My CrackMe solving

Reverse Engineering Challenges
1

since no one replied my challenge Crack Me [?/10], i do it myself

What compiler

i use Exeinfo (SCRE plugin)
image %D0%90%D0%BD%D0%BD%D0%BE%D1%82%D0%B0%D1%86%D0%B8%D1%8F%202019-09-04%20193719

2 clue is a large number of strings go format

image

program written on Go.

Reversing with IDA

Load sample to ida, after few minutes you see this %D0%90%D0%BD%D0%BD%D0%BE%D1%82%D0%B0%D1%86%D0%B8%D1%8F%202019-09-04%20184512
What i going to do first is load this python script
image image
this better
image

image
23 line in decompiled code looks interesting, google it
image
Wails a framework for building desktop applications using Go & Web Technologies
let’s look at an example
image
find Run function
image
and xrefs at her
image
off_972CE0 address for higher-order functions
image
this is classic string compare function in Go
image
after decompile
image
here v2 is the length of the string, and hexadecimal values are the chunks of the string
image
finally get the key
image

image

2 Likes