Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 09-14-2019, 18:27
devwhatsapp
 
Posts: n/a
Inno Setup Password Method

Hi

Does the method applied to ida pro setups works for any other inno setup password protected setups of any other software ?

Regards
Reply With Quote
  #2  
Old 09-15-2019, 14:40
DARKER DARKER is offline
VIP
 
Join Date: Jul 2004
Location: Côte d'Ivoire
Posts: 247
Rept. Given: 13
Rept. Rcvd 90 Times in 35 Posts
Thanks Given: 2
Thanks Rcvd at 93 Times in 37 Posts
DARKER Reputation: 90
No. Its because IDA used to generate Perl script that use custom characters and conditions to generate password. Attack was aimed to PRNG of this custom script.

Chances that other setups use the same way is 0.

You can use same approach in other cases if you know more about how developer generate password.
Reply With Quote
  #3  
Old 09-15-2019, 16:28
deepzero's Avatar
deepzero deepzero is offline
VIP
 
Join Date: Mar 2010
Location: Europe
Posts: 218
Rept. Given: 99
Rept. Rcvd 60 Times in 38 Posts
Thanks Given: 85
Thanks Rcvd at 95 Times in 50 Posts
deepzero Reputation: 60
Wasnt there also a problem with the setup generator software that included the plaintext password in the setup?
Reply With Quote
  #4  
Old 09-15-2019, 17:41
DARKER DARKER is offline
VIP
 
Join Date: Jul 2004
Location: Côte d'Ivoire
Posts: 247
Rept. Given: 13
Rept. Rcvd 90 Times in 35 Posts
Thanks Given: 2
Thanks Rcvd at 93 Times in 37 Posts
DARKER Reputation: 90
Quote:
Originally Posted by deepzero View Post
problem with the setup generator software that included the plaintext password in the setup
Only for Linux and MacOS versions (was used InstallBuilder but with new version 19.2.0 they fixed it)

Code:
https://blog.bitrock.com/2019/02/installbuilder-1920-released.html

Last edited by DARKER; 09-15-2019 at 17:46.
Reply With Quote
  #5  
Old 09-19-2019, 20:52
devwhatsapp
 
Posts: n/a
If someone can check this installer and confirm something is possible ?

https://www37.zippyshare.com/v/lu3phhRz/file.html

Thank you
Reply With Quote
  #6  
Old 09-20-2019, 02:59
DARKER DARKER is offline
VIP
 
Join Date: Jul 2004
Location: Côte d'Ivoire
Posts: 247
Rept. Given: 13
Rept. Rcvd 90 Times in 35 Posts
Thanks Given: 2
Thanks Rcvd at 93 Times in 37 Posts
DARKER Reputation: 90
Quote:
Originally Posted by devwhatsapp View Post
If someone can check this installer and confirm something is possible ?
You can try luck with Hashcat, but if they use long password ...

Inno Setup Version = 5.5.7 (Unicode)
Password Hash = f9933183d3866af6019036c9395bcba373dbd9b8
Password Salt = c279cb101d94b042
Reply With Quote
The Following User Says Thank You to DARKER For This Useful Post:
niculaita (09-21-2019)
  #7  
Old 09-21-2019, 06:18
Tamrwa Tamrwa is offline
Friend
 
Join Date: Jul 2019
Posts: 3
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 0 Times in 0 Posts
Tamrwa Reputation: 0
Quote:
Originally Posted by DARKER View Post
You can try luck with Hashcat, but if they use long password ...

Inno Setup Version = 5.5.7 (Unicode)
Password Hash = f9933183d3866af6019036c9395bcba373dbd9b8
Password Salt = c279cb101d94b042
Could you show us how you got the values please?
Reply With Quote
  #8  
Old 09-21-2019, 08:14
atom0s's Avatar
atom0s atom0s is offline
Family
 
Join Date: Jan 2015
Location: 127.0.0.1
Posts: 251
Rept. Given: 24
Rept. Rcvd 101 Times in 47 Posts
Thanks Given: 42
Thanks Rcvd at 421 Times in 166 Posts
atom0s Reputation: 100-199 atom0s Reputation: 100-199
Tools like InnoExtractor can pull that kind of information.
__________________
Personal Projects Site: https://atom0s.com
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 20:23.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX