当前位置:网站首页>Crack the simple login system with NOP method
Crack the simple login system with NOP method
2022-06-21 06:54:00 【There is no sound in the wind】
Catalog
One . Crack the object
A simple login system ( Please test in a legal environment ).

Two . Preliminary analysis
After trying , We found that the login window has only three login opportunities .
Unsuccessful login each time , There will be “ user Wrong password also n Second chance ” Tips .

3、 ... and . use OD debug
OD: One 32 Bit assembly analysis debugger
OD website :OllyDbg Chinese station
First drag the login system into OD( Or use OD open ).

Enter the string search interface ( Right click — Chinese search engine — Intelligent search ).

By preliminary analysis , We get “ user Wrong password also n Second chance ” keyword , Try searching this string , So as to determine the relevant process .
ps: It is not recommended to search a string in a whole sentence , It is recommended to search for some keywords , Because the string display may be split into multiple lines .


Successfully found the relevant string , Double click this line to return to the debugging page .

Then start looking for key points .
Found a jump to the line before the key string , And the conditions hold , perform .
ps: The jump arrow shows Red Then the condition holds , Indicates execution ; The jump arrow is grayed out , Don't execute .

Look down again .
Found the second jump , Skip key strings directly , And the conditions hold , perform .

Compare the two jumps , We found that the first jump is the key jump , Because it skips " Landing successful " link .
We came to the first jump , Lower breakpoint ( Switch ).

Back to the system , No response after entering the password , The system is suspended .

In this case, you can directly execute the empty instruction , Invalidate a jump , Do the following .
( Right healthy - Binary system - use NDP fill )
、

Back to the system , You can log in directly .


边栏推荐
- 【GNN】GNN图神经网络工具箱的应用和matlab仿真
- 153-Solana创建PDA和存储
- 【input】输入框事件总结
- [JDBC from introduction to actual combat] JDBC basic customs clearance tutorial (comprehensive summary part I)
- Excel_ submit
- Pyg tutorial (3): neighbor sampling
- (programming exercises of various regular numbers) the prime number in the output range, the factorization prime factor of an integer, the maximum common divisor and minimum common multiple of two num
- 【转】刘润:不要和没有逻辑的人讨论业务
- 0-1 knapsack problem (violent recursion / dynamic programming)
- 布隆过滤器
猜你喜欢

TweenMax不规则几何图形背景带动画js特效

Understand this point

(programming exercises of various regular numbers) the prime number in the output range, the factorization prime factor of an integer, the maximum common divisor and minimum common multiple of two num

TweenMax示波器3d动画

Microphone loading animation

天气预报小程序源码/天气类微信小程序源码

156 rust and Solana environment configuration
![[JS] intercepting string](/img/8c/3b0f638c30e3665907dcbb9336acd8.png)
[JS] intercepting string

156-Rust和Solana环境配置

一文搞懂this指向
随机推荐
[graduation season] a brief talk on the learning experience before sophomore year
Innovation project training: Data crawling
Yield Guild Games 与 Walken 达成合作
Hamming code verification [simple and detailed]
153-Solana创建PDA和存储
[query the data in the third row of the data table]
[middle order traversal of binary tree based on stack] middle order traversal of binary tree + stack, spatial complexity of O (H)
[MySQL] database multi table operation customs clearance tutorial (foreign key constraint, multi table joint query)
Issue 6: which mainstream programming language should college students choose
Pyg tutorial (6): customizing the messaging network
集线器、交换机、路由器
关于#mysql#的问题,如何解决?
June training (day 21) - heap (priority queue)
2022年大学英语六级6月翻译
Excel_submit
Small program [phase I]
Issue 12: Spark zero foundation learning route
Modbus Poll v9.9.2 Build 1690 Modbus测试工具单文件版
Filtre Bloom
[MySQL] database function clearance Tutorial Part I (aggregation, mathematics, string, date, control flow function)