ELF MIPS basic crackme

Root-me challenge: Find the validation password.

---

1. Decompile the binary in, for example, Ghidra.

2. Analysis

• There is no check on the length of the input

• There is a loop which checks that at indexes 8 - 16 there is an i

3. Check the stack.

4. Find the other characters.

5. The password is 19 characters long.

---

Resources

• Exploiting Buffer Overflows on MIPS Architectures - Lyon Yang

• Reverse Engineering pour Débutants - Dennis Yurichev

• Taming a Wild Nanomite-protected MIPS Binary With Symbolic Execution - Diary of a reverse-engineer

• MIPS Green Sheet

• MIPS Assembly Tutorial