运行分析
- 破解NAME和PASS
PE分析
- ASM程序,32位,无壳
静态分析&动态调试
- 找到关键字符串,进入关键函数
- 动态调试分析如上图
- 先把Name中Z替换为Y,z替换为y,9替换为8
- Serial = ‘2’ + (Name[i] + 1) + ‘3’ + (Name[i+1] + 1)…以此类推
算法分析
NAME = 'conce' # NAME最大为5位
PASS = '' # PASS最大位10位
for i in range(len(NAME)):
if NAME[i] == 'Z':
NAME_i = 'Y'
elif NAME[i] == 'z':
NAME_i = 'y'
elif NAME[i] == '9':
NAME_i = '8'
else:
NAME_i = NAME[i]
PASS += chr(ord(NAME_i) + 1) + chr(i+ord('a'))
print(NAME + '的PASS为:\n' +PASS)
- 写出算法,验证成功