This file is an 32bits elf binary, compiled from go language (i guess ... coded by @nibble_ds ;)

The binary has some debugging symbols, which is very helpful to locate the functions and api calls.





GO source functions:

- main.main

- main.function.001





If the binary is executed with no params, it prints "Nope!", the bad guy message.





~/ncn$ ./inbincible

Nope!





Decompiling the main.main function I saw two things:





1. The Argument validation: Only one 16 bytes long argument is needed, otherwise the execution is finished.





2. The key IF, the decision to dexor and print byte by byte the "Nope!" string OR dexor and print "Yeah!"

The incoming channel will determine the final message.

Dexor and print each byte of the "Nope!" message.





This IF, checks 16 times if the go channel reception value is 0x01, in this case the app show the "Yeah!" message.





Go channels are a kind of thread-safe queue, a channel_send is like a push, and channel_receive is like a pop.





If we fake this IF the 16 times, we got the "Yeah!" message:

Ok, but the problem is not in main.main, is main.function.001 who must sent the 0x01 via channel.

This function xors byte by byte the input "1234567890123456" with a byte array xor key, and is compared with another byte array.

This xor, encode the argument with a key byte by byte

The cmp of the xored argument byte,

will determine if the channel send 0 or 1

At this point we have the byte array used to xor the argument, and the byte array to be compared with, if we provide an input that xored with the first byte array gets the second byte array, the code will send 0x01 by the channel the 16 times.





The xor key can be dumped from memory but I prefer to use this macro:The result of the xor will compared with another array byte, each byte matched, a 0x01 will be sent.Now web have:Xor is reversible, then we can get the input needed to dexor to the expected values in order to send 0x1 bytes through the go channel.And that's the key :) let's try it:Got it!! thanx @nibble_ds for this funny crackme, programmed in the great go language. I'm also a golang lover.