Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 09-01-2005, 22:19
learner38 learner38 is offline
Reseacher
 
Join Date: Aug 2002
Posts: 176
Rept. Given: 0
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 5
Thanks Rcvd at 7 Times in 7 Posts
learner38 Reputation: 2
Exclamation LPT & Intercpet Capture in WINXP

Hello,,,i am not profesional..so i try to be beginer...so..


The old dongles only read some bits (as i think it is a jumps and something like that) from the PIC or epprom or IC in Dongle..the electronic is very hard to READ..caz if you try to read .the fues will destroy...Like self terminator.
but there is anther way to read the epprom or PIC y phisical way.it is so hard and may make ur dongle damage..

the second way.is what we are doing..which understand the algo of dongle..and edit in VXD or SYS file (which is drviver and conect to dongle) tomake this driver readfrom file or from registery...

the easiest WAY and ofcourse not work with the new dongles..
is capture the intercpet between the program and the dongle(record all the transmited bits from and to dongle)and after that make a file ..and make a virtual LPT port..and put rmulator read the file ..

WKPE is a nice program..IN CrackZ Dongle : said
This one was kindly sent to me by the author and is freeware (Windows 95 only). Its approach is vxd based yet not specific to any specific dongle, seems to rely on trapping low-level IO access (of course you need the original dongle). The author claims 80% reliability or effectiveness, I recall reading elsewhere that this could be somewhat optimistic :-). I can only advise you try this (it didn't work on the HASP or Sentinel I have here). As its free I don't really think you ought to trouble the author too much for support.

I already tested it .and it working very fine with windows 98 SE
with MARX crypto-Box Dongle .
there is another program called virtual dog..same as WKPE

i wish to have it working under winxp... the WKPE have only VXD ..in XP must be SYS driver. so.any one can make it..
or have another program ..workas same..

i wish to see any reply..
thanks alot for all

Last edited by learner38; 11-17-2005 at 06:35.
Reply With Quote
  #2  
Old 09-02-2005, 01:05
yi-jing
 
Posts: n/a
new dongle use usb dongle~ lpt to old. it's make sense.
maybe you need to study lpt+usb common emulator
Reply With Quote
  #3  
Old 09-02-2005, 15:45
DCA's Avatar
DCA DCA is offline
VIP
 
Join Date: Aug 2005
Posts: 136
Rept. Given: 36
Rept. Rcvd 29 Times in 13 Posts
Thanks Given: 17
Thanks Rcvd at 36 Times in 16 Posts
DCA Reputation: 29
For USB you can start with USBsniffer (see attachment)

LPT you can sniffed by several tools, something like:

hxxp://www.sysinternals.com/Utilities/Portmon.html

WKPE is not usable for the newer dongle types, even if it was
as sys-driver for XP/2000
Attached Files
File Type: zip sniffusb-0.13.zip (357.0 KB, 44 views)
Reply With Quote
  #4  
Old 09-02-2005, 16:03
learner38 learner38 is offline
Reseacher
 
Join Date: Aug 2002
Posts: 176
Rept. Given: 0
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 5
Thanks Rcvd at 7 Times in 7 Posts
learner38 Reputation: 2
i tried Portmon ..and not working
even if worked ..how i willmake the emulator for it..

case is :
P4
Win XP SP1
LPT port
Portmon
marx cryptobox (very old)
Reply With Quote
  #5  
Old 09-03-2005, 00:52
sapu
 
Posts: n/a
WKPE intercepts direct I/O access made from Ring3 applications (DOS,Win16 and Win32) using a Win9x-specific VMM service called 'I/O port trapping'.

Unluckly, WinXP doesn't have a similar feature, and also ALL the I/O access from Ring3 is blocked, and cause a 'privileged instruction' trap.

Anyway, if your app is a legacy DOS or WIN16 application, all the I/O access is 'emulated' from NTVDM.EXE. In this case only, it's possible to write a VDM driver and, using VDDInstallIOHook, intercept & emulate all the I/O access to the LPT port address.
If you need a good VDM driver example, look for VDMSound on sourceforge...
Reply With Quote
  #6  
Old 09-03-2005, 08:50
learner38 learner38 is offline
Reseacher
 
Join Date: Aug 2002
Posts: 176
Rept. Given: 0
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 5
Thanks Rcvd at 7 Times in 7 Posts
learner38 Reputation: 2
i this the program use the old ..which u talking about...
caz i conect the dongle in xp with the program..and the program not see the dongle or feel it..so i updated the dongle driver underxp to see the dongle..
so the program use the old technology..
what i should do now???
Reply With Quote
  #7  
Old 09-07-2005, 11:26
DCA's Avatar
DCA DCA is offline
VIP
 
Join Date: Aug 2005
Posts: 136
Rept. Given: 36
Rept. Rcvd 29 Times in 13 Posts
Thanks Given: 17
Thanks Rcvd at 36 Times in 16 Posts
DCA Reputation: 29
@miniwahib1

Another thing that might help you is at:

hxxp://www.ntkernel.com/w&p.php?id=21
Reply With Quote
  #8  
Old 09-09-2005, 00:34
sapu
 
Posts: n/a
@miniwahib1

I found a very good article about how to implement I/O trapping using pentium debug registers.
hxxp://bugtraq.ru/library/programming/haspprotection.html
Maybe it should be useful if you want to write a VXD replacement for WKPE.

There are already other progs who can use the same i/o trap method, like the Virtual DOG emulator (still Win9x only), or the Safekey's "delaynt" driver (NT/2000/XP).

In case you aren't too much familiar with pentium control & debug registers, maybe this slide should helps:
hxxp://www.cs.usfca.edu/~cruse/cs635/lesson10.ppt
Reply With Quote
  #9  
Old 09-09-2005, 05:59
learner38 learner38 is offline
Reseacher
 
Join Date: Aug 2002
Posts: 176
Rept. Given: 0
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 5
Thanks Rcvd at 7 Times in 7 Posts
learner38 Reputation: 2
thanks alot for help...
for @sapu
@DCA

i will try to emulate marx cryptobox
but i didn't found any dumper for it
Reply With Quote
  #10  
Old 09-19-2005, 20:52
.:hack3r2k:.'s Avatar
.:hack3r2k:. .:hack3r2k:. is offline
Friend
 
Join Date: Mar 2002
Location: Inside the c0de ...
Posts: 66
Rept. Given: 1
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 3 Times in 3 Posts
.:hack3r2k:. Reputation: 0
@mina:

P.S: Stop playing www.nsdongle.com because is not a hasp u can play in 5 min with some free net soft.

Br
Reply With Quote
  #11  
Old 09-20-2005, 04:46
etienne
 
Posts: n/a
I need something similar.
as many of nowadays' computers are equipped with no LPT port but still a lot of (crap) devices using it, I need to realise a fully functional LPT port over USB. but since it is not (fully) accessed over windows API, I need to write a kernel driver.

this is alright.
the question is: how can I hook the base level handler for 0xC0000096 exception into my driver? before system could pass it to the program?

anyone knows the answer?
Reply With Quote
  #12  
Old 09-20-2005, 06:07
learner38 learner38 is offline
Reseacher
 
Join Date: Aug 2002
Posts: 176
Rept. Given: 0
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 5
Thanks Rcvd at 7 Times in 7 Posts
learner38 Reputation: 2
@.:hack3r2k:.
Hello Mr Mobile
i am not play with mobile programs ..caz it is the most protected for two rerason
1-the programers in mobile unlocking is always a crckers so..they make some god trick

2-caz they make some code or part f program in IC in the dongle(box)
just i try to study and make research for all kind of dongle emualotr which avaible
thanks
Reply With Quote
  #13  
Old 09-21-2005, 02:19
etienne
 
Posts: n/a
this is bullshit

get an algo in a smartcard and use that algo to calculate eg. static crc in se new series. then emulate that
Reply With Quote
  #14  
Old 09-30-2005, 22:19
lucian
 
Posts: n/a
Quote:
Originally Posted by etienne
I need something similar.
as many of nowadays' computers are equipped with no LPT port but still a lot of (crap) devices using it, I need to realise a fully functional LPT port over USB. but since it is not (fully) accessed over windows API, I need to write a kernel driver.

this is alright.
the question is: how can I hook the base level handler for 0xC0000096 exception into my driver? before system could pass it to the program?

anyone knows the answer?
Hy

Use an hardware converter like pl23xx or ftdi based chip.
Reply With Quote
  #15  
Old 10-02-2005, 02:59
etienne
 
Posts: n/a
c'mon, I need some serious help
prolific and ftdi are rs232, lpt is totally different (among being port as well )
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
capture and emulate internet data pertican General Discussion 14 09-21-2022 19:26


All times are GMT +8. The time now is 00:51.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2022 )