Overclock.net - Overclocking.net
     
 
Home Gallery Reviews Blogs Register Today's Posts Mark Forums Read Members List


Go Back   Overclock.net - Overclocking.net > Software, Programming and Coding > Coding and Programming

Reply
 
LinkBack Thread Tools
Old 02-27-07   #1 (permalink)
Security Sleuth
 
kc-tr's Avatar
 
intel nvidia

Join Date: Nov 2006
Location: root@big-brother:/$
Posts: 1,849

Rep: 119 kc-tr is acknowledged by manykc-tr is acknowledged by many
Unique Rep: 96
Hardware Reviews: 1
Trader Rating: 8
Default Programmer Challenge

Ok, this is just for fun, I just want to see if anyone here is familiar with this. If someone can answer the question's they will know why I am asking.

1. What language is this?
2. What would something like this be used for?

Quote:
$egghunt =
"\x66\x81\xca\xff\x0f\x42\x52\x6a\x02" .
"\x58\xcd\x2e\x3c\x05\x5a\x74\xef\xb8" .
$eggtag .
"\x8b\xfa\xaf\x75\xea\xaf\x75\xe7\xff\xe7";
BFRD Should know this one
__________________
IRC nick - tgalyean / normally found in #fedora-admin

System: █۩█
CPU
E6400 @ 3.4GHz
Motherboard
DFI INFINITY P965-S
Memory
2GB G.Skill HZ
Graphics Card
XFX 7900GS 659MHz/2000MHz
Hard Drive
Raptor 74GB
Sound Card
X-FI
Power Supply
600Watt Modular w/120mm Fan
Case
Cooler Master Centerion
CPU cooling
Stock
GPU cooling
Zalman Fatal1ty FC-ZV9
OS
XP Pro x64
Monitor
Acer AL17

Last edited by kc-tr : 02-27-07 at 09:25 PM.
kc-tr is offline kc-tr's Gallery   Reply With Quote
Old 03-01-07   #2 (permalink)
Programmer
 
intel nvidia

Join Date: Nov 2006
Posts: 1,495

Rep: 93 version2 is acknowledged by some
Unique Rep: 76
Trader Rating: 3
Default

Perl.

You like writing viruses? lol.

("Virus" relating to remote exploiting...)
__________________
System: Duo
CPU
Core 2 Duo E6600 B2
Motherboard
Asus P5B Deluxe
Memory
G.SKILL HZ 2x1gb DDR2 800
Graphics Card
EVGA 9600GSO 384mb
Hard Drive
WD 640gb, Maxtor 160gb
Sound Card
Audigy 2 ZS
Power Supply
FSP 450W
Case
Ultra Aluminus
CPU cooling
Freezer Pro 7
GPU cooling
Stock
Monitor
20.1'' SOYO LCD (Wide)

Last edited by version2 : 03-01-07 at 01:05 AM.
version2 is offline   Reply With Quote
Old 03-01-07   #3 (permalink)
Security Sleuth
 
kc-tr's Avatar
 
intel nvidia

Join Date: Nov 2006
Location: root@big-brother:/$
Posts: 1,849

Rep: 119 kc-tr is acknowledged by manykc-tr is acknowledged by many
Unique Rep: 96
Hardware Reviews: 1
Trader Rating: 8
Default

Nope not a virus, and Yes it is pearl, and no I dont write them. I am a pen tester, I do contracted security audits, and that is a portion of code that is used. No I wont post what it is, but yes it is pearl and no it is not a virus. But you are right on all aspects other than that it is a virus. Well done You should join the security field.

I was cleaning up some errors in it, while surfing overclock.net so I thought I would toss a small portion of it up and see if anyone could answer the question
__________________
IRC nick - tgalyean / normally found in #fedora-admin

System: █۩█
CPU
E6400 @ 3.4GHz
Motherboard
DFI INFINITY P965-S
Memory
2GB G.Skill HZ
Graphics Card
XFX 7900GS 659MHz/2000MHz
Hard Drive
Raptor 74GB
Sound Card
X-FI
Power Supply
600Watt Modular w/120mm Fan
Case
Cooler Master Centerion
CPU cooling
Stock
GPU cooling
Zalman Fatal1ty FC-ZV9
OS
XP Pro x64
Monitor
Acer AL17

Last edited by kc-tr : 03-01-07 at 09:10 AM.
kc-tr is offline kc-tr's Gallery   Reply With Quote
Old 03-01-07   #4 (permalink)
Programmer
 
intel nvidia

Join Date: Nov 2006
Posts: 1,495

Rep: 93 version2 is acknowledged by some
Unique Rep: 76
Trader Rating: 3
Default

At first I thought it was php, but I had never seen the syntax involving $eggtag followed by the dot before in php. Then, I thought it might have been C++. It's been awhile since I've programmed C++ (and I had knew very little about it in the first place), because you are allowed to have the "$" in front of variables in c++ (I think so.) But I wasn't convinced it was c++.

I did a little search on the second line of code (I thought), and found a script, which I was able to determine the language. I also found out that that script had originally been a C++ script for some sort of McAfee Exploit (a "virus" if you will). So I cheated a bit, to be honest. Interesting challenge though, I learned something new.

BTW, the first two lines of code does work in PHP. And, if I were to guess what lines 4 and 5 do (without looking at the original code), I'd guess that $variable . "text"; adds on to the current string in $variable, just like $variable .= "text"; Am I right?
__________________
System: Duo
CPU
Core 2 Duo E6600 B2
Motherboard
Asus P5B Deluxe
Memory
G.SKILL HZ 2x1gb DDR2 800
Graphics Card
EVGA 9600GSO 384mb
Hard Drive
WD 640gb, Maxtor 160gb
Sound Card
Audigy 2 ZS
Power Supply
FSP 450W
Case
Ultra Aluminus
CPU cooling
Freezer Pro 7
GPU cooling
Stock
Monitor
20.1'' SOYO LCD (Wide)
version2 is offline   Reply With Quote
Old 03-01-07   #5 (permalink)
New to Overclock.net
 
BenHagerty's Avatar
 
intel nvidia

Join Date: Aug 2006
Location: Boston, Mass.
Posts: 2,263

Rep: 85 BenHagerty is acknowledged by some
Unique Rep: 71
Hardware Reviews: 3
Trader Rating: 0
Default

haha nice, One a forum they had a programming challenge where you had to get it to post like the numbers 1-5 500 different ways, so hard
__________________
I am 0% addicted to Counterstrike. What about you?

Xfire BenHagerty

System: Sony Vaio S Series
CPU
Intel Centrino 1.7Ghz
Motherboard
Intel
Memory
Crucial 2GB (2 x 1GB)
Graphics Card
Nvidia GeForce Go 6200
Hard Drive
80GB
Sound Card
Onboard
Power Supply
External
Case
Sony Vaio S
CPU cooling
Stock
GPU cooling
Stock
OS
Ubuntu 7.04
Monitor
Stock
BenHagerty is offline   Reply With Quote
Old 03-01-07   #6 (permalink)
Turing Test is Overrated
 
DuckieHo's Avatar
 
intel nvidia

Join Date: Nov 2006
Location: In a Chair.
Posts: 24,170

Rep: 2802 DuckieHo is a legendDuckieHo is a legendDuckieHo is a legendDuckieHo is a legendDuckieHo is a legendDuckieHo is a legendDuckieHo is a legendDuckieHo is a legendDuckieHo is a legendDuckieHo is a legendDuckieHo is a legend
Unique Rep: 1293
Folding Team Rank: 968
Trader Rating: 34
Default

How about this snipet of code, rep up for whoever gets it!

Code:
	addi $sp, $sp, -20
	sw $fp, 20($sp)
	sw $ra, 16($sp)
	sw $a1, 12($sp)	   
	sw $s4, 8($sp)
	addi $fp, $sp, 20
	add $s4, $zero, $zero

	beq $a1, $s0, DISPLAYLINE	
	j DISPLAYELSE
__________________
WANTED: Socket M Core/Core 2 CPU, SUGO-02 Black, quality 802.11b/g PCI Card
To answer most of your questions: (1) a fridge cannot cool a PC (2) 64-bit OS for over 3.4GB (3) If a PCIe card fits, it will work (4) Resolution, not screen size (5) If you have a question, it is not news (6) Report, not respond to Spam (7) Single/Non-Modular Rail PSUs are NOT better than Multi-Rail/Modular

Quote:
catmmm: no wifi? gay
e_dogg: I use both wired and wireless in my house. Does that make me bi?

System: My "DF-DIE" Replacement
CPU
Q6600 (3.7GHz)
Motherboard
Asus P5E X38 (MF1208 BIOS)
Memory
2x2GB OCZ Reaper 1096MHz
Graphics Card
8800GT (729/1836/2088)
Hard Drive
PERC 5/i: 3xRAID0 Raptor 74GB + 7200.10 250GB
Sound Card
X-Fi XtremeMusic
Power Supply
Corsair 620HX
Case
Li Lian PC-V2100 [10x120mm fans]
CPU cooling
FuZion V2 + Quad-Heatercore
GPU cooling
MCW60 + Iandh HS + DDC-3.2
OS
Vista Ultimate 64
Monitor
Samsung 226BW "C" + Sceptre 19"

Last edited by DuckieHo : 03-01-07 at 09:42 PM.
DuckieHo is online now I fold for Overclock.net Overclocked Account DuckieHo's Gallery   Reply With Quote
Old 03-02-07   #7 (permalink)
Programmer
 
intel nvidia

Join Date: Nov 2006
Posts: 1,495

Rep: 93 version2 is acknowledged by some
Unique Rep: 76
Trader Rating: 3
Default

@DuckieHo, I'm not sure about this one, but is it MIPS? I donno. But I think I'm pretty sure it's a compiled language.

Edit: 2 minutes later, and I'm trying to figure out why I was so sure it was a compiled programming language... :/
__________________
System: Duo
CPU
Core 2 Duo E6600 B2
Motherboard
Asus P5B Deluxe
Memory
G.SKILL HZ 2x1gb DDR2 800
Graphics Card
EVGA 9600GSO 384mb
Hard Drive
WD 640gb, Maxtor 160gb
Sound Card
Audigy 2 ZS
Power Supply
FSP 450W
Case
Ultra Aluminus
CPU cooling
Freezer Pro 7
GPU cooling
Stock
Monitor
20.1'' SOYO LCD (Wide)

Last edited by version2 : 03-02-07 at 12:33 AM.
version2 is offline   Reply With Quote
Old 03-02-07   #8 (permalink)
Apple Doesn't Love You
 
rabidgnome229's Avatar
 
intel nvidia

Join Date: Feb 2006
Location: Pittsburgh
Posts: 4,975
Blog Entries: 1

Rep: 564 rabidgnome229 is becoming famousrabidgnome229 is becoming famousrabidgnome229 is becoming famousrabidgnome229 is becoming famousrabidgnome229 is becoming famousrabidgnome229 is becoming famous
Unique Rep: 338
FAQs Submitted: 6
Trader Rating: 5
Default

Quote:
Originally Posted by DuckieHo View Post
How about this snipet of code, rep up for whoever gets it!

Code:
	addi $sp, $sp, -20
	sw $fp, 20($sp)
	sw $ra, 16($sp)
	sw $a1, 12($sp)	   
	sw $s4, 8($sp)
	addi $fp, $sp, 20
	add $s4, $zero, $zero

	beq $a1, $s0, DISPLAYLINE	
	j DISPLAYELSE
Quote:
Originally Posted by version2 View Post
@DuckieHo, I'm not sure about this one, but is it MIPS? I donno. But I think I'm pretty sure it's a compiled language.
I'm with version. It definitely looks like machine code. It's either compiled or assembly
__________________
BIG BROTHER
I put on my robe and wizard hat...

IS WATCHING

System: It goes to eleven
CPU
E6300
Motherboard
DS3
Memory
2GB XMS2 DDR2-800
Graphics Card
EVGA 8600GTS
Hard Drive
1.294 TB
Sound Card
Audigy 2 ZS
Power Supply
Corsair 520HX
Case
Lian-Li v1000B Plus
CPU cooling
TTBT
GPU cooling
Thermalright V2
OS
Arch Linux/XP
Monitor
Samsung 226bw
rabidgnome229 is offline Overclocked Account   Reply With Quote
Old 03-02-07   #9 (permalink)
110100001101001111000
 
C-bro's Avatar
 
intel nvidia

Join Date: Jan 2006
Location: Hamilton, ON
Posts: 1,832

Rep: 283 C-bro is a proven memberC-bro is a proven memberC-bro is a proven member
Unique Rep: 215
FAQs Submitted: 6
Folding Team Rank: 237
Hardware Reviews: 9
Trader Rating: 1
Default

I'm calling the assembly code as well. I only know 8088 and 8051 assembly, but that would be my guess. The #($sp) also looks something like indirect addressing, so that would strengthen my thoughts on assembly.

System: RAID0R
CPU
Intel E2180 3.33GHz
Motherboard
Asus P5K-E/WIFI-AP vMod
Memory
2GB Kingmax DDR2-1066
Graphics Card
EVGA 8800GT
Hard Drive
2x250GB WD+500GB 7200.11
Sound Card
SB Audigy 2
Power Supply
Corsair CMPSU-550VX
CPU cooling
Arctic Cooling Freezer 7 Pro
GPU cooling
Zalman VF900-Cu
OS
Windows Vista Business 32-Bit
Monitor
HP F2105 21" & Samsung 712N
C-bro is offline I fold for Overclock.net Overclocked Account C-bro's Gallery   Reply With Quote
Old 03-02-07   #10 (permalink)
New to Overclock.net
 
amd nvidia

Join Date: Jan 2006
Location: Arcadia
Posts: 1,872

Rep: 123 eternaldj is acknowledged by manyeternaldj is acknowledged by many
Unique Rep: 98
Trader Rating: 11
Default

compiled maybe?
__________________
Aumotocnic "An unfortunate member of the overclock.net insomnia club"

System: My Rig
CPU
AMD X2 4000+
Motherboard
ASUS M2N-E nForce 570
Memory
G.SKILL 2GB DDR2-800
Graphics Card
eVGA 9800GT SuperClocked
Hard Drive
Seagate Barracuda 7200.10 250GB
Sound Card
SB X-Fi Xtreme Audio
Power Supply
Corsair 450W
Case
Lian-Li PC-61
CPU cooling
AC Freezer 64 Pro
GPU cooling
Stock
OS
Windows Vista Ultimate 64bit
Monitor
Sceptre 24" X24WG-1080P
eternaldj is offline   Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools



All times are GMT -4. The time now is 10:21 PM.


Overclock.net is a Carbon Neutral Site Creative Commons License Internet Security By ControlScan

Terms of Service / Forum Rules | Privacy Policy | Advertising | Become an Official Vendor
Copyright © 2008 Shogun Interactive Development. Most rights reserved.
Page generated in 0.34864 seconds with 8 queries