Timeline for Highscores being sent as hash
Current License: CC BY-SA 3.0
11 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 27, 2015 at 18:28 | history | tweeted | twitter.com/#!/StackReverseEng/status/592757245319979008 | ||
| Feb 25, 2015 at 17:08 | answer | added | user45891 | timeline score: 1 | |
| Feb 25, 2015 at 16:52 | answer | added | Jason Geffner | timeline score: 2 | |
| Feb 25, 2015 at 15:33 | comment | added | rev | @Komiblanka that's because the plugin is not compatible with IDA Free. Maybe you should try the recent demo (I'm not sure whether it supports plugins), or grab a copy of IDA Pro, which is expensive, but is an indispensary tool for reversing. | |
| Feb 25, 2015 at 15:28 | comment | added | Komiblanka | @AcidShout: I've downloaded IDA freeware version and included the plugin findcrypt (from IDA's official site) in the plugins folder. I get an error: the procedure entry point_callui could not be located in the dynamic link library IDA.WLL I'm using win7 64 bit | |
| Feb 25, 2015 at 13:36 | comment | added | rev | You can use the findcrypt for IDA to find the hashing functions and break there. From there, stack trace your way up until you find the caller that has the secret. | |
| Feb 25, 2015 at 12:39 | comment | added | Komiblanka | It is being hashed: It sends both the unhashed and the hashed values. The server knows the secret too. When the server receives the unhashed values, it will hash it and check if the resulting hash is the same as the one being sent... | |
| Feb 25, 2015 at 12:38 | history | edited | perror | CC BY-SA 3.0 |
Doh!
|
| Feb 25, 2015 at 12:33 | comment | added | Paul | It can't be hashed as how would the server know what the score value is? I think you mean it's encrypted. How about setting a breakpoint on Winsock send APIs to begin with? | |
| Feb 25, 2015 at 12:27 | review | First posts | |||
| Feb 25, 2015 at 12:39 | |||||
| Feb 25, 2015 at 12:22 | history | asked | Komiblanka | CC BY-SA 3.0 |