#MINESWEEPER HACK WINDOWS 10#
#MINESWEEPER HACK CODE#
#MINESWEEPER HACK PASSWORD#
#MINESWEEPER HACK DOWNLOAD#

Since this post is more about the assembly side, lets take a look at that and not worry about the C. Having both here can help fill the pieces where knowledge lacks (for me it helped anyway).

#MINESWEEPER HACK CODE#

We can see in the C code to the right what is happening very clearly, however given this is a reversing challenge it feels a bit like cheating! However, itвЂ™s an invaluable tool for learning, even if you are not good with C or assembly. By following the reference we get the main function.

If we follow these by double clicking we can find the references as we did before.

#MINESWEEPER HACK PASSWORD#

We can see that there is no hardcoded password string, but there are strings telling us if it worked or not. We will then find the strings, same as before, to look for values that may be printed to terminal. We can also test entering it into the executable to ensure we are correct. We can easily see on the right hand side that its comparing the input string to вЂњcr4ckm3вЂќ and if they are equal it will display the success, and if they are not then it will fail. One thing I really like about Ghidra is that when you go into a function, the panel on the right hand side will show sample C code made by Ghidra that would produce the same machine code. By clicking on that we are taken to the main function of the executable. To confirm this we can double click on it and we will see a memory pointer with the string in, however its not within the main function.Д«y right clicking on the memory pointer we can select References > Show References to to see where itвЂ™s called. We can see in the strings that there is an interesting string вЂњcr4ckm3вЂќ which seems like it will be the password. This doesnвЂ™t run the sample, I assume it just tries to pick out relevant information.ДЄfter loading we will search for strings to see if we can locate the incorrect password string, and by doing so find the main function. It did come back with an error but seemed to have completed execution ok. I donвЂ™t really know what this does but I selected yes and went with the defaults and waited. It will ask you if you want to analyse the sample. Now double click on the password executable and the code browser will be opened. Hopefully you should see a screen similar to the below.

#MINESWEEPER HACK DOWNLOAD#

You could also download all the binaries at once, put them in a folder, then use File > Batch Import and select the folder to import all the binaries at once. Then with the project folder in the screen you need to use File > Import File and choose the executable you want to analyse. Go into File > New project and create a project with whatever name you want, I used begin.re for ease. The first time you launch Ghidra it can be a bit confusing (or was for me anyway). It is a good idea to note the strings returned as well, as these can be helpful in finding the main section. The first challenge was a simple windows binary that when executed asked for a password and told you if it was correct or not. I wanted to produce a write up to solidify the knowledge and I hope to do more crackme style challenges / writeups in the future.

#MINESWEEPER HACK WINDOWS 10#

I used Ghidra and ењ†4dbg on a windows 10 VM to do these challenges. The course uses IDA and Ollydbg to do this, however I wanted to use a more modern approach. The last challenge is to hack minesweeper so mines are changed to flags, so you can see them as soon as you start the game. Two of these are easier and done solo, the last two are more complex and take more of a walkthrough approach.

This course includes some background modules that detail theory and give some resources to look at and some quiz questions, then it has four different binaries to reverse. After watching a lot of videos and reading a lot of resources I found Begin.re which seemed like a great intro course to Windows 32-bit reverse engineering. I have always wanted to do more reverse engineering and binary exploitation, so I looked for places to start out. Hacking Minesweeper with Ghidra - Walkthrough of Begin.RE ChallengesДЄfter focusing on Active Directory exploitation for the last few months, I wanted to mix things up and do something new.

Minesweeper hack