2

So I am trying to learn radare2 by following an on-line guide, but from what I have seen there and on other sites, my r2 behavior is wacky.

The author's disassembly looks like this, with neat little arrows and helpful strings that appear to the right of the code.

My disassembly, however, looks like this, with strange, fat arrows and and no string comments, which are rather critical for this particular crackme challenge. Instead, I used the iz command, but the string "g00dJ0B!" displayed without the ! which is pretty weird and certainly not helpful, because that string is the password I was looking for.

Finally, the author gets this output from his memory read:

[0x080483e0]> px @ sym.pass.1964
offset -   0 1  2 3  4 5  6 7  8 9  A B  C D  E F  0123456789ABCDEF
0x0804a040  7700 0000 3000 0000 7700 0000 6700 0000  w...0...w...g...
0x0804a050  7200 0000 6500 0000 6100 0000 7400 0000  r...e...a...t...
0x0804a060  0000 0000 4743 433a 2028 5562 756e 7475  ....GCC: (Ubuntu
0x0804a070  2f4c 696e 6172 6f20 342e 362e 312d 3975  Linaro 4.6.1-9u
0x0804a080  6275 6e74 7533 2920 342e 362e 3100 002e  buntu3) 4.6.1...
0x0804a090  7379 6d74 6162 002e 7374 7274 6162 002e  symtab..strtab..
0x0804a0a0  7368 7374 72                             shstr

...while I get this when using the same command:

[0x080483e0]> px @ sym.pass.1964
- offset -   0 1  2 3  4 5  6 7  8 9  A B  C D  E F  0123456789ABCDEF
0x0804a040  ffff ffff ffff ffff ffff ffff ffff ffff  ................
0x0804a050  ffff ffff ffff ffff ffff ffff ffff ffff  ................
0x0804a060  ffff ffff ffff ffff ffff ffff ffff ffff  ................
0x0804a070  ffff ffff ffff ffff ffff ffff ffff ffff  ................
0x0804a080  ffff ffff ffff ffff ffff ffff ffff ffff  ................
0x0804a090  ffff ffff ffff ffff ffff ffff ffff ffff  ................
0x0804a0a0  ffff ffff ffff ffff ffff ffff ffff ffff  ................

I would appreciate any help with in resolving these issues very much, thank you!

1

1 Answer 1

2

I got it! Just needed to re-download using Git because the radare2 in my repos was old. Haha. Alright, happy hacking ladies and gentleman.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.