====== Labo 03 - Crackme ======

​

===== Crackme 1 =====

​

This crackme uses straight up ''strcmp'' to test the password.

​

**Solution:** noideawetheriamthegoodpassword

​

**Vulnerability:** Hardcoded Strings

===== Crackme 2 =====

​

This crackme uses a custom hashing algorithms to check the validity of the password. XORing all the bytes of the password together must equal to ''0x56''.

​

**Solution:** Multiples. ''aaaaaaaaV'', ''xXxOVOxXx'', any string with all the characters except ''V'' going in pairs

​

**Vulnerability:** Hash Collisions >_<

​

<uml>

:eax = argv[1];

:var1 = 0;

:var2 = 0;

:eax = strlen(argv[1]);

while (var1 < strlen(argv[1])

:var2 ^= argv[1][var1];

:var1++;

endwhile

if (var2 = 0x56) then

:win!;