Biometric SDKs Reversing for Personal Study

[TechLord]

A Working PoC Video of the License Crack:

Yes, I'd also been requested by the admin VietCode at that warez forum by PM right after I'd joined. They wanted to sell the crack and that was why I did not release it publicly there..

"A picture is worth a thousand words and a video is worth a thousand pictures"

I am posting a very, very quick video proof showing the comparision of how the SDK behaves when a sample app is run with and without the [license] crack.
In BOTH the cases, the app itself is not cracked or changed. Only the underlying SDK used for the sample program has been patched.
At this time I have only patched the part of the SDK dealing with fingerprint identification and analysis. I have not yet patched the other parts of the SDK that deal with face ID, IRIS Identification and other Biometrics.

Note that only ONE module needed to be patched...

Video with License Crack:

https://www44.zippyshare.com/v/GrWPTNxa/file.html

Video without License Crack:

https://www9.zippyshare.com/v/iuj3SDVo/file.html

This is my original crack (and needs to be modified a little though, to make it run reliably on all systems). But most definitely this is a working PoC that shows that it can be cracked without issues.
Internet has been disconnected for both the videos...

For software made with DEMO (TRIAL) SDK to run, internet connection has to be continuously present. Using our crack, that requirement is removed.

[Hoffman]

Originally Posted by TechLord

A Working PoC Video of the License Crack:

Yes, I'd also been requested by the admin VietCode at that warez forum by PM right after I'd joined. They wanted to sell the crack and that was why I did not release it publicly there..

"A picture is worth a thousand words and a video is worth a thousand pictures"

I am posting a very, very quick video proof showing the comparision of how the SDK behaves when a sample app is run with and without the [license] crack.
In BOTH the cases, the app itself is not cracked or changed. Only the underlying SDK used for the sample program has been patched.
At this time I have only patched the part of the SDK dealing with fingerprint identification and analysis. I have not yet patched the other parts of the SDK that deal with face ID, IRIS Identification and other Biometrics.

Note that only ONE module needed to be patched...

Video with License Crack:



Video without License Crack:


This is my original crack (and needs to be modified a little though, to make it run reliably on all systems). But most definitely this is a working PoC that shows that it can be cracked without issues.
Internet has been disconnected for both the videos...

For software made with DEMO (TRIAL) SDK to run, internet connection has to be continuously present. Using our crack, that requirement is removed.

Thank you @TechLord for your time.
Finally I see someone posting some real proof.

@h4sh3m:

As I remember version 4.x cracks sold for over $1000 without reporting any issues.

True. Versions upto 5.xx were very easy to crack. I was able to crack them myself without too much effort and I still have them with me.

The version that I requested is 10.x
No one had been able to crack the versions after version 6, even when I was willing to pay for them. I would have bought it if it wasn't so expensive. I just want to use it for my hobby project.

@TechLord: Would you be sharing your solution?

[TechLord]

Originally Posted by Hoffman

@TechLord: Would you be sharing your solution?

I do not think that it is a good idea to post it as an open share for everybody. So, I will be sharing it with only members here who have made significant contributions to the forum. I will of course share it with you.
Anything posted openly just aids the developers to use as a free tester's feedback to further strengthen their protection methods.

Right now we are very busy with the (Codemeter) dongle project which we started off on the 15th of October. I will be posting some updates about our findings very soon.
After that I will release the Biometrics SDK. If anyone wants a copy of the SDK just make a small post in this thread saying so.

[bolo2002]

Originally Posted by TechLord

Anything posted openly just aids the developers to use as a free tester's feedback to further strengthen their protection methods.

Sadly since long times on many forums.
When i were younger,forums were there to learn for educational purposes only,no need to name them and now too many infiltrated,none anymore fun spirit but it's the world now
greets.

[Megin]

Originally Posted by TechLord

Yes, I'd also been requested by the admin VietCode at that warez forum by PM right after I'd joined. They wanted to sell the crack and that was why I did not release it publicly there..
.

Yeah, I though I saw your post with the videos there a week ago but after a few hours it was gone. I thought you had removed it.

If you are a known reverser, you will get a bunch of crack requests in your PM box within a day of joining that forum. All for very expensive software. I cracked so many for the staff there for a year. Declined to crack just one software and they banned me (my account shows "restricted"). Poof, all my 18,000+ "likes" (needed to download anything there) all gone in an instant. They only keep you if they find you are useful to them. One of the most ruthless warez forums I ever came across.

Am sure glad that the staff at Exetools are ever so kind.

Anyway, could anyone post info regarding the mechanisms used for the protection of this SDK? Just like @h4sh3m , I also cannot figure out a way to crack it without patching all the modules. @TechLord says that patch was made in a single module. How ???

It will be good for learning if some guidance could be provided by anyone.

[chants]

Originally Posted by Megin

I cracked so many for the staff there for a year. Declined to crack just one software and they banned me (my account shows "restricted"). Poof, all my 18,000+ "likes" (needed to download anything there) all gone in an instant. They only keep you if they find you are useful to them. One of the most ruthless warez forums I ever came across.

Am sure glad that the staff at Exetools are ever so kind.

Yes poof, how very ruthless - there they do not hesitate to get rid of known rule violators. Their last 3 rules has seen a lot of miserable so-called reversers bite the restricted dust.

Of course fortunately this is not a behind the scenes crack selling forum so such odd pressures do not apply. Not sure that any meaningful comparisons can be drawn.


As for that video, which version of the SDK was cracked, I also am only interested in version 10.

[Ragnarok]

Originally Posted by Megin

Yeah, I though I saw your post with the videos there a week ago but after a few hours it was gone. I thought you had removed it.

If you are a known reverser, you will get a bunch of crack requests in your PM box within a day of joining that forum. All for very expensive software. I cracked so many for the staff there for a year. Declined to crack just one software and they banned me (my account shows "restricted"). Poof, all my 18,000+ "likes" (needed to download anything there) all gone in an instant. They only keep you if they find you are useful to them. One of the most ruthless warez forums I ever came across.

Am sure glad that the staff at Exetools are ever so kind.

Anyway, could anyone post info regarding the mechanisms used for the protection of this SDK? Just like @h4sh3m , I also cannot figure out a way to crack it without patching all the modules. @TechLord says that patch was made in a single module. How ???

It will be good for learning if some guidance could be provided by anyone.

Sorry to hear about your experience @Megin
@TechLord I am with Megin on this one. Could you post some clues so that we could crack it on our own? If we patch all the modules, I find that the included samples run, but the SDK itself does not work as fully licensed if used to create own apps. So I agree that patching all the modules is not the solution. I hope you can give more details so that I can proceed on the right path. I am not looking for a ready made solution.