Семинар по реверсу - Гришаев и Островной
This commit is contained in:
parent
453774dc91
commit
f69fa9a14b
3 changed files with 118 additions and 0 deletions
tasks/reverse/server
54
tasks/reverse/server/grishaev.c
Normal file
54
tasks/reverse/server/grishaev.c
Normal file
|
@ -0,0 +1,54 @@
|
||||||
|
#include <stdio.h>
|
||||||
|
#include <string.h>
|
||||||
|
#include <time.h>
|
||||||
|
#include <stdlib.h>
|
||||||
|
|
||||||
|
unsigned int MakeChecksum(unsigned char *buffer, int len)
|
||||||
|
{
|
||||||
|
unsigned int result;
|
||||||
|
|
||||||
|
result = 0;
|
||||||
|
for (int i = 0; i < len; i = i + 1) {
|
||||||
|
result = (result << 3 | result >> 0x1d) ^ buffer[i];
|
||||||
|
}
|
||||||
|
return result;
|
||||||
|
}
|
||||||
|
|
||||||
|
//0: [CHECKSUM] - 4 bytes
|
||||||
|
//[
|
||||||
|
//4: [TIME] - 4 bytes
|
||||||
|
//8: [PAYLOAD + HEADER LEN] - 1 byte
|
||||||
|
//9: [TYPE] - 1 byte
|
||||||
|
//10: [PAYLOAD LEN] - 1 byte
|
||||||
|
//11: [PAYLOAD]
|
||||||
|
//]
|
||||||
|
|
||||||
|
int main() {
|
||||||
|
unsigned char type = 0x2A;
|
||||||
|
unsigned char payload[] = "g1mm3_th3_k3y";
|
||||||
|
unsigned char payload_len = strlen(payload);
|
||||||
|
|
||||||
|
unsigned char *flag_payload = malloc(payload_len);
|
||||||
|
for (int i = 0; i < payload_len; ++i)
|
||||||
|
flag_payload[i] = payload[i] ^ 42;
|
||||||
|
|
||||||
|
unsigned char packet_len = payload_len + 7;
|
||||||
|
time_t create_time = time(NULL);
|
||||||
|
|
||||||
|
char *packet = calloc(payload_len + 0xb, sizeof(char));
|
||||||
|
|
||||||
|
memcpy(&packet[11], flag_payload, payload_len);
|
||||||
|
memcpy(&packet[10], &payload_len, 1);
|
||||||
|
memcpy(&packet[9], &type, 1);
|
||||||
|
memcpy(&packet[8], &packet_len, 1);
|
||||||
|
memcpy(&packet[4], &create_time, 4);
|
||||||
|
|
||||||
|
int crc = MakeChecksum(packet + 4, packet_len);
|
||||||
|
memcpy(packet, &crc, 4);
|
||||||
|
|
||||||
|
// Output
|
||||||
|
fwrite(packet, 1, payload_len + 0xb, stdout);
|
||||||
|
|
||||||
|
free(packet);
|
||||||
|
free(flag_payload);
|
||||||
|
}
|
64
tasks/reverse/server/ostrovnoi.c
Normal file
64
tasks/reverse/server/ostrovnoi.c
Normal file
|
@ -0,0 +1,64 @@
|
||||||
|
#include <stdio.h>
|
||||||
|
#define _GNU_SOURCE /* See feature_test_macros(7) */
|
||||||
|
#include <string.h>
|
||||||
|
#include <time.h>
|
||||||
|
#include <stdlib.h>
|
||||||
|
|
||||||
|
unsigned int MakeChecksum(unsigned char* param_1,unsigned long param_2)
|
||||||
|
{
|
||||||
|
unsigned int local_14;
|
||||||
|
unsigned long local_10;
|
||||||
|
|
||||||
|
local_14 = 0;
|
||||||
|
for (local_10 = 0; local_10 < param_2; local_10 = local_10 + 1) {
|
||||||
|
local_14 = (local_14 << 3 | local_14 >> 0x1d) ^ param_1[local_10];
|
||||||
|
}
|
||||||
|
return local_14;
|
||||||
|
}
|
||||||
|
//unsigned int MakeChecksum(unsigned char *buffer, int len)
|
||||||
|
//{
|
||||||
|
// unsigned int result;
|
||||||
|
//
|
||||||
|
// result = 0;
|
||||||
|
// for (int i = 0; i < len; i = i + 1) {
|
||||||
|
// result = (result << 3 | result >> 0x1d) ^ buffer[i];
|
||||||
|
// }
|
||||||
|
// return result;
|
||||||
|
//}
|
||||||
|
|
||||||
|
int* MakePacket(void *string,size_t str_len,char param_3)
|
||||||
|
{
|
||||||
|
unsigned int uVar1;
|
||||||
|
int* puVar2;
|
||||||
|
time_t tVar3;
|
||||||
|
|
||||||
|
puVar2 = (int*)calloc(1,str_len + 0xb);
|
||||||
|
/* Копируем из param_1 uVar2_size байт со сдвигом 11
|
||||||
|
байт от начала puVar2
|
||||||
|
*/
|
||||||
|
memcpy((void *)((long)puVar2 + 0xb),string,str_len);
|
||||||
|
*(char *)((long)puVar2 + 9) = param_3;
|
||||||
|
*(char *)((long)puVar2 + 10) = (char)str_len;
|
||||||
|
tVar3 = time((time_t *)0x0);
|
||||||
|
puVar2[1] = (int)tVar3;
|
||||||
|
*(char *)(puVar2 + 2) = (char)str_len + '\a';
|
||||||
|
uVar1 = MakeChecksum(puVar2 + 1,str_len + 7);
|
||||||
|
*puVar2 = uVar1;
|
||||||
|
return puVar2;
|
||||||
|
}
|
||||||
|
|
||||||
|
int main()
|
||||||
|
{
|
||||||
|
int* meow;
|
||||||
|
char* string = strdup("g1mm3_th3_k3y");
|
||||||
|
for (int i = 0; i < 13; i++)
|
||||||
|
{
|
||||||
|
string[i] = string[i] ^ 42;
|
||||||
|
}
|
||||||
|
meow = MakePacket(string, 13, 0x2A);
|
||||||
|
|
||||||
|
FILE* fp = fopen("out.txt", "w");
|
||||||
|
fwrite((void*)meow, 1, 24, stdout);
|
||||||
|
fclose(fp);
|
||||||
|
free(string);
|
||||||
|
}
|
BIN
tasks/reverse/server/srv
Executable file
BIN
tasks/reverse/server/srv
Executable file
Binary file not shown.
Loading…
Reference in a new issue