Bypass

Bypass.exe

file Bypass.exe     
Bypass.exe: PE32 executable for MS Windows 4.00 (console), Intel i386 Mono/.Net assembly, 3 sections

Let’s try ghidra and see if we could make any sense of the .exe.

Either I suck with Ghidra or Ghidra isn’t good at the disassembly of .NET executables.

We will use dnSpy for this executable.

I can finally understand something:

Using dnSpy I found a line where I thought it would check for the creds:

Create a breakpoint, attach the dnSpy debugger and enter any values for username and password. Once the breakpoint is reached change the values from false to true.

Afterwards step into the breakpoint. It will ask for a secret key, which you can view in dnSpy:

ThisIsAReallyReallySecureKeyButYouCanReadItFromSourceSoItSucks

This is the breakpoint where the flag is written to console:

---