Irregular Expressions:

canyoucrackit solution

1

December 17, 2011  12:13 AM

Can you crack it (Part 8)



Posted by: Dan O'Connor
can you crack it solution, canyoucrackit solution

There is a few things we are going to need to get this to work;

December 16, 2011  11:35 PM

Can you crack it (Part 7)



Posted by: Dan O'Connor
can you crack it, canyoucrackit solution

Here is the contents of the JS file.  The file explains exactly what we need to do.  Lets dig out some perl and see if we can write something to run this.

//--------------------------------------------------------------------------------------------------
//
// stage 2 of 3
//
//...


December 16, 2011  12:38 AM

Can you crack it (Part 6)



Posted by: Dan O'Connor
can you crack it solution, canyoucrackit solution

This would be the point where I would go get a cohort to do the debugging of the application for me, but since I don't have one and none of the tools I have been trying for the last couple days seem to be working.  We are going to link to one that is working. http://pastebin.com/bsHXs4PG Dr....


December 16, 2011  12:25 AM

Can you crack it (Part 5)



Posted by: Dan O'Connor
can you crack it solution, canyoucrackit solution

We now have our unicode.

QkJCQjIAAACR2PFtcCA6q2eaC8SR+8dmD/zNzLQC+td3tFQ4qx8O447TDeuZw5P+0SsbEcYR.78jKLw==
Here is something that should decode it for us.
#!/usr/bin/perl
use Compress::Zlib;

use MIME::Base64;

$new =...


December 13, 2011  4:40 PM

Can you crack it (Part 4)



Posted by: Dan O'Connor
can you crack it, can you crack it solution, canyoucrackit solution

I tried running the file.exe created, it does not appear to do anything.  It's important but I don't know what to do with it just yet. The thing I find odd was the hex was given in a png, that's worth checking out. I have both sets of files on my SIFT Workstation.  I will start with my...


December 13, 2011  12:35 PM

Can you crack it (Part 3)



Posted by: Dan O'Connor
can you crack it, canyoucrackit solution

Well it looks like I am late to the party, I went back to the site and it's closed. That's ok, we will keep going. If you have not figured out what is contained in the image, it's a....

> file test.exe
test.exe: DOS executable (COM)
I have recognized this from experience, if...


December 12, 2011  6:08 PM

Can you crack it (Part 2)



Posted by: Dan O'Connor
can you crack it solution, canyoucrackit solution, sans sift

First we need some tools. All of the tools I am thinking I will need you can download and install, but if you go get the SANS SIFT-KIT it should have everything you need. https://computer-forensics11.sans.org/community/download-sift-kit/2.1 ( You might need to register ) You can...


1

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to: