Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 11-26-2009, 22:11
fredikruger2002
 
Posts: n/a
Quote:
Originally Posted by h-- View Post
Ditto, i haven't seen anything in the "wild" protected by it, only some people claiming that it's adequate.
Not in the wild, but it is used successfully to protect some custom software.

I know this because i implemeted the protectiopn for a small company
Reply With Quote
  #2  
Old 09-15-2009, 14:38
Nexus6
 
Posts: n/a
Any protector is very good if you USE it properly. Most software devs just want something quick and easy, and to keep out the general population.

Armadillo is almost impossible if you use secured sections with many certifactes and ECDSA level 10 keys, custom environment variables, and all other protections enabled. You simply will not crack it without a valid code, and if you put in the proper checks on it, you are in for some serious headache patching even if you do dump it properly (which most people don't).

Themida/Winlicense/VMprotect is still quite formidable if you again, implement it properly. Using code wrap/encrypt in your source code and using proper checks.

Properly removing safedisc/safecast/activemark/securom is also quite the challenge. Dumped VM's suck, k thanks!

=]
Reply With Quote
  #3  
Old 09-15-2009, 15:44
Chaoslord
 
Posts: n/a
Again I'd go with most people and say Themida/Winlicense (especially if properly configured) and execryptor
Reply With Quote
  #4  
Old 09-16-2009, 03:05
AttonRand
 
Posts: n/a
Quote:
NoobyProtect : seems to be top of the food-chain right now.
I cant even run the demo on my pc... it drains 50% of my CPU and die (without being debugged of course). Cant say anything.

Quote:
Enigma Protector : is still very solid.
Are you joking?

Quote:
Winlicense/Themdia : is still very solid.
I have never come accross this protector for my purposes and i am sure that i cant unpack it. However i saw many tutes around and so many people focusing on this.

Quote:
Asprotect/SKE : I don't see much anymore, that may just be a fluke.
Asprotect with crypted functions is still very difficult to crack. I can only remember a bday attack to the decryption-based-on-keys from unpack.cn in 2006.

Never tried Obsidium too.

Quote:
Armadillo : Chad & Nick need to come up with some new tricks, outside of their ECDSA level 10 keys, Armadillo is pretty much rapped at will anymore.
I like arma, at the beginning it went out with new ideas in the re field (nanos & child/father). I still love it and i hope that authors will implement something new. Unpacking this protection has no secrets nowadays (but could be a little difficult sometimes), keygenning it is still a challenge.

I dont know about execryptor but it must be a dead project

And finally... who resumed this old topic?
Reply With Quote
  #5  
Old 09-17-2009, 03:12
Loki Loki is offline
Lo*eXeTools*rd
 
Join Date: Jan 2009
Posts: 122
Rept. Given: 156
Rept. Rcvd 65 Times in 30 Posts
Thanks Given: 58
Thanks Rcvd at 18 Times in 13 Posts
Loki Reputation: 65
Agreed..... how the hell can NoobyProtect be considered strong when theres sod all out there to look at??

If its really that good there would be no problem chucking out some protected files to show off its strength. At the moment it just talks the talk with out even taking its first steps, let alone walking the walk. Thats no disrespect to Nooby, its merely a statement of fact.

Having said that, NoobyProtect is employing by far the safest 'protection' and that is limited distribution of 'non-demo' versions. If the code aint there, it aint going to be cracked (although carding then becomes the problem). The only way VB Decompiler was beaten was because the code was made available. Even using some of the better protectors it was then beaten by someone who had put the time in to learn.
Reply With Quote
The Following User Gave Reputation+1 to Loki For This Useful Post:
progopis (09-17-2009)
  #6  
Old 09-17-2009, 03:20
quosego quosego is offline
Family
 
Join Date: Feb 2009
Posts: 104
Rept. Given: 8
Rept. Rcvd 39 Times in 13 Posts
Thanks Given: 0
Thanks Rcvd at 1 Time in 1 Post
quosego Reputation: 39
Quote:
Winlicense/Themdia : is still very solid.
WL can be unpacked without a license and registered with 2 dwords.. I'd call that crap.
It's VM is the only thing that's decent everything else is lazy coding.

As for noobyprotect, I've only seen the demo. And it was not very impressive.
But I could be wrong.
Reply With Quote
  #7  
Old 09-17-2009, 04:44
D-Jester's Avatar
D-Jester D-Jester is offline
VIP
 
Join Date: Nov 2003
Location: Ohio, USA
Posts: 269
Rept. Given: 39
Rept. Rcvd 61 Times in 41 Posts
Thanks Given: 0
Thanks Rcvd at 4 Times in 4 Posts
D-Jester Reputation: 61
My assumptions of NoobyProtect are based on ahmadmansoor overview and comments:
http://forum.exetools.com/showthread.php?t=12446

I have been very busy and haven't even looked into it.

Keep in mind, these were my personal opinions of protections based on experience(s) with them. The derogatory tones in some of your comments aren't necessary. If you have a different opinion then please feel free to share it.
__________________
Even as darkness envelops and consumes us, wrapping around our personal worlds like the hand that grips around our necks and suffocates us, we must realize that life really is beautiful and the shadows of despair will scurry away like the fleeting roaches before the light.
Reply With Quote
  #8  
Old 09-17-2009, 10:25
Asus Asus is offline
VIP
 
Join Date: Feb 2005
Posts: 594
Rept. Given: 122
Rept. Rcvd 27 Times in 13 Posts
Thanks Given: 147
Thanks Rcvd at 94 Times in 35 Posts
Asus Reputation: 28
Wibu Codemeter is another uncrackedable at this time - I guess!
Reply With Quote
  #9  
Old 09-17-2009, 14:02
Syoma Syoma is offline
reverse engineer
 
Join Date: May 2009
Posts: 338
Rept. Given: 35
Rept. Rcvd 77 Times in 50 Posts
Thanks Given: 15
Thanks Rcvd at 78 Times in 51 Posts
Syoma Reputation: 77
Wibu CodeMeter is crackable. Just look around.
Reply With Quote
  #10  
Old 11-11-2009, 10:18
Asus Asus is offline
VIP
 
Join Date: Feb 2005
Posts: 594
Rept. Given: 122
Rept. Rcvd 27 Times in 13 Posts
Thanks Given: 147
Thanks Rcvd at 94 Times in 35 Posts
Asus Reputation: 28
Quote:
Originally Posted by Syoma View Post
Wibu CodeMeter is crackable. Just look around.
Without dongle access and Enveloped, is it cracked-able?!
Reply With Quote
  #11  
Old 11-14-2009, 22:26
Syoma Syoma is offline
reverse engineer
 
Join Date: May 2009
Posts: 338
Rept. Given: 35
Rept. Rcvd 77 Times in 50 Posts
Thanks Given: 15
Thanks Rcvd at 78 Times in 51 Posts
Syoma Reputation: 77
Quote:
Originally Posted by Asus View Post
Without dongle access and Enveloped, is it cracked-able?!
Why do you ask? Anyway, it is.
Reply With Quote
  #12  
Old 11-16-2009, 02:12
Asus Asus is offline
VIP
 
Join Date: Feb 2005
Posts: 594
Rept. Given: 122
Rept. Rcvd 27 Times in 13 Posts
Thanks Given: 147
Thanks Rcvd at 94 Times in 35 Posts
Asus Reputation: 28
Quote:
Originally Posted by Syoma View Post
Why do you ask? Anyway, it is.
Because I have one of this kind and also asked some reversers and they always ask dongle to do
Reply With Quote
  #13  
Old 11-17-2009, 10:31
remal
 
Posts: n/a
Quote:
Originally Posted by Syoma View Post
Why do you ask? Anyway, it is.
This would be very interesting if it were true.

Without access to the dongle which usually contains the decryption key, one would have only two choices: 1. bruteforce, 2. give up. Unless the implementation uses DES or some damn weak encryption, then it becomes interesting.

Do you mind to shed some more light over here, Syoma?
Reply With Quote
  #14  
Old 11-04-2009, 16:23
quosego quosego is offline
Family
 
Join Date: Feb 2009
Posts: 104
Rept. Given: 8
Rept. Rcvd 39 Times in 13 Posts
Thanks Given: 0
Thanks Rcvd at 1 Time in 1 Post
quosego Reputation: 39
Yeah crypkey is nice.. Though doable, just something that needs a bit of time..
Mostly due to lack of documentation.
Quote:
Other than those, I am from a much older generation of 'cracking', and what you kids do now just amazes and impresses me!
I'm from the younger generation.. And well we all had to learn it from the older dudes one time.. We could skip a lot of stuff thanks to the tuts and info the older generation provided.. But I suppose that has always been the case, we all built on the culture the previous generation has provided.

Me wonders what the generation time is..
Reply With Quote
  #15  
Old 11-04-2009, 21:33
Git's Avatar
Git Git is offline
Old Git
 
Join Date: Mar 2002
Location: Torino
Posts: 1,116
Rept. Given: 220
Rept. Rcvd 265 Times in 157 Posts
Thanks Given: 110
Thanks Rcvd at 220 Times in 126 Posts
Git Reputation: 200-299 Git Reputation: 200-299 Git Reputation: 200-299
> But I suppose that has always been the case

Yep, JMI and I learned from the Bletchley Park work

Git
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
How come new registrants given "guest" rank and not even a "friend" rank? OldieHans General Discussion 4 09-25-2023 12:19
When use "vendor defined encryption routines", how to set daemon related part? bridgeic General Discussion 6 01-22-2015 11:35
Wlscgen: Are "Vendor Id" and "Developer Id" different ? Numega Softice General Discussion 6 02-12-2007 18:12


All times are GMT +8. The time now is 01:46.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )