Hello, everybody, welcome to my advanced ethical hacking, networking, penetration testing, costing.
OK, so we assume that you already download and extract your application.
So now let's use instead of using machine all we can use all Windows machine.
So let's come back.
Let's go there.
OK, so let's try to open the application to see how it looks like.
So we double click and then we will enter again.
Try to take anything.
But first thing first, let's take let's try to type some letters and.
It quickly it quickly goes away.
Let's try again.
And also numbers.
OK, in Syria, all that means we see that that means we see that we should probably need to put some
numbers on it.
And remember, this is a message, a war in Syria.
So we get to try to find the strength that's inside it and inside the Kurds and to do some modifications.
OK, so let's let's try to win it now with extra attitude.
Well, so now we can just go to the entry point and instead of going here or instead of instead of let's
go back to you instead of clicking right click and and search for our modules and string references,
it will take a long not a long time, but probably 10 seconds.
But we don't want to use it now because we just want some specific text.
So we just come here and click on symbols and automatically it's here if it's not here.
So you get to put it here, you click on that icon A to find the strings and boom.
So you get it in a split of seconds.
So what we need now, we need a good job or encode.
So anyway, so we can just try to click on one of them.
So it's going to be all up to see until we see a jump jump, if not equal, to let me into it.
John, to dislocation.
O kay, what we can do that we can see the job goes ahead on this application, let me try to see.
Here, so.
Oh, no, no, no.
It's on here, OK, here and then after this operation, it just pushed the stakes so we don't need
or jump to be jumped down.
So we got to change this light.
So we waste space and then we remove that in.
And all right, so we can now click on Kinsale, so let's go ahead with a little bit up what we can
see now, something campell moves.
OK, so let's pass it and then let's try the application first so that we can see how it will be so
much.
OK, so define.
Let me call it another name, a public application, this one, but instead we will put another full
put it here like this.
OK, so OK, one application for applied.
OK, we can come here and let me try to find it on your desktop to see how it would be.
So.
In D.C., Debra.
Good job you got it.
The password is two two two oh, it sounds like fake.
Let me check again.
Checking in.
Now it is a one, two, three, four, and.
Two, four, six, eight.
OK, what we can detect is that it multiplies Egypt numbers by two or what it does, it adds the same
number on it.
Again, for example, it says that or one, two, three, four, plus one, two, three, four.
So let's quit.
Let's try again another time.
Now, let's put something bigger.
One, two, three, four, five, six.
OK, so it is this let me check if I said to myself that six and six plus six is 12.
Okay.
And then one C one plus five, six six plus five 11.
Oh, again, one four and four plus one nine and three to entry into into four one and one two.
OK, so this, these codes when we, when we are here, it's, it's just added the number that we have
put on it again on itself.
So we should try to bypass these things.
OK, let me put it out like this.
What we can do, we say compare here.
We can put a big point on the comparison and try to figure it out how it will look like, oh, you can
just know it.
I mean, you feel it with no to do so.
You like click and Binoy and fill with numbers in.
Yes, ok.
Now it is filled with.
Nope.
OK, so we can try to win this application.
Right, right over here.
Let me try to see what.
What's that.
OK, it's empty of course was me.
So now we can try to win this application here to see the wizard.
We got to understand and and check what the what will be the result of our X, which is.
Let's try before watching again, let's try to put a quick point on this comparison.
OK, so was it a function function and after.
All right, so now it is there.
That is so great.
So we can try to run it again.
So we come here.
OK, we can come here now, we're going to try to put anything that's a bluff and we have to verify.
We have to check how or X will be changed.
OK, so we got something here.
What we get to get this takes is it's X exotics, OK, zero 24, zero F F 20.
We can try to copy it.
Can I go?
Yes, this is Lane, the Lane, and let me try to put it here on.
OK, so we're going to play without delay.
This one is on, OK, so let's try again to verify.
I want to do it again.
Geer's.
So we get to the point now, we can go in here, get in again, let's say this one, and it was under.
So.
As we can detect, it's the same.
Come here.
Let me come here.
Your.
Okay.
Twenty six seven four zero zero twenty four f f twenty again one last time to the 260 to one last time.
Let me try to come back here.
Gun control.
Again, we start.
And go to the entry point, so we are here so we can we want you can come here just for a quick view
and this one or one, two, three, four, five.
Good.
Good job.
OK, so we can go and do it.
OK, ok.
Equipment is here.
No, we don't want this, we want to be.
Jump is.
Look.
Well, now we can win it again.
So let's type something, something like an event under.
OK, can we get back into Syntex Light, so we're going to try to go to all to hellbound hackers on
Killing Machine and password twenty four.
So let me put first twenty six, the password 14, application 14.
So let me put first.
Twenty six.
So then for we don't know what if it if it will be good, but we would check it out until X Day and
come here to submit.
Please enter a password, OK, and it's not a problem, I know.
So what we can do, we can try now to put the X password, but the experts issued it with you.
But anyway, so before trying the next step, let me try this 020 for you if.
Zero 24, you, if you would, 24, you will if if 20 and control X.
Is it right for the F f Kennedy if I.
Ta ta ta ta ta.
Zero twenty.
So that you can see let me open it slightly.
OK.
Zero twenty four.
Yeah, it's all right, so let's come back here and just bust it, controlling it, shouldn't we?
What worry?
You see?
OK, so now let's try the next step.
So let me jump in here.
This.
So we are going to try to see what numbers this is, this is represented for us or what is the stream.
OK, here, many people fall into the trap that when they want these applications or even when they
put the weak point, but they don't figure out exactly where the password is, because after having
those operation following the algorithm, they still didn't get the password when they got when they
tried the password on their own account.
And it doesn't work.
So I'm going to show anyway, first thing first, we're going to one application and we can keep doing
it.
So now we in we entered into a point.
OK, so it can be was the code because it's not that much.
So we don't have to search for Olufsen syntax.
So we don't need to do that.
We just have to check for good messages.
And my message is, OK, this is one good.
You're looking at it again, problem and increasingly.
All right.
So what we can do now, we just go a little bit up.
Let me increase the screen for you guys.
OK, so now it's better for, you know, what we can do.
We are going to try in deeper to see what kind of stuff it is required, it says, into your silly.
All right, over here.
So after that, it enters this string and we push it and then the function now will point this string
text out.
So to go to the terminal, OK, and then the population does that, it add 10 on E.S.P register and
then so struck it by eight and then it make a calculation of SBP minus C on it.
OK, so this stuff, does it really matter to us.
This is the calling function.
OK, and what does that mean.
What does the percentage and means in C++.
It's that the, the point out the point if it will be as a decimal number.
So that's why they put D that means the decimal number and then we push that that takes.
Okay and then.
Okay let's go.
Let's go, let's go.
Let's go, let's go, let's go.
What we can see now of data into your celil.
So that means this suja must be the similar numbers of course.
OK, so we can go, go, go, go.
OK, so let's stay here.
We can try to put a point over here guys, so that we don't mess it up.
So let's try to put it now.
So we went over here on the call and then we go down below.
So it had ten on ESPN.
It moves SBP minus C on X and then it goes, this is the result of the X and then it makes a calculation
of it takes time to or plus in X and then they metacognition with the X.
Just wait here.
OK, so now it moves X on EBP minus ten.
OK, interesting.
So we will show all this things when we win this application.
But first thing first, let me try to explain to you and then therefore what it does, it moves SBP
minus ten on E X.
So now what it does is it compares the value of B minus eight now with the X here.
OK, and then if it's not equal to zero job over here, jump over here.
Here.
So as you can see, the address is
four or one three four zero four one three four zero right over here.
OK, so over here.
So now if it is equal now it's not the jump will not be taken.
Therefore it will go right here below and then add minus.
You will see OK on E.S.P and then it will push.
This takes.
To your terminal, and then after pushing this to a terminal, it could have pointed out, call it so
that it can appear on your terminal and yeah, after that again, then on SB minus 10 on E.S.P and Maw's
MBP minus 10, again on E, X and push X must be decimal number and push mistakes and make it appeared
on your terminal.
OK, and then jump to this location.
Alright, so what we can do, we can try to put some equipment over here, wait on the call again.
So let me put it here so that we can go with you step by step.
OK, so now we're going to open the application.
So let me put it a little bit back.
A little bit back.
OK, so we're going to come here on this or debugger or debug and then just click here and one or just
click here.
Sometimes people might say, but it's all it's already here, but it's not because if we click on it,
nothing is here.
OK, so we have to try so that we enter the program because now we are in the entry point so that we
can analyze the code.
Right.
So we click over here, OK.
Now what we can see that degree line is automatically due to to a waypoint, OK?
It says in your cereal.
OK, so we're going to go step by step so that we understand how it works.
Let me try to enter my terminal.
It won't accept anything because we are still in the calling function.
We don't we don't push.
I have eight yet, and therefore four dysfunction doesn't create its own dysfunction, which are calling.
OK, so let me just try to show you we can type one, two, three, four, one, two, three, four.
Nothing is a bit.
OK, so now let's go back here and see if eight.
If eight.
Like this week, we hear of if eight.
Okay, so.
Come back here and automatically it is here.
So let me try to go down, but before that, that hypocenter.
OK, so let's do.
All right, nothing nothing is a because we have said to wait when so the court doesn't know where to
go.
So we keep pressing.
If eight, if eight, let me increase the screen again.
So much.
OK, it's good.
So and then control the value of X.
OK, so let's come back here if eight again.
If aid control the value you see.
Okay, four D two, and then again, if eight, so is going to make the population, so MDX now get
changed.
Okay, let's move now X is nine eight for it has been added.
As you can see that X is moving on this EBP minus 10.
OK, so let's go again.
Okay, so nothing's changed.
Let's go now to see.
But before going to see be over here, what we can do that we can try to modify this so that the code
does a jump into the incorrect serial message.
So let me put this
and we can try to assemble it, OK?
And no.
So now let's come back here.
Over here and compressing of eight.
If eight.
OK, so now we are in the comparison area and the value of it is still the same 94, if you want to
find out which is where you can come here, over here and try to type.
Let me go on on Exar six, eight, nine, a four.
So and then we click on 10, which means the small and then the value is two four, six, eight.
That means it's double eight because we have both one, two, three, four and four and four.
Eight twenty six and two and two for one and one two.
So this is exactly what the code does guys.
So nothing complicated.
So for now, let's begin with if eight.
Kick it its job now into the code, into the job equal to zero.
OK, but it isn't college yet because we have to have eight.
We can try again to launch it again by pressing F eight function F eight to a job.
OK, so now it's jump to the next lane.
It doesn't go wide over here.
OK, so let's check again.
Let's go again, if aid, if aid and control the value of it is to see the change.
Now we are in the area of the pushing phase.
The tax is Kujo.
You carried Lischak eat here, OK?
Nothing.
So let me guess if if aid again.
OK, we get to pull it, so after after printing it, it will be displayed on not doing OK.
So if if eight begins or no one should be there.
OK, good job you got it.
All right, so let's come back over here again.
So now the value of each of E exchange to 15, it is an exact number.
OK, so what we can do for now, because we have seen already over here that we get it, but we don't
know yet.
So let's try to come back here and await this value down.
So it is six 015, so we write it down when people say we can do it by yourself.
One, two three four zero zero zero 15.
So it is an example.
So now we can come back here to this calculator and then we put it here for like 15.
Oops, we get to do it like this or, you know, 15.
Fifteen and go back to Mars.
So in this small number, it is 21, OK, so far so good.
So let's come back here so we can try to WFA it again if eight disvalue is still the same.
The value is still the same, the value is still the same.
Now.
It convert automatically the value of 94 to the result.
So how can we see that you can come back over here again and try to do this?
And it is 94.
So we click on renewed 16 nine a four, and then the value should be equal to two, four, six, eight.
So let's push this.
Come on here.
Excellent.
You see the same thing, the same thing right over here.
Here and here, so therefore we're going to try to push it again.
So now pushing it takes it by pressing F eight, F eight.
OK, now we have to point that takes on terminology with a the value of X, now still nine A4 wide.
So we can check here.
Over here.
Good job, Garrett.
OK.
Good job.
We get it.
So we don't know the password yet.
That means we have to go again.
Go again by pressing F eight.
F eight.
OK, now the value is again 15 the value of X, Y, Y to over here.
OK, so we are going again step by step in function if eight.
OK.
OK, now let's check if the jump will be taken, if it was not so, okay, now we can come back over
here, right here to see that your your the password is this is OK, good.
So we still need this text.
OK, so come back here slightly up.
And if eight again, OK, the value of it, it's still the same.
So now let's try to put a breakpoint on the CMB.
OK, so for this we're going to try to put this in, OK.
And then now we're going to restart the application so we pick one debugger.
Right over here and then we start.
Yes, yes, and then we click here again to enter the entry point of age.
So we are there.
So let's try to go down below so that we can check the messages, OK?
All right.
So let's verify again or jump.
Let me put it like this for you guys.
OK, so this space as usual.
And then here we removed the end and then we can assemble.
And.
OK, now it's right over here.
So let me put it back in just like this.
This might be OK, but so was control after all.
OK, so now it seems, therefore, we're going to try to stop the application.
Nothing is here.
OK, so now let's come back here and start the application or let's go.
You just just want it as you can see that again.
So it jumps exactly to the waypoint side.
So what it says, we don't know.
Let's check into your CV.
OK, so we're going to be afraid, afraid, afraid to enter functions.
OK, so if let me put it a little bit like this for you, OK, this is enough so far if you're was afraid
that we click here.
So we have to enter now the dysfunction.
OK, let me see it, one, two, three, four.
OK, so now it jumps to the add 10 on E!
OK, so lets with F eight go down below and again we will verify the X value.
You can check it either here on this stack over here.
Right.
So we can we will of eight again if eight.
If aid, if aid, if aid more.
OK, now we are we are in June, so it doesn't take the values of the yet because we don't receive aid.
He was afraid again to go to the jungle if eight.
OK, now it takes the jumper.
OK, now what it says is that John is not taken, of course, because it is not equal.
So therefore, it doesn't take the job so that it goes.
Let me let me put it right over here.
All right.
So the value of X is.
Nine, a full 94.
OK, so let's just pressing for eight of eight.
No, we will not try to control things that are pushed on or stack like.
OK, so when I wake up here and we come back here, so we take anything that's a passenger and automatically
we.
Well, the code jumps into the into the white print and pushed a number, of course, exactly my number
into a stack.
So assuming that this is the password, because anything that we typed here.
So if we want, we can just by proceed as we did before.
So when we did it, when we were not able to find the password, we can bypass this jump, not equal
to zero.
But as you can see that everything that we take here, it push it pushes this value into a stack.
Therefore, we can assume that this is the password.
So we're going to try to convert it into a decimal number and try it out or on or on his account.
OK, so you write it down again and then let's go to machine.
All right, so now we are all cutting machines, so we're going to try to convert it first twenty six
and seventy four into a decimal value.
So to do so, we're going to try to open a calculator.
So it is.
I've already got a.
So it was let me come back to Windows Machine.
So twenty six, seventy four, let me open it.
Let me make it bigger for you, okay.
Twenty six, seven, four.
So we're going to come back right here and put it on 16.
It was twenty six.
Seventy four.
OK, and then now we're going to try a brace then.
OK, nine, eight, four, four.
Okay, so let's come back here and I'm going to type it into all 14 application nine nine.
Eight four four four four injuries we're going to.
Congrats.
Forty five points has been added to you guys, so it's it's not that much harder, but many, many people
find this application is hard.
That's because they don't really know exactly where to look at, because sometimes the value of eight
of X will match and then you might get the person there.
But you got you got to check out what is the text which is pushed into your stack.
So that means here, when we try to enter any kind of value or any password and what we can determine
that or X value entered into the register or right over here gets changed again and again.
But the takes I mean, the exact text, which is which is pushed onto or stuck, never change.
Always it is twenty six, seventy four, twenty six point four.
That means we assume that it is the password.
So it is and it's a decimal form.
So we get to convert it into the decimal so that we can get the password.
OK guys, so we really think that in this video you learn something new.
So go to the next application.
Let me put it back for you.
So go back to your next application and click right over here.
And 15, download the X and extract it and see.
OK, thank you.