|
|
#1
10-07-2015, 12:23
|
|||
|
|||
|
Obfuscated Crapkey SiteCode
Hi all, I am running into some issues with a crypkey protected application. First time that I've had any issues with crypkey.
I'm looking for a way to have the crypkey engine eat my site key without going through the application registration page. I believe the registration page is just looking for an obfuscated site key entry and it displays an obfuscated site code. I followed everything out in OllyDBG and I believe my current site code to be D287 ABD0 DBFC 2FAA 13. Obfuscated on the License Administrator it shows up as 8A057A32623 83600F19F66 9EFF7C2227C 57FF2 The Screen is asking for a 42 Digit Site Key. I've Ran it a couple times, getting a different sitecode as read in ollydbg and hashed sitecode if I don't skip past the get systemtime as file time check. See the multiple valid sitecodes below. Anyone able to point me in the right direction? Also, I think the Userkey I have might not be correct, as the user key hash from the generated Licences are different from it? Code:
Z:\VM Documents\Cracks\ckInfo>ckinfo+ /sitecode D287 ABD0 DBFC 2FAA 13
CrypKey Copy Protection Information v1.14+ modified by raduga_fb
Parsing Code - D287 ABD0 DBFC 2FAA 13
Decrypting Code - 0002 47D4 08FF 7F0D D4 [0x15:0x17]
Code Validation - OK
Formatting Code :
02 47 D408 FF7F 0DD4
╚╣ ╚╣ ╠══╝ ╠══╝ ╠══╝
║ ║ ║ ║ ╚═══════════════ Code CRC - 0x0DD4
Allow Add Licence? - No ═══╣ ║ ║ ╠════════ User Key Hash (Seed) - 0x7FFF
Allow Easy Licence? - Yes ═╝ ║ ║ ╚══════════ Drive Serial Number - 32767
CrypKey Libraries - v7.1 ═════╝ ╠═ Account Number - 212
╠═ Application Id - 2
╚═ Company Number - 7956212
Z:\VM Documents\Cracks\ckInfo>ckinfo+ /sitecode 484C 728C 9894 3265 C9
CrypKey Copy Protection Information v1.14+ modified by raduga_fb
Parsing Code - 484C 728C 9894 3265 C9
Decrypting Code - 0002 47D4 08FF 7F0D D4 [0x09:0x13]
Code Validation - OK
Formatting Code :
02 47 D408 FF7F 0DD4
╚╣ ╚╣ ╠══╝ ╠══╝ ╠══╝
║ ║ ║ ║ ╚═══════════════ Code CRC - 0x0DD4
Allow Add Licence? - No ═══╣ ║ ║ ╠════════ User Key Hash (Seed) - 0x7FFF
Allow Easy Licence? - Yes ═╝ ║ ║ ╚══════════ Drive Serial Number - 32767
CrypKey Libraries - v7.1 ═════╝ ╠═ Account Number - 212
╠═ Application Id - 2
╚═ Company Number - 7956212
Z:\VM Documents\Cracks\ckInfo>ckinfo+ /sitecode 25CD FDFD 2F09 FA42 A4
CrypKey Copy Protection Information v1.14+ modified by raduga_fb
Parsing Code - 25CD FDFD 2F09 FA42 A4
Decrypting Code - 0002 47D4 08FF 7F0D D4 [0x06:0x07]
Code Validation - OK
Formatting Code :
02 47 D408 FF7F 0DD4
╚╣ ╚╣ ╠══╝ ╠══╝ ╠══╝
║ ║ ║ ║ ╚═══════════════ Code CRC - 0x0DD4
Allow Add Licence? - No ═══╣ ║ ║ ╠════════ User Key Hash (Seed) - 0x7FFF
Allow Easy Licence? - Yes ═╝ ║ ║ ╚══════════ Drive Serial Number - 32767
CrypKey Libraries - v7.1 ═════╝ ╠═ Account Number - 212
╠═ Application Id - 2
╚═ Company Number - 7956212
Code:
Z:\VM Documents\Cracks\ckInfo>ckinfo+ /userkey D6FD1E766470D5
CrypKey Copy Protection Information v1.14+ modified by raduga_fb
Parsing Key - D6FD 1E76 6470 D5
Decrypting Key - 0008 0808 0908 00
Key Validation - OK
Formatting Key :
080808090800
╠══════════╝
╠═══ Password - GGGNG
╠═══ Password Number - 1193178444
╠═══ User Key Hash (1) - 0x29
╚═══ User Key Hash (2) - 0x0497
Z:\VM Documents\Cracks\ckInfo>ckinfo+ /masterkey 51dc003a639c8e056e0f54081fb20f5
1e0367168bc55443704aae37f88b0a22e3a02029880b0b1f98b165fdc380af2c41f3c7a8dad94425
56a6f1f216a67bf6f0a02c52a411d8b45e4cded7ae89f1a4232a7cba699455212cadac6851121f52
7e6056707376af129aed32d8c3017c70fa170a806cf72215a9f75516a60cd9bc9
CrypKey Copy Protection Information v1.14+ modified by raduga_fb
Parsing Key - 51DC 003A 639C 8E05 6E0F 5408 <..> 215A 9F75 516A 60CD 9BC9
Decrypting Key - DAFE 0000 D408 0000 0000 0046 0300 0000 0100 0100 0000 0000
0000 0000 0000 0000 0000 0000 0000 564C 494E 4B2E 4441 5400
0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 DCDE
Key Validation - OK
Formatting Key :
0000 D408 00460300 0000:0100 564C494E4B2E4441540000000000 DCDE
╚══╣ ╠══╝ ╠══════╝ ╚═══════╣ ╠══════════════════════════╝ ╚══╣
╔═ Allow Modules ═╝ ║ ║ ╔══════════════╝ ╚══════ Filename - VLINK.DAT ║
╠═ WinNT16? - Yes ║ ║ ╠══ Maximum Modules - 0 CRC - 0xDCDE ═══╝
╠═ WinNT32? - Yes ║ ║ ╚══ Network Seats (Site Key: 1 / Max: 1)
╚═ Network? - Yes ║ ╠════ Static Key? - No
║ ╠════ USBKey? - No
║ ╠════ VM Protection? - No
║ ╠════ Licence File (CLF)? - No
║ ╚════ v7+ Key? - Yes (v7.0)
╠═══ Account Number - 212
╠═══ Application Id - 2
╚═══ Company Number - 7956212
Code:
Z:\VM Documents\Cracks\ckInfo>ckinfo+ /sitekey A96297FFD8D09DD59C2A2E682A
CrypKey Copy Protection Information v1.14+ modified by raduga_fb
Parsing Key - A962 97FF D8D0 9DD5 9C2A 2E68 2A
Decrypting Key - 0000 FF68 7B7F 77BF 1E00 0035 8F [0x03:0x1E]
Key Validation - OK
Formatting Key :
00 00 FF 687B 7F77BF1E 0000 358F
╠╝ ╚╝ ╚╣ ╠══╝ ╠══════╝ ╠══╝ ╠══╝
╚═══╗ ║ ║ ║ ║ ╚══════════ Key CRC - 0x358F
Add To Licence? - No ═══╝ ║ ║ ║ ╚══════════════ Unlimited Licence
Number Of Licences - 1 ════╣ ║ ╠══ Key Level - 30591
Network Licence? - Yes ════╝ ║ ╚══ Key Options - 4-7,9,11-16
Easy Licence? - No ══════════╩═══════ User Key Hash - 0x7B68
Z:\VM Documents\Cracks\ckInfo>ckinfo+ /sitekey 6CD0CF930A632EC37FA33BB065
CrypKey Copy Protection Information v1.14+ modified by raduga_fb
Parsing Key - 6CD0 CF93 0A63 2EC3 7FA3 3BB0 65
Decrypting Key - 0000 FF68 7BF2 B78A 1E3C 8034 2F [0x0B:0x1D]
Key Validation - OK
Formatting Key :
00 00 FF 687B F2B78A1E 3C80 342F
╠╝ ╚╝ ╚╣ ╠══╝ ╠══════╝ ╠══╝ ╠══╝
╚═══╗ ║ ║ ║ ║ ╚══════════ Key CRC - 0x342F
Add To Licence? - No ═══╝ ║ ║ ║ ╚════ Limited Licence (Days) - 60
Number Of Licences - 1 ════╣ ║ ╠══ Key Level - 47090
Network Licence? - Yes ════╝ ║ ╚══ Key Options - 4-7,9,13,15
Easy Licence? - No ══════════╩═══════ User Key Hash - 0x7B68
|
|
#4
10-10-2015, 01:02
|
|||
|
|||
|
It seems like the Key Level is changing everytime a new license is generated as wel.... The options always stay similiar, but written in a different way example
Code:
Z:\VM Documents\Cracks\ckInfo>ckinfo+ /sitekey 9E429316626EAF4575E3C9E3E6
CrypKey Copy Protection Information v1.14+ modified by raduga_fb
Parsing Key - 9E42 9316 626E AF45 75E3 C9E3 E6
Decrypting Key - 0000 FF68 7BF3 0F27 0A00 00E5 ED [0x15:0x17]
Key Validation - OK
Formatting Key :
00 00 FF 687B F30F270A 0000 E5ED
╠╝ ╚╝ ╚╣ ╠══╝ ╠══════╝ ╠══╝ ╠══╝
╚═══╗ ║ ║ ║ ║ ╚══════════ Key CRC - 0xE5ED
Add To Licence? - No ═══╝ ║ ║ ║ ╚══════════════ Unlimited Licence
Number Of Licences - 1 ════╣ ║ ╠══ Key Level - 4083
Network Licence? - Yes ════╝ ║ ╚══ Key Options - 5,7,11,14-16
Easy Licence? - No ══════════╩═══════ User Key Hash - 0x7B68
Z:\VM Documents\Cracks\ckInfo>ckinfo+ /sitekey A96297FFD8D09DD59C2A2E682A
CrypKey Copy Protection Information v1.14+ modified by raduga_fb
Parsing Key - A962 97FF D8D0 9DD5 9C2A 2E68 2A
Decrypting Key - 0000 FF68 7B7F 77BF 1E00 0035 8F [0x03:0x1E]
Key Validation - OK
Formatting Key :
00 00 FF 687B 7F77BF1E 0000 358F
╠╝ ╚╝ ╚╣ ╠══╝ ╠══════╝ ╠══╝ ╠══╝
╚═══╗ ║ ║ ║ ║ ╚══════════ Key CRC - 0x358F
Add To Licence? - No ═══╝ ║ ║ ║ ╚══════════════ Unlimited Licence
Number Of Licences - 1 ════╣ ║ ╠══ Key Level - 30591
Network Licence? - Yes ════╝ ║ ╚══ Key Options - 4-7,9,11-16
Easy Licence? - No ══════════╩═══════ User Key Hash - 0x7B68
However I can change the days before expiry on the trial and it seems to stick original Code:
Z:\VM Documents\Cracks\ckInfo>ckinfo+ /sitekey 524A966750BA65B865DD2170C1
CrypKey Copy Protection Information v1.14+ modified by raduga_fb
Parsing Key - 524A 9667 50BA 65B8 65DD 2170 C1
Decrypting Key - 0000 FF68 7BBA ABE3 0D3C 8006 3C [0x07:0x1E]
Key Validation - OK
Formatting Key :
00 00 FF 687B BAABE30D 3C80 063C
╠╝ ╚╝ ╚╣ ╠══╝ ╠══════╝ ╠══╝ ╠══╝
╚═══╗ ║ ║ ║ ║ ╚══════════ Key CRC - 0x063C
Add To Licence? - No ═══╝ ║ ║ ║ ╚════ Limited Licence (Days) - 60
Number Of Licences - 1 ════╣ ║ ╠══ Key Level - 43962
Network Licence? - Yes ════╝ ║ ╚══ Key Options - 5,6,8-11,15,16
Easy Licence? - No ══════════╩═══════ User Key Hash - 0x7B68
Code:
Master Key Passed Afterwards:
Z:\VM Documents\Cracks\ckInfo>ckinfo+ /sitekey 107ACC15506ED60E306E8F136C
CrypKey Copy Protection Information v1.14+ modified by raduga_fb
Parsing Key - 107A CC15 506E D60E 306E 8F13 6C
Decrypting Key - 0000 FF68 7BD3 26EF 1100 00F1 2C [0x02:0x12]
Key Validation - OK
Formatting Key :
00 00 FF 687B D326EF11 0000 F12C
╠╝ ╚╝ ╚╣ ╠══╝ ╠══════╝ ╠══╝ ╠══╝
╚═══╗ ║ ║ ║ ║ ╚══════════ Key CRC - 0xF12C
Add To Licence? - No ═══╝ ║ ║ ║ ╚══════════════ Unlimited Licence
Number Of Licences - 1 ════╣ ║ ╠══ Key Level - 9939
Network Licence? - Yes ════╝ ║ ╚══ Key Options - 4,8-11,13-16
Easy Licence? - No ══════════╩═══════ User Key Hash - 0x7B68
The Key I Passed
Z:\VM Documents\Cracks\ckInfo>ckinfo+ /sitekey d94b856569bb5f5062d52b5db3
CrypKey Copy Protection Information v1.14+ modified by raduga_fb
Parsing Key - D94B 8565 69BB 5F50 62D5 2B5D B3
Decrypting Key - 0000 FF68 7BBA ABE3 0D21 874E AE [0x07:0x1E]
Key Validation - OK
Formatting Key :
00 00 FF 687B BAABE30D 2187 4EAE
╠╝ ╚╝ ╚╣ ╠══╝ ╠══════╝ ╠══╝ ╠══╝
╚═══╗ ║ ║ ║ ║ ╚══════════ Key CRC - 0x4EAE
Add To Licence? - No ═══╝ ║ ║ ║ ╚══ Limited Licence (Days) - 1825
Number Of Licences - 1 ════╣ ║ ╠══ Key Level - 43962
Network Licence? - Yes ════╝ ║ ╚══ Key Options - 5,6,8-11,15,16
Easy Licence? - No ══════════╩═══════ User Key Hash - 0x7B68
I am still unable to figure out how my application changes my sitecode into a 42 character hash. But I believe this sitecode is only generated on the first run of the license application and then stashed away in a file to be checked against later. Either I am missing something completely and the answer is right under my nose or this is a very nice implementation of crypkey SDK.
|
|
#5
10-10-2015, 09:49
|
|||
|
|||
|
@psgama:
If you can upload the full setup of the prog somewhere and PM me the link , I will have a quick look tonight ? Cheers 
|
|
#6
10-10-2015, 18:39
|
|||
|
|||
|
obfuscated site code
Following method can be used incase obfuscated site code & site key.
1- invoke InitCrypkey, addr filepath, addr masterkey, addr userkey, 0, 0 2- invoke GetSiteCode, addr temp_1 3- invoke SaveSiteKey, addr temp_2 1 -> filepath -> where is the license file, in your case it is VLINK.DAT 2 -> getting the real sitecode to be entered into ckinfo 3 -> saving the site key taken from ckinfo
|
|
#7
10-10-2015, 19:36
|
|||
|
|||
|
Able to make some headway in the last one hour after I got hold of the installer files.
As you can see in the screenshot, we are able to create SiteKeys accurately now.. I am however TOTALLY unfamiliar with the actual program and it is asking for some "login" user ID and PW... Too tired now to read the manual...And very late at night as well. Will try out the various combinations of the "Options" and Levels tomorrow to see if it can indeed be made Unlimited... Meanwhile, @psgama, could you please tell us what info to use to actually "login" into the prog so that the ACTUAL PROGRAM runs (not just the license manager) ? Am also able to confirm that the User Key and Master Key that you have posted above are correct. Greets to bro raduga_fb ... Long time no see
Last edited by TechLord; 02-26-2018 at 07:10.
|
|
#9
10-11-2015, 10:18
|
|||
|
|||
|
Thanks for your contributions Techlord and Raduga_fb. So, In first run, the program takes the sitecode and saves it somewhere. I believe this is the sitcode that's obfuscated in the license manager, as a dump of the NGN shows this initial sitecode later on in the dump. What I've been doing this far to generate keys is hitting the generate trial button, which then initiates the getsitecode function and then the savesitekey function. Using this site code and of course ckinfo, i can generate a license with a longer expiry, and overwrite the sitekey that the program is passing to savesitekey, forcing it to eat the ones generated. Only issue is that the unlimited ones I try to generate are not accepted. Immedietly after generating this "trial" key. The program requests another site code and asks for a unlike red key to be passed through the savesitekey function. As shown above. So yeah, that's where I've gotten with it so far. Techlord, unfortunately I don't have enough rep yet to view attachments. Lol
|
|
#10
10-11-2015, 12:36
|
|||
|
|||
|
OOPS ... Sorry psgama
 for my insensitivity...Link here : Quote:
Last edited by TechLord; 10-11-2015 at 13:17.
|
|
#11
10-11-2015, 14:02
|
|||
|
|||
|
Ok guys...
As shown in the screenshot in the above post, I have been able to successfully generate the Site Keys. However, for this particular application the option "Limit by Days" function in the Crypkey API only has been activated by the author. The other options that can be used in the API include : "Limit by Runs" and Unlimited. These functions of the API were not availe of by the author of the program. The author had meant the SOFTWARE licensing by Crypkey to be used for TRIAL purposes mostly, and the DONGLE for (mainly) UNLIMITED USE... This program can be activated for UNLIMITED ONLY when the Sentinel dongle is used with it for its licensing. Otherwise, if SOFTWARE-BASED licensing is used, the program can be used only limited by DAYS. Meaning that you can extend the TRIAL to a very huge number lke 9999 days or something like that. But as far as my investigation shows, there is no option in that program to have UNLIMITED, just by entering a Site Key. This is what I understood.. One way to bypass this would be if you modify the program code (Crpykey API etc) as such directly - very complicated. However in this program, I see clearly that the SENTINEL runtime as well as its API are also integrated deeply, along with pretty good Anti-Debugging tricks... I see, psgama, that you have ALREADY achieved the EXTENSION of the TRIAL by many more days by substituting your own Site Key. So I see that nothing much can be done without modifying actual program code a lot. If there is anything that can further be done then please let me know (other than changing the whole crypkey API in the code !) ...
|
|
#13
10-11-2015, 23:26
|
|||
|
|||
|
Thank you all for your contributions. I knew I was having difficulties moving forward for a reason. Multiple protection schemes are in place here. And yes, some pretty good anti-debugging tricks in place as well. Extension of the trial to a huge number is definitely acceptable in this case, as it's pretty much fully functional. I have PM'ed the link to the trial download to anyone that has requested it.
Cheers and thank you all for your time and contributions of knowledge.
|
|
#14
10-12-2015, 04:12
|
|||
|
|||
|
The program can be registered as FULLY through Crypkey. There must be a relation between Key Level and Options. Example -> Level=11597, Options=4,5,7,10,11,13,15,16, or, Level=46730, Options=8-12,14,16. If Site Key is created based on one of them, the license can be permanent. It is necessary to debug the program to find out the relation which I am not going to do
|
|
#15
10-12-2015, 08:12
|
|||
|
|||
|
Thanks for the confirmation Raduga_fb. I suspected there was a relationship between the level, options and license type in this application, as I generated several licenses through my research so far and noticed them changing often. A very good implementation of crypkey, I will continue with my research and post the relationship when I find it.
|
 |
| Tags |
| ckinfo, crypkey |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Floss - Obfuscated String Solver - Automatically extract obfuscated strings | TechLord | General Discussion | 1 | 06-25-2016 16:45 |
| When will Crapkey learn ??? | Numega Softice | General Discussion | 4 | 06-10-2004 14:44 |
Linear Mode
