what is the best way to crack s/w that acccess the web to check s/n?

"...it checks the s/n (which is diff on each p.c you install it on) via the web? can this be cracked or no?

I guess this is a kind of protection that we'll start to see more and more and it's obvious that nobody feels safe studying an app connected to the net. I am not sure but i remember that DAMN made some kind of "proxy"(?) to emulate some protection based on this...not sure.

yea i have tried a few diff ways to crack this so far no go but i'am still learning this stuff...i hope someone out there thinks of a way to get around this....

thanks

[MEPHiST0]

well, Load the EXE or DLL into IDA...

check out the imports.. usually imports are used to connect to the internet and check a sn :>
if not, then check out the exports, some other functions that the exe has..

id just disable the Net connect, and assemble the proper code for it to be registered.. :>

[dyn!o]

I have been watching this thread and wonder how you guys managed to understand the first post. I didn't. I downloaded this soft to watch "s/n (which is diff on each p.c you install it on) via the web".

It turned out to be a very simple protection which can be cracked with tens different solutions. It's really too simple to explain it here so let's go with the effect.

Copy this file to [WINDOWS]/SYSTEM32 directory.

Run the software. Does it show "VIP user"? Yes, so why aren't you "VIP" at ExeTools? Go and post something (just a little humour). Now you have unlocked software (by the way: GSM tools, like this, are often protected by some weird techiques).

If someone wants to work with this protection then try to reveal its FTP communication (it's not hard).

Regards.

wow well i'am not at home to test it...(i will test it later)
i know you said its to simple to explain here...however i would like you to explain it please..cuase i must of made something easy into something hard

thanks for checking it out


p.s sorry about the first post..i didn't explain it well i never thought of it using ftp server

[JMI]

There are generally (at least) two issues which may be important when considering software that connects to the author's website to confirm its validation.

First, if it is just a "confirmation" of a S/N, followed by a goodboy/bad cracker switch, you can often just "redirect" the URL it calls home to and activate the goodboy selection.

However, if it calls home and confirms your registration info before it sends you something (i.e., decrypt code) you need to make some vital part of the program actually work, you have a much more difficult problem.

Regards,

[dyn!o]

Chad1111: sorry, I didn't mean you cannot explain the problem. It was just a funny post (maybe a little chaotic) for me so I wanted to take a look on the software because I knew it would take few posts to let me understand what did you mean by online serial number verification. When someone says "it is hard/impossible" it tells me what to do.

About explaination: JMI explained the theory very well - his post would take me approx. 10 times more forum space to say the same . If it comes to strict tech stuff then I am too old (hey, I'm still below 30!) and that is the reason of my "advice style" rather than tutorial style. I know you guys would like to receive full tutorial each time but there are two reasons I won't do it in this case. First: it's really too easy (I mean it) and you have a lot of cracking possibilities if you want to learn. I gave you a key file, you can still crack the software on your own and even sniff the transmission to build independent FTP connection - isn't it a good example to practice such a nice techniques which may be probably used more often with the time? Second: I would like rather to make 10 "advice" like posts than one tutorial.

Human mind is to think. Personally I don't like the style of "press F8, make a dump using PETools, fix the offset at...". I prefer the way of logic explaination (not tutorial) and ideas suggestion. Most of you don't like such a way but I believe (I may be wrong but let me dream) it is the most effective method if it comes to knowledge "boost". Consider this: what is the problem to break "usual" protections? Time - that's all the problem. And what is the problem to break the best protection(s)? Idea. You see, most of us have similar level of tech-knowledge. So why one can crack abc and other cannot? Because one can cross some abstract border in his mind and sometimes posses better invention abilities while the second one tries to "bruteforce" the protection with "F8" key, without taking a serious break to think about other possible solutions and give the mind a chance to build an innovative idea. To be clear: I am not talking about anyone, nor myself. It's just a piece of my theory. Also it is only my private opinion - don't kill me and don't scream here. PM me with "fu*k you" charset as the message content - that will be much better .

Regards.