Blumentals Surfblocker 5.15.0.65 instal the last version for ios

Step till 00509B8F → RETN 4 and exit this function.Īfter that scroll a bit up and you are at what it appears to be beginning of some function, presumably password checking function.Ĭlear MessageBoxW BP and set it at 008B38BC → PUSH EBP. You are in the, what it seems to be,centralized function that deals with diplaying message box stuff. The trick works, and after you input wrong password and click OK you break at MessageBoxW inside USER32 module.Īfter returning from USER32 you are here:īut still not inside pass check function. The string is UNICODE, so setting breakpoint on MessageBoxW and backtracing a bit seems like a good way to land you in the password checking function. But there are many results, so trying to be more specific and searching for a string displayed in a message box gives you only this:

It also means that all of the strings are in cleartext and visible in a debugger/disassembler, so searching for a “password” keyword or similar seems like an option. The target is not packed/obfuscated, no anti-debug tricks, no ASLR etc… so not using all this stuff speeds up reversing process. So there must be some function checking if the password is valid or not before letting you in or displaying message box. You input it wrong and get message box prompting you to try again.

When you run target (surfblock.exe) (and everytime you bring it it up from systray) you are presented with a dialog box asking you to input password. I have decided to try and test how secure is this (and other) product, and whether can I bypass its protection and possibly make a small project. In a contrast of having a “blank” CV that merely claims that you know your stuff, I thought, well, better make some projects and open source code to show it off instead. The reason for making this tool (and other) is trying to find a job involving reverse engineering / cybersecurity etc…

Blumentals Surfblocker 5.15.0.65 instal the last version for ios