DES算法

ida打开到main函数里面发现都是虚假控制流的混淆还不知道怎么去除先Shift

F12

看到success的同时还看到下面一大堆相同长度的十六进制字符串想到哈希hash

用插件Findcrypt看看

可以看到的确是使用了MD5加密算法同时看看这个md5是被谁调用了可以看到调用了俩次。

修改一下名字依次查看下

而sub_402370函数是main函数的最后一行sub_402370函数执行的最后就是比较并且输出success或error。

俩次md5

编写exp的思路就是对单字节进行俩次md5加密然后和enc进行验证如果验证通过就将字节存入字典中。

import

[14d89c38cd0fb23a14be2798d449c182,

a94837b18f8f43f29448b40a6e7386ba,

af85d512594fc84a5c65ec9970956ea5,af85d512594fc84a5c65ec9970956ea5,

10e21da237a4a1491e769df6f4c3b419,

a705e8280082f93f07e3486636f3827a,297e7ca127d2eef674c119331fe30dff,

b5d2099e49bdb07b8176dff5e23b3c14,

83be264eb452fcf0a1c322f2c7cbf987,a94837b18f8f43f29448b40a6e7386ba,

71b0438bf46aa26928c7f5a371d619e1,

a705e8280082f93f07e3486636f3827a,ac49073a7165f41c57eb2c1806a7092e,

a94837b18f8f43f29448b40a6e7386ba,

af85d512594fc84a5c65ec9970956ea5,ed108f6919ebadc8e809f8b86ef40b05,

10e21da237a4a1491e769df6f4c3b419,

3cfd436919bc3107d68b912ee647f341,a705e8280082f93f07e3486636f3827a,

65c162f7c43612ba1bdf4d0f2912bbc0,

10e21da237a4a1491e769df6f4c3b419,a705e8280082f93f07e3486636f3827a,

3cfd436919bc3107d68b912ee647f341,

557460d317ae874c924e9be336a83cbe,a705e8280082f93f07e3486636f3827a,

9203d8a26e241e63e4b35b3527440998,

10e21da237a4a1491e769df6f4c3b419,f91b2663febba8a884487f7de5e1d249,

a705e8280082f93f07e3486636f3827a,

d7afde3e7059cd0a0fe09eec4b0008cd,488c428cd4a8d916deee7c1613c8b2fd,

39abe4bca904bca5a11121955a2996bf,

a705e8280082f93f07e3486636f3827a,3cfd436919bc3107d68b912ee647f341,

39abe4bca904bca5a11121955a2996bf,

4e44f1ac85cd60e3caa56bfd4afb675e,45cf8ddfae1d78741d8f1c622689e4af,

3cfd436919bc3107d68b912ee647f341,

39abe4bca904bca5a11121955a2996bf,4e44f1ac85cd60e3caa56bfd4afb675e,

37327bb06c83cb29cefde1963ea588aa,

a705e8280082f93f07e3486636f3827a,23e65a679105b85c5dc7034fded4fb5f,

10e21da237a4a1491e769df6f4c3b419,

71b0438bf46aa26928c7f5a371d619e1,af85d512594fc84a5c65ec9970956ea5,

39abe4bca904bca5a11121955a2996bf]#

characters

abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789

combinations

hashlib.md5(hashlib.md5(plaintext.encode()).hexdigest().encode()).hexdigest()if

hash0

14d89c38cd0fb23a14be2798d449c182:

Original

a94837b18f8f43f29448b40a6e7386ba:

Original

af85d512594fc84a5c65ec9970956ea5:

Original

af85d512594fc84a5c65ec9970956ea5:

Original

10e21da237a4a1491e769df6f4c3b419:

Original

a705e8280082f93f07e3486636f3827a:

Original

297e7ca127d2eef674c119331fe30dff:

Original

b5d2099e49bdb07b8176dff5e23b3c14:

Original

83be264eb452fcf0a1c322f2c7cbf987:

Original

a94837b18f8f43f29448b40a6e7386ba:

Original

71b0438bf46aa26928c7f5a371d619e1:

Original

a705e8280082f93f07e3486636f3827a:

Original

ac49073a7165f41c57eb2c1806a7092e:

Original

a94837b18f8f43f29448b40a6e7386ba:

Original

af85d512594fc84a5c65ec9970956ea5:

Original

ed108f6919ebadc8e809f8b86ef40b05:

Original

10e21da237a4a1491e769df6f4c3b419:

Original

3cfd436919bc3107d68b912ee647f341:

Original

a705e8280082f93f07e3486636f3827a:

Original

65c162f7c43612ba1bdf4d0f2912bbc0:

Original

10e21da237a4a1491e769df6f4c3b419:

Original

a705e8280082f93f07e3486636f3827a:

Original

3cfd436919bc3107d68b912ee647f341:

Original

557460d317ae874c924e9be336a83cbe:

Original

a705e8280082f93f07e3486636f3827a:

Original

9203d8a26e241e63e4b35b3527440998:

Original

10e21da237a4a1491e769df6f4c3b419:

Original

f91b2663febba8a884487f7de5e1d249:

Original

a705e8280082f93f07e3486636f3827a:

Original

d7afde3e7059cd0a0fe09eec4b0008cd:

Original

488c428cd4a8d916deee7c1613c8b2fd:

Original

39abe4bca904bca5a11121955a2996bf:

Original

a705e8280082f93f07e3486636f3827a:

Original

3cfd436919bc3107d68b912ee647f341:

Original

39abe4bca904bca5a11121955a2996bf:

Original

4e44f1ac85cd60e3caa56bfd4afb675e:

Original

45cf8ddfae1d78741d8f1c622689e4af:

Original

3cfd436919bc3107d68b912ee647f341:

Original

39abe4bca904bca5a11121955a2996bf:

Original

4e44f1ac85cd60e3caa56bfd4afb675e:

Original

37327bb06c83cb29cefde1963ea588aa:

Original

a705e8280082f93f07e3486636f3827a:

Original

23e65a679105b85c5dc7034fded4fb5f:

Original

10e21da237a4a1491e769df6f4c3b419:

Original

71b0438bf46aa26928c7f5a371d619e1:

Original

af85d512594fc84a5c65ec9970956ea5:

Original

39abe4bca904bca5a11121955a2996bf:

Hello_Ctfer_Velcom_To_my_Mov_and_md5(md5)_world