Reverse Engineering Shenanigans

Download here:  https://crackmes.one/crackme/690cdb672d267f28f69b7bbf MD5: df7d6763f43a35b50065b558348f6e65 SHA1: 9e9faabd7bd09a04cf620fde52f6f8a77890053e SHA256: 2d192e5dd555176eb43868d5117fa98885f102f0ac9c8a1964a6c35f63080464 This is listed as a C/C++ x64 executable with a difficulty rating of 3.0. The author is Bobx and the executable is written for Windows. The authors description:  Good Luck and Have A Lot Of Fun ;) When you load the executable in Ghidra, you can very clearly see what is going on.    Let's take a look at the ValidatePassword function. A buffer is passed to the GetPassword function and then our input is compared against it. If they match, the function returns true, otherwise it returns false.   Let's see what the GetPassword function looks like. Hmm, it looks like mistakes were made. We can essentially ignore everything except the last 5 lines of code. The correct password buffer is very clearly getting loaded with a hardcoded string. This...

Full disclaimer: I have submitted a whopping two pull requests that have yet to be approved/reviewed. With that being said, I am far from an expert but I think that's exactly what qualifies me to make this post. I still feel extremely intimidated to make changes to the code. I don't really know what I'm doing but I'm figuring it out and so can you. If you're reading this, I'm not far from where you are. I have wanted to contribute to open source projects for a long time but never had the courage to take the leap. Everything about the process just seemed overwhelming. A lot of the advice on the internet made it seem so easy. Just pick a project you already use and and find a "good first issue" and make the pull request. Well... sure but when the code base is massive, what do you do? How do you even go about trying to tackle even the simplest of tasks. It feels like everyone else is a master programmer and you're just a scrub. My first piece of advic...