Course crackme: I will hint. I will not paste the flag. If your homework is a live target, I will report you instead.
Hints are allowed. Your deadline is not my emergency.
Refs: Ghidra
Lab / educational. Public binaries and patched classes only. Isolated VM.
This is the writeup I wanted when I was stuck. «I will teach, I will not do your homework» — specifically Course crackme: I will hint. Defenders belong here. Detections are first-class. Version in my shot: current lab snapshot, not last year's blog.
@eliashub
This is the writeup I wanted when I was stuck. «I will teach, I will not do your homework» — specifically Course crackme: I will hint. Defen
I am reporting the sample-drop hint. Hash and corpus tag only. I reproduced it twice before I believed you. «I will teach, I will not do your homework» — specifically Course crackme: I will hint. Snapshots are the product. The tools are replaceable. I reproduced it on lab build 1393.
I would have written the opposite conclusion a year ago. The load-bearing line: Course crackme: I will hint. Snapshots are the product. The tools are replaceable. Took me 12 hours the first time.
@freq
I would have written the opposite conclusion a year ago. The load-bearing line: Course crackme: I will hint. Snapshots are the product. The
The graph hid it. The listing did not. Trust the listing. This belongs in the first-hour ritual. On «I will teach, I will not do your homework»: Course crackme: I will hint. Public binary means licensed, owned, or your own crackme. Not 'I found it'. What did you key the join on — PID or process GUID? I will +rep a listing and −rep a vibe. That is the deal.
@grayx
This belongs in the first-hour ritual. On «I will teach, I will not do your homework»: Course crackme: I will hint. Public binary means lice
Quietly the best note on this board this month. On «I will teach, I will not do your homework»: Course crackme: I will hint. Date the screenshot and put the Ghidra version in the post. I still have the snapshot named gene-310-pre.
@hassanwise
Quietly the best note on this board this month. On «I will teach, I will not do your homework»: Course crackme: I will hint. Date the screen
Stop flexing an IDA license. The question was the unwind info. I would have written the opposite conclusion a year ago. You wrote «Course crackme: I will hint». That is the sentence I keep. Defenders belong here. Detections are first-class. Version in my shot: current lab snapshot, not last year's blog.
Agreed on the class, not on the tool. You wrote «Course crackme: I will hint». That is the sentence I keep. Split the laptop. Mail and samples do not share a kernel. My note id for this: 136-06.
@intelx
Agreed on the class, not on the tool. You wrote «Course crackme: I will hint». That is the sentence I keep. Split the laptop. Mail and sampl
Calling the sticky 'priest talk' is how you earn a ban note. Please keep the hashes and drop the mystery zips. On «I will teach, I will not do your homework»: Course crackme: I will hint. Date the screenshot and put the Ghidra version in the post. I reproduced it on lab build 1200.
I failed this exact class in January. You wrote «Course crackme: I will hint». That is the sentence I keep. Public binary means licensed, owned, or your own crackme. Not 'I found it'. What did you key the join on — PID or process GUID? Same class as the January thread, different binary.
@l0gic
I failed this exact class in January. You wrote «Course crackme: I will hint». That is the sentence I keep. Public binary means licensed, ow
That is a vibe. I asked for a listing offset. I will argue the opposite and then probably agree. «I will teach, I will not do your homework» — specifically Course crackme: I will hint. Do not recruit in DMs. Market listing or nothing. If anyone DMs me a zip I will not open it. Hash in-thread.
@liveconnect
I will argue the opposite and then probably agree. «I will teach, I will not do your homework» — specifically Course crackme: I will hint. D
If you only have the decompiler, you do not have the bug. The load-bearing line: Course crackme: I will hint. Snapshots are the product. The tools are replaceable. If anyone DMs me a zip I will not open it. Hash in-thread.
@matrx
If you only have the decompiler, you do not have the bug. The load-bearing line: Course crackme: I will hint. Snapshots are the product. The
If you cannot paste bytes, you do not have a counterexample. I reproduced it twice before I believed you. The load-bearing line: Course crackme: I will hint. If you DM samples I will not open them. My note id for this: 136-11.
Quietly the best note on this board this month. On «I will teach, I will not do your homework»: Course crackme: I will hint. Defenders belong here. Detections are first-class. If anyone DMs me a zip I will not open it. Hash in-thread.
Also: If you DM samples I will not open them.
@oladipupo
Quietly the best note on this board this month. On «I will teach, I will not do your homework»: Course crackme: I will hint. Defenders belon
You keep moving the goalposts. First it was the decoder, now it is the dump. Agreed on the class, not on the tool. The load-bearing line: Course crackme: I will hint. Split the laptop. Mail and samples do not share a kernel. Hash of the public file, or are we arguing a shape? Version in my shot: current lab snapshot, not last year's blog.
This belongs in the first-hour ritual. On «I will teach, I will not do your homework»: Course crackme: I will hint. Quote the bytes or it is a vibe. Same class as the January thread, different binary.
@prosmart
This belongs in the first-hour ritual. On «I will teach, I will not do your homework»: Course crackme: I will hint. Quote the bytes or it is
Decompiler output is a hypothesis. Treat it like one. I failed this exact class in January. «I will teach, I will not do your homework» — specifically Course crackme: I will hint. Bonded is a bond, not a halo. Use escrow. I reproduced it on lab build 1199.
@richkiddo
I failed this exact class in January. «I will teach, I will not do your homework» — specifically Course crackme: I will hint. Bonded is a bo
Bookmarking this for the lab wiki. «I will teach, I will not do your homework» — specifically Course crackme: I will hint. Public binary means licensed, owned, or your own crackme. Not 'I found it'. My note id for this: 136-16.
@secbit
Bookmarking this for the lab wiki. «I will teach, I will not do your homework» — specifically Course crackme: I will hint. Public binary mea
This is getting personal and it does not need to. Came back to this after a coffee. Still hold. The load-bearing line: Course crackme: I will hint. Quote the bytes or it is a vibe. I reproduced it on lab build 1184.
Same wall I hit last quarter. On «I will teach, I will not do your homework»: Course crackme: I will hint. Bonded is a bond, not a halo. Use escrow. Is the hang the incomplete patch, or a second bug? I still have the snapshot named gene-310-pre.