Results 1 to 11 of 11
  1. #1
    BstChaos's Avatar
    Join Date
    Jun 2009
    Gender
    male
    Posts
    3
    Reputation
    11
    Thanks
    9
    My Mood
    Sleepy

    [TuT] How to use ollybg

    Many people wonder what ollydbg is and what it does, well here is a small tutorial on ONE way on how to use it, but there are many more. :P

    Credits to MiStEr_X And BstChaos


    Programs needed:

    * Ollydbg = http://forum.gameville.info/downloads.php?do=file&id=20

    * Crackme = http://foff.astalavista.ms/downloads/crackme_01.zip

    * W32Dasm = http://foff.astalavista.ms/downloads/W32Dasm_8.93.zip



    I would like to introduce you now to a more advanced and professional cracking technique, cracking using a debugger. What is a debugger? In few words, a debugger is a software that will let us look in the asm code before and after the code is executed by the cpu. The debugger will pause the the execution of the code and will allow us to trace it step by step as the cpu executes it. All crackers uses a debugger, even W32Dasm has a debugger built in but is not very confortable. The most advanced debugger for cracking used by all crackers is OllyDBG, this tool will become your friend, your partner, it will be for you the tool number one!

    Let's do some configurations, press alt+o to access options and go to the CPU menu. Make you settings look like in this picture:
    picture1:

    http://img156.imageshack.us/img156/5999/picture1la2.jpg

    After this go to EXCEPTIONS menu and make your settings look like in this other picture:
    picture2:

    http://img296.imageshack.us/img296/8216/picture2bp3.jpg

    Ok, we are done for now. We will use olly for everything, like patching, finding serial keys, unpacking, studing, etc.

    We will start our first lesson with olly by finding the serial key of a crackme by FHCF team, during tracing the code it will be very easy to understand where we should patch if needed.

    Our mission in this lesson is to find a serial key for our entered name.


    Step 1:

    Run the crackme and you will see that it needs a name and a serial number, enter some fake info... click on check serial... :? nothing happens Lets find a real serial for our name now!
    Disassemble our target with w32dasm then click on the imports button. See the picture below:
    picture3:

    http://img296.imageshack.us/img296/2384/picture3ch5.jpg

    On the dialog box that shows up find this: USER32.GetDlgItemTextA like in the picture below:
    picture4:

    http://img259.imageshack.us/img259/1323/picture4ls9.jpg

    Select it like in picture above and double click on it, you will land at the address: 004011DF (write down this address), just a bit below this we have an other reference to USER32.GetDlgItemTextA at the address 004011F0 (write this address down too). Close W32Dasm, we don't need it anymore.


    Step 2:

    Run OllyDBG and click on file, open, browse to our crackme and open it. Cool, you should see the asm code now. Press F9 button from your keyboard then the crackme should show up. Enter your name and any serial number but don't click on "check serial" button yet. I will enter MiStEr_X as name and 12345 as serial. Return to OllyDBG then click on "Go to Address" button. This button is indicated in the picture below:
    picture5:

    http://img296.imageshack.us/img296/5838/picture5xk1.jpg

    On the blank box enter the first address we did found on w32dasm, 4011DF then click ok!
    You will be here:

    PUSH 019h
    PUSH 0403096h
    PUSH 066h
    PUSH DWORD PTR SS:[EBP+8]
    004011DF CALL GetDlgItemTextA ;read the entered name
    PUSH 01Eh
    PUSH 0403078h
    PUSH 065h
    PUSH DWORD PTR SS:[EBP+8]
    004011F0 CALL GetDlgItemTextA ;read the entered serial
    CMP EAX,4 ; compare entered name with 4
    JB @crackme__00401245 ; jump if below (if our entered name is smaller than 4 digits then jump)

    GetDlgItemTextA is used in asm to retrive the information entered by users in blank boxes!

    Now, put the selector line on "004011DF Call GetDlgItemTextA" then press the F2 button from your keyboard to set a breakpoint. Go to the second address to and set a breakpoint there too by pressing F2. See the picture below to see my breakpoints. The addresses highlighted with white means that there is set a breakpoint.
    picture6:

    http://img259.imageshack.us/img259/4250/picture6ox5.jpg

    Bring up the crackme from the taskbar and click on "check serial" Olly will break on the first breakpoint, now press F9 (run) and Olly will break on the other breakpoint we did set. The first breakpoint was for the name we have entered and the second is for the serial number. Now trace line by line slowly with F8 button until you are on the address "0040121F"
    picture7:

    http://img296.imageshack.us/img296/7301/picture5cs0.jpg

    Refering to the picture too, you must be on this line:

    0040121F CMP EAX, EBX

    Let's explain what does this mean, CMP means compare, eax register is storing the fake serial we did enter and ebx register is storing the real serial number for the entered name. Check this on the top-right of your screen, in the above picture are number 2 and 3. EAX has the value 12345 that is the fake serial I did enter and EBX is has the value 2EB. Can 2EB be the real serial number for the name MiStEr_X?? Yes it is, we did found a real serial number and we can find a serial for any name we enter by following the procedure of this tutorial. Enjoy!

    As you see, on the address .40121F the protection of the crackme is comparing our fake serial with a real serial for our name.
    __________________


    Do not PM me for hacks

  2. The Following 9 Users Say Thank You to BstChaos For This Useful Post:

    aaronsxc (06-30-2009),baraozin (05-17-2011),cbpbui (06-29-2009),ihawx (06-30-2009),Kannablis (07-15-2009),KnockOut (06-29-2009),Legify (06-30-2009),nubbie2k4 (12-01-2011),Timboy67678 (09-27-2010)

  3. #2
    NeverBorn's Avatar
    Join Date
    May 2009
    Gender
    male
    Location
    stealing from the cookie jar
    Posts
    1,569
    Reputation
    12
    Thanks
    563
    My Mood
    Pensive
    whoa.. looks like i have a lot to learn. good thread, assuming it is helpful to other mpgh members :]

  4. #3
    cbpbui's Avatar
    Join Date
    Jun 2009
    Gender
    male
    Posts
    16
    Reputation
    10
    Thanks
    1
    Nice tutorial. A good start for to-be hackers.

  5. #4
    The Game's Avatar
    Join Date
    Aug 2008
    Gender
    male
    Location
    On you mom "Doggystyle"
    Posts
    729
    Reputation
    12
    Thanks
    55
    My Mood
    Confused
    Very nice tutorial for coders out there Props from me

  6. #5
    KnockOut's Avatar
    Join Date
    Mar 2009
    Gender
    male
    Location
    New York Fucking City
    Posts
    883
    Reputation
    10
    Thanks
    210
    THIS IS really a nice TUT....you got my thanks.

  7. #6
    aaronsxc's Avatar
    Join Date
    Mar 2009
    Gender
    male
    Posts
    248
    Reputation
    9
    Thanks
    50
    My Mood
    Blah
    so whats the point of this, what do i get out of it? can it crack vip hacks and make them work?

  8. #7
    Katie_Perry's Avatar
    Join Date
    Feb 2009
    Gender
    male
    Posts
    3,089
    Reputation
    31
    Thanks
    175
    My Mood
    Sneaky
    Nice got to test this out!

  9. #8
    MrParo's Avatar
    Join Date
    May 2009
    Gender
    male
    Location
    Australia
    Posts
    260
    Reputation
    14
    Thanks
    122
    My Mood
    Drunk
    yes it can crack vip hacks if u know what u r doing.

  10. #9
    Southernx's Avatar
    Join Date
    Jun 2009
    Gender
    male
    Posts
    9
    Reputation
    10
    Thanks
    0
    LEECHER YOU DIDNT DO ANYTHING IN THIS TUT

    this is a very old tut and was done by MiStEr_X from the astatalk forum take ur name off

    you contributed nothing
    dont believe me do a search on "I would like to introduce you now to a more advanced and professional cracking technique, cracking using a debugger. What is a debugger?"
    +
    wrong section

    Do not thank this fool
    Last edited by Southernx; 06-30-2009 at 03:01 AM.

  11. #10
    zoron123's Avatar
    Join Date
    Dec 2008
    Gender
    male
    Posts
    141
    Reputation
    10
    Thanks
    42
    I found 2 another website which have the same tut but without Bstchaos name
    Last edited by zoron123; 06-30-2009 at 04:25 AM.
    _____________________________________

  12. #11
    jansmid1's Avatar
    Join Date
    Feb 2009
    Gender
    male
    Posts
    50
    Reputation
    10
    Thanks
    3
    My Mood
    Devilish
    can anyone give me a undetected module maker?? plss

Similar Threads

  1. Replies: 129
    Last Post: 09-27-2009, 03:21 PM
  2. [TUT] How to use kssn GENERATOR
    By ktalin91 in forum WarRock Korea Hacks
    Replies: 13
    Last Post: 05-10-2009, 08:17 PM
  3. Replies: 34
    Last Post: 03-16-2009, 10:16 AM
  4. (in-depth Video tut) how to use chams/wallhack with bypass
    By hiiway in forum Combat Arms Hacks & Cheats
    Replies: 23
    Last Post: 08-30-2008, 01:32 AM
  5. [TUT] How to use these forums? wip
    By smartie in forum General
    Replies: 43
    Last Post: 08-06-2007, 11:18 AM

Tags for this Thread