table of Contents
Dynamic debugging with OllyDbg
secret-galaxy-300
Check the shell
PE analysis found no shell
Use IDA static analysis
Locate the main function to set breakpoints, debug and run the program
Locate the data segment, find that the last string is not output, guess the flag
We continue to track this string (ctrl+x)
carry on
F5 decompilation, check the C source code, find that all assignment operations, the string of flag is likely to appear
Locate the assembly address and start address of the function: 004013E0
End address: 00401519
Dynamic debugging with OllyDbg
After setting breakpoints at 004013E0 and 00401519, debug and run to 00401519, look back and find the flag
flag:
aliens_are_around_us