diff --git a/.gitignore b/.gitignore index f5e96db..58bedcf 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1,2 @@ -venv \ No newline at end of file +venv +*.exe.* \ No newline at end of file diff --git a/crackmes/hashcr/solve.py b/crackmes/hashcr/solve.py index 316a6a7..aa0068f 100644 --- a/crackmes/hashcr/solve.py +++ b/crackmes/hashcr/solve.py @@ -1,8 +1,6 @@ import angr import time -# ./a.exe "$(py -c "print('NY\x01X\x00')")" - GREEN = "\033[92m" PURPLE = "\033[35m" RESET = "\033[0m" @@ -30,8 +28,12 @@ if __name__ == "__main__": # Симуляция ввода пользователя input_size = 5 input_data = state.solver.BVS('input_data', 8 * input_size) - state.memory.store(0x100000, input_data) + for byte in input_data.chop(8): + state.add_constraints(byte >= 0x20) + state.add_constraints(byte <= 0x7e) + + state.memory.store(0x100000, input_data) state.regs.rax = 0x100000 simgr = proj.factory.simulation_manager(state)