Follow us on Twitter!
Ideas are far more powerful than guns.
Saturday, April 19, 2014
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
Learn
Communicate
Submit
Shop
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Other
Members Online
Total Online: 25
Guests Online: 24
Members Online: 1

Registered Members: 82832
Newest Member: SerMSYS
Latest Articles
View Thread

HellBound Hackers | Computer General | Programming

Author

.SAV files

techb
Member



Posts: 384
Location:
Joined: 15.02.09
Rank:
Moderate
Posted on 04-11-10 03:00
I have several .sav files produced by a program for school. I was wondering if anyone knew of a way to open them without the original program?

I've googled common ways of coding the function that produces the .sav file with no luck.

If nothing else, will a debugger like ollydbg help me with this?


www.userbars.com/74460/665255/337-7865-ubda3219.gif
kbcarte.wordpress.com
Author

RE: .SAV files

fuser
Member



Posts: 960
Location: in front of a computer (duh)
Joined: 05.04.07
Rank:
Mad User
Posted on 04-11-10 03:52
what's the name of the application, and what does it do?

I think this file was meant only to be created, edited and saved by the very application itself.

You can try reversing the sav file and see what it does, but it also depends on how skilled you are in this area.


img.userbarz.com/51/10006.png
img.userbarz.com/146/29144.gif
img.userbarz.com/99/19602.jpg
img.userbarz.com/4/600.png
img.userbarz.com/45/8814.gif
img360.imageshack.us/img360/9231/bfbarlr0.jpg
[url=http://userbarz.com/][img]ht
catinthecpu@hotmail.com
Author

RE: .SAV files

techb
Member



Posts: 384
Location:
Joined: 15.02.09
Rank:
Moderate
Posted on 04-11-10 04:13
fuser wrote:
what's the name of the application, and what does it do?

I think this file was meant only to be created, edited and saved by the very application itself.

You can try reversing the sav file and see what it does, but it also depends on how skilled you are in this area.


It is called hawks learning. It is used to teach math. The sav is created when you "certify" in the given lessons. It also gives you certification codes to print out, which is also the way you can view its contents.

I'm working on a script to compare all the sav byte per byte. I noticed only certan bytes change while viewing in a hex editor. Maybe I could change something around and try to submit it, but that may raise flags on Hawks servers.

I think it would be easier to trick the program that produces the sav with a debugger.


www.userbars.com/74460/665255/337-7865-ubda3219.gif
kbcarte.wordpress.com
Author

RE: .SAV files

fuser
Member



Posts: 960
Location: in front of a computer (duh)
Joined: 05.04.07
Rank:
Mad User
Posted on 05-11-10 03:44
so it creates a sav file when you've finished a course, as well as certification codes when for you to view on their servers, so the sav file would be sent directly to the servers, right?

yeah, I think their servers would have detected someone playing around with the sav files. I think you should find the component in the application that generates the file and certification codes, it seems more plausible.


img.userbarz.com/51/10006.png
img.userbarz.com/146/29144.gif
img.userbarz.com/99/19602.jpg
img.userbarz.com/4/600.png
img.userbarz.com/45/8814.gif
img360.imageshack.us/img360/9231/bfbarlr0.jpg
[url=http://userbarz.com/][img]ht
catinthecpu@hotmail.com
Author

RE: .SAV files

spyware
Member



Posts: 4192
Location: The Netherlands
Joined: 14.04.07
Rank:
God
Warn Level: 90
Posted on 05-11-10 12:52
Just do your math homework.



img507.imageshack.us/img507/3580/spynewsig3il1.png
"The chowner of property." - Zeph
[small]
Widespread intellectual and moral docility may be convenient for leaders in the short term,
but it is suicidal for nations in the long term.
- Carl Sagan
“Since the grid is inescapable, what were the earlier lasers about? Does the corridor have a sense of humor?” - Ebert
[/s
http://bitsofspy.net
Author

RE: .SAV files

techb
Member



Posts: 384
Location:
Joined: 15.02.09
Rank:
Moderate
Posted on 05-11-10 17:10
I have already completed that math course. I was just going to see if the program could be exploited.

To clear up what exactly goes on:
The program creates the sav after I complete a lesson.
That sav file contains the certification code, and time and date I am assuming and so on.

I then submit that sav to the hawks learning website, which gives me the grade for completion. If I am online, the program submits it for me.

I have the source for the submit page, as well as the page that checks what has been submitted.



www.userbars.com/74460/665255/337-7865-ubda3219.gif
kbcarte.wordpress.com
Author

RE: .SAV files


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 07-11-10 08:46
spyware wrote:
Just do your math homework.


True dat.
Author

RE: .SAV files

fuser
Member



Posts: 960
Location: in front of a computer (duh)
Joined: 05.04.07
Rank:
Mad User
Posted on 07-11-10 12:47
techb wrote:
I have already completed that math course. I was just going to see if the program could be exploited.

To clear up what exactly goes on:
The program creates the sav after I complete a lesson.
That sav file contains the certification code, and time and date I am assuming and so on.

I then submit that sav to the hawks learning website, which gives me the grade for completion. If I am online, the program submits it for me.

I have the source for the submit page, as well as the page that checks what has been submitted.


that clears it up a bit. Is there anything that stands out from both submission and submission checking page?


img.userbarz.com/51/10006.png
img.userbarz.com/146/29144.gif
img.userbarz.com/99/19602.jpg
img.userbarz.com/4/600.png
img.userbarz.com/45/8814.gif
img360.imageshack.us/img360/9231/bfbarlr0.jpg
[url=http://userbarz.com/][img]ht
catinthecpu@hotmail.com