Ram
I am new want to learn programming
BinaryByter
I am new want to learn programming
I am root and want to learn crooting
Mihail
you also hash the password the user inputted
Mihail
then you only compare hashes
BinaryByter
Do I need any header to convert the hash back ?
you can't convert a hash back
BinaryByter
thats the reason it's used for passwords
Mat
Google found a collision afaik, so it's not secure
BinaryByter
collisions don't make it insecure
Mat
Collision = when two different inputs generate the same output
BinaryByter
there are an infinite amount of strings that produce the same hash
Anonymous
guys i want to copy function to void* pointer like: my_func() { // code ... } void* copyback; start() { copyfunc(&my_func,copyback); }
BinaryByter
I don't see the problem?
Anonymous
wat?
Copy whole function to a pointer
BinaryByter
Mat
It was not only that
BinaryByter
where is the problem with collisions?
klimi
Maxi calm down
BinaryByter
xD
Anonymous
:/ COPY WHOLE MEMORY OF FUNCTION TO a Pointer
Mat
where is the problem with collisions?
That you don't like them :P but was not the real problem
BinaryByter
:/ COPY WHOLE MEMORY OF FUNCTION TO a Pointer
copy the memory of a function to a pointer? what?
BinaryByter
BinaryByter
no
because that's the memory of a function
olli
where is the problem with collisions?
you can gain access without knowing the password? you can manipulate files without the victim knowing it?
BinaryByter
and you can't reverse-engineer the hash
olli
you need to know a password that produces a similar hash
yes, and that is an issue caused by collisions
BinaryByter
yes, and that is an issue caused by collisions
but that is not such an issue, is it?
olli
but that is not such an issue, is it?
I consider using a different password, that accidently produces the same hash, to access my account a serious issue
BinaryByter
I consider using a different password, that accidently produces the same hash, to access my account a serious issue
then add a second mechanism that only works if your password is exactly that. how about both storing the salted and unsalted password?
BinaryByter
and checking against both
Anonymous
because that's the memory of a function
4 example function B start address 0x000000 end address 0x000FFF copying 0x000000 until 0x000FFF to a pointer ???!
BinaryByter
4 example function B start address 0x000000 end address 0x000FFF copying 0x000000 until 0x000FFF to a pointer ???!
do you know what a pointer is? it's not a magical way of getting 16**3 free bits
Anonymous
i just need to duplicate a function runtime
BinaryByter
Oh
BinaryByter
I see
BinaryByter
you want to use somethign like memcpy?
BinaryByter
then do it
Anonymous
how
BinaryByter
mempcy (void* src, void* dest, int size)
Anonymous
BinaryByter
it takes a raw pointer
Anonymous
can i copy function to a pointer and call the pointer?
Lalit
BinaryByter
wat?
Lalit
Anyone can give the right answer
Lalit
In which line it will give a error
BinaryByter
@bo0tzz
Anonymous
why not?
Nice can u give me example?
BinaryByter
Nice can u give me example?
a: mov eax, 1 mov ebx, 1 ret b: <copied a to b> global _main: call a call b
Anonymous
:(
BinaryByter
this is the underlying assembly
BinaryByter
i won't make you a full-fledged program because your idea is pretty bad
BinaryByter
you don't know the size of a function
BinaryByter
unless some compiler intrinsic gives it to you, there's no way of copying EXACTLY enough bytes
Anonymous
you don't know the size of a function
but we can search for "ret"
Anonymous
?
BinaryByter
it will be different on every architecture
BinaryByter
besides, some return statements are conditional
Anonymous
BinaryByter
can't you design your software in a way that won't break your neck?
Anonymous
i just need to add some anti reverse enginering layer
BinaryByter
google "movfuscator"
Anonymous
google "movfuscator"
I know but i need more
BinaryByter
just accept that you can't avoid reverse engineering
Anonymous
with debugging u can change assembly of function i need to check that something like crc check for function
BinaryByter
Anonymous
IMHO it is even highly immoral to
YES but only true reverse enginerer