Welcome to HBH! If you have tried to register and didn't get a verification email, please using the following link to resend the verification email.

Application 13


ghost's Avatar
0 0

Nice challenge, but a bit too easy again. Thanks for writing though system.

Lets have some tough ones :p


SySTeM's Avatar
-=[TheOutlaw]=-
20 0

Well, it managed to stump the majority of the people who tried it :p


ghost's Avatar
0 0

I HATE THAT GOD DAMN FUCKING BEEPING NOISE! ARGH!


ghost's Avatar
0 0

haha, just NOP it out :D


ghost's Avatar
0 0

Well… I'm kinda lost with thisone as well.

It spits out "Correct the password for HBH is <negative integer>, well done."

But if I insert that integer into the submit form of HBH it says "wrong password". Where do I start my searching for the real password? Should I look through the generation process (I think the PW is generated before I enter the password…)?

GreetZZ 3-R4Z0R


SySTeM's Avatar
-=[TheOutlaw]=-
20 0

3-R4Z0R wrote: Well… I'm kinda lost with thisone as well.

It spits out "Correct the password for HBH is <negative integer>, well done."

But if I insert that integer into the submit form of HBH it says "wrong password". Where do I start my searching for the real password? Should I look through the generation process (I think the PW is generated before I enter the password…)?

GreetZZ 3-R4Z0R

Yep, that'd be a good idea :p


What_A_Legend's Avatar
...Legend?
0 0

I done it, nice and simple just don't over complicate it.


lukem_95's Avatar
Member
0 0

i keygened it lol, i wrote two seperate programs and generated the right pass, cos im cool.

[EDIT]Ok i now see the problem, the negative int doesn't work on HBH :'([/EDIT]


jaggedlancer's Avatar
The Localhost Hacker
20 0

I still cant pass this god damn challenge…and i downloaded it on teh day it was out and im still scared of that BEEP :(


lukem_95's Avatar
Member
0 0

ok, in ollydbg, find the BEEP function (where it is called from the windows API and right click > Fill with NOPS, this kills it lol.

Anyone any further with the stupid int, i gave up last night :@


ghost's Avatar
0 0

This program is bugged and so it will never give you the correct password (or anything other than that minus number). However you can see what the password was ment to be by looking at the code.


ghost's Avatar
0 0

signed and unsigned integers. google for that, the app is not bugged, work fine.


lukem_95's Avatar
Member
0 0

ok, looking through all the calls theres one in particular that catches my eye the creates********() function.

am i on the right lines, for once the MSDN isnt helping too much.


ghost's Avatar
0 0

Larika wrote: signed and unsigned integers. google for that, the app is not bugged, work fine.


lukem_95's Avatar
Member
0 0

yeah i have, thats the long, short, unsigned etc in type, but the only difference is the range they cover, or the positive/negative bit.


ghost's Avatar
0 0

No, the program IS bugged. I tried to send an explination of this to system_meltdown, and just now Larika, but both their inboxes are full. empty your inbox Larika and I'll send you a full explination.


ghost's Avatar
0 0

RAZ3R wrote: No, the program IS bugged. I tried to send an explination of this to system_meltdown, and just now Larika, but both their inboxes are full. empty your inbox Larika and I'll send you a full explination.

The program is not bugged. There is a way of getting the right password, you just haven't found it yet.


SySTeM's Avatar
-=[TheOutlaw]=-
20 0

RAZ3R wrote: No, the program IS bugged. I tried to send an explination of this to system_meltdown, and just now Larika, but both their inboxes are full. empty your inbox Larika and I'll send you a full explination.

Uhm, my inbox can't be full :-/

I'm an exclusive member, so I get unlimited PMs, also, no the program ISN'T bugged, you just haven't worked it out properly.


ghost's Avatar
0 0

Meh, when you press preview when sending a message the username you're sending to gets deleted. Didn't realise this. I've sent it now.


ghost's Avatar
0 0

This app got me stumped. I entered the exact pass like the program would require without editing anything except a breakpoint and still it gives me that negative int as the correct pass for hbh.

The only time i found a postive int, I was filled with joy, untill I entered it and found out it was incorrect xD

Don't know what could be wrong with my approach as the code stays intact.


lukem_95's Avatar
Member
0 0

what did you do to get the positive int? any progress is good in my books, its got me totally dead.


ghost's Avatar
0 0

also i converted that negative number to back to binary and back to decimal again as if it was an unsigned integer, but that wasn't the answer either..


ghost's Avatar
0 0

lol i just realized how stupid that post was.. app 13 and 14 are the hardest.. and it's a topic that's hard to search for there aren't any decent articles tuts or even links and this section of the site is probably the only one that forces ppl to do all the learning outside the site (as opposed to basic, javascript, steg and other sections)

can someone point me to a page with decent tutorials i've been getting more interested in cracking lately but haven't found a place to start..


ghost's Avatar
0 0

I figured out how the password generating algorithm works and after a few tries I was able to get the correct password and the app told me 'Correct the pass…. blahblahblah' and it said the password was [edit]fucking idiot, don't post spoilers[/edit] wich of course isnt the password. what do I do next?