Reverse Engineering Basics 

Holy sh..! I'm doing my first reverse engineering ctf now (on HTB), and after watching this, on the 48th minute mark, I finally understood how to get the password! The JMP trick is brilliant. So easy. Thank you for a brilliant explanation! Gonna keep watching.

Thank you for posting this. Very insightful!

Amazing Seminar, Loved The Presentation

*Audience:* What's a DWORD? *Presenter:* Punches in "7BD6 D7C2" into calculator. "There you go. _That_ is a DWORD! Everyone got that? Cool!" 🤣

Thank you this course is awsome to learn in just 2h

great work man, really liked it. subscribed for more, keep it going!

Very Nice Tutorial! Or Presentation. Thanks!

I just want to say thanks for this video.

Thanks for making this stuff

Where is app3 ? Its not in the zip folder

19:25 Introduction to assembly.

I learned this yesterday...I understand it a little....Hope after this video i know a little more

I can't see the jump line at all. What have I done wrong? The spacing between the dot and the hex opcode (where the jump line is supposed to exist) is also a bit smaller than the one showed in the video and I don't find any arrow to increase its size.

"I'm not scared of failing; I'm fucking lazy" - Me.

This is awesome

If I get protector as Armadillo(6.X-9,X), does it mean the software is packed with Armadillo?

Awesome !!!

Fun fact, instead of changing the logic from the jump instructions you can also alter the zero flag. It would have also been helpful to teach them how to unpack within the debugger.

can somebody explain to me what did he use detect it easy for in the 7th app ? i don't quite get what he did

Hi, could you add a link to neo editor? I've just tried to search in google, but I only found not official sites with this editor. They can be with malware.

Thank you!

Hi Sir. Can extend expire date of dongle emulator image with your tools?

thanx man.

I use a different technique that works any time. I insert a tag word "EDOARDO!" on the registration and than I pause the program and I search it into memory. When I found that I put an hard breakpoint (memory break W/R) to that area, so i ca go directly to the code that handles the string. Its easy with those little "crackme" but In a big commercial program is a different matter. There is obfuscatrion, anti debugger code etc etc

hi, how decompile app and rerun in android studio , is there any links ?

Is dumping a csgo cheat possible with IDA? I don’t have the DLL but I am trying to get it from the cheat loader and dnspy is not doing the trick.

Im not going to get too shook up over this guy being a newby, sure there were a few faux pauxs but i found the demos useful.

How do you know which type of software/method shown to reverse engineer to use?

cool!

If i have a demo program that gives 10 uses and also limits what the program outputs what would I do to expand this restriction? PM me for the application name if you can help me out please

Nibbles are quite useful when dealing with aslr entropy :)

Why does the ZIP folder of files and tools contain four (4) files infected with malware/viruses according to Symantec Endpoint Protection?

This is dated information but remains relevant for introducing beginners to reversing.

You can see the password on app 6 if you just look at the strings in the functions that was called, I saw it instantly. If you read the first letter of every string it says the password :P

How do you get malware from your own software exactly...?

Yeah, I've followed a bunch of programming tutorials and I run Linux and they seem to work okay except for *insert thing works for the original poster * doesn't work for me and I get 1-2 syntax errors and find solutions for the syntax then boom the program works.

how to remove anti debugger within the program?

Thank's for such a helpful video...Now i am lil bit more confident...Still n00b tho.

well I didn't look much since I only wanted to get a glimpse and this probably isn't it but really now.. who would hardcode a password into an app? :)

ahhhhh the hex editor way isnt working for me, ive changed the password and i still couldn't click on Submit (it didnt said "password is incorrect" it didnt let me clicked on it!) what should i do?

hey lost of fun, for once i could follow what was done.

yea maybe one day ı can join skidrow thanks for help

why i can't press submit button in app2? it gets blocked when i pass the cursor over it

This is so so good. It feels like reincartion of my cyber security career. Thank you so much. And Mate can you please upload the tools and files again? It's a 404 error

Are you still alive?? If you are add more videos. Expecting a lot from you

hi Dear, would you help to recover our PIN code on deapsea 7320 Generator?? it should be 4 decimal digits. for no limit trials. the code is recorded into hardware memory of the device. thanks alot.

What program is he using for the initial analysis ?

well it wont let download the files...

Only watched the app6 part. And your solution of just patching the program is rarely valid in these challenges. But that shit was so easy anyway. First of all, those strings are not "encoded". They're simply an array of letters that the app uses to construct messages to print. It's just picking out letters from it when printing stuff. The array might as well have been a-z. The password you have to enter is not stored anywhere. Nor is it any one password but is any 6 letter string matching a certain pattern. All possible passwords can be brute-forced easily, within a couple of minutes. It must be 6 characters, must consist of only lower case letters where each letter means a=1,b=2,c=3, etc. Adding the value of the letters, they must sum 44, and must have a product of 16,200. Valid passwords include: atiefc, daoofc, eitfca, fetica, fydccc, ioleba, jolcca, lreeca, releca, tifeca, yfdccc. There are a total of 2640 possible passwords.

When I tried to install immunity it complains it can't find python27.dll

need tutorial about virtual protect/alloc

I can't find string comparing in password can anyone help me how to bypass password

Is there a video on the topic that's not over 20 minutes?

hey a noob here ..but i love your videos.. im trynna download but the drive wont lemme .any idea how to download without it being flagged as malicious??

Czy jest możliwe złamanie programu który wymaga usb klucza podczas uruchamiania się????

app3 is missing!

怎么没人做中文的

can you change the mnemonics on any exectuable program? e.g. jne to jmp

hi my friend how can i reach you

Can you add a link to this DIE software? unless that's an acronym -_- Edit: Nvm, it's called Detect it easy... add that to the slide...

sir plz upload more

sure sounds like samy giving the speech

I cant seem to crack a program i am trying to can you do it for me ?

Anybody get a Trojan hit on App 7?

Please the app3.exe is missing!!!

The steganography challenge was disappointingly unrealistic.

please expand your acronyms.

I would like to get in touch with you about a project if you can provide me your email

*Resolution : 720p50fps* *Video : 10 fps*

Only watch this if you're serious about cracking software and willing to spend a LOT of time learning and searching. First off, most programs worth owning are packed with a packer that obfuscates certain sections of code and it's a bitch to deal with this problem because the packers are constantly changing. Secondly, most of the auto unpackers are not updated, nor are packer identifiers such as PEiD or DIE described in this tute. So you have to unpack manually and create your own tools- another pain in the ass. This is always a cat and mouse game between reverser and programmer. Back in the 1990's there were rarely packed programs and cracking was easy. Now it's not worth it and spending hours living your life inside a debugger.

i cracked the first app using notepad....

at time 1h 19m 59s. look at the first character in each string. it tells you the password. the first character of each string is "password: !GOOD!!the password is: round1WOGNG !!!!" so much for not decoding that. lol

Haha. Debugging by dummies. Sorry, meant to say, "Debugging for dummies." Although it's quite entertaining to see him fumble all over the assembler code. Is there more videos like this?

hi bro can u help me

hello 31337

No offense, but this is a tutorial by someone who has been mesing with assembly for 3 months only. And you see that

It took me 2mins to learn how to crack any software, I guess I am a genius.. Lol

568 people have put up with your first minute of empty air: that's ten hours of people's time you've just wasted. Maybe spare us all your rehearsal and just put the actual program up on RU-vid? Later: it turns out Ian really is just rehearsing, at the expense of us, his audience. Nobody has the right to do that. You should take this video down, and replace it with something worthwhile once you know what you're doing. I wish you well, you're obviously bright and capable. Come back when you're ready, OK?