]

Hi,

Using ollydb, I'm encountering what I see as "DB <code>" but it's executed as actual operating code, which
means something is amiss.

Is this supposed to happen?

[Edit:
When I opened app5win in ollydb (v2.0), I could find the "Please enter the password:"; but in app6win, it's
not found. When I hex edit it, I can clearly see the "Pleases enter the password:" string. I can see the "Invalid Password"
string in both the assembled and hexedit code.

After dissecting the code, I get a string. But it's not the right password. Can I pm someone with my process and
get some sort of understanding that I'm heading the right way?

2nd Edit:

Never mind. Completely missed a line of code. I now know the password.
Thanks

Ix

[Starman11]

well for me, as well as learning a bit of assembly and debugging, i think the bigger thing that i learned was that sometimes the password isn't always in plain form, if i had known that before, i would have passed the challenge much sooner. i feel like kicking myself in the arse, but hey, i learned something new

onto app 7... i'm getting more nervous as i progress onto more nitty gritty stuff