is it possible to crack HASP protected program without the dongle?

[jonwil]

Is there a way to crack a HASP protected program (fairly recent) without the actual HASP?

[dyn!o]

Sure it is - ALL HASP. You have only to know if it is HASP envelope or not. If it is HASP envelope then you have three choices:

1. Get the dongle and unpack the app (fair easy).

2. Send an HASP KEYs logger (there are plenty of them) to the one who owns appropiate dongle and unpack the app with proper keys.

3. Send BrainStudio HASP emulator to the person who owns appropiate dongle and get the response from it - then you can run the app everywhere without the dongle and without need of unpacking.

If it is not HASP envelope then you need about 30 minutes to crack (not emulate) this crap.

Best regards,
dyn!o

[jonwil]

Firstly, looking at the exe in hex editor shows that its probobly encrypted or compressed or both (I dont see strings I know should be there, like filenames for data files)

Secondly, it appears to use nasty code that jumps everywhere, unpacks more code and jumps to more places.

And thirdly, I dont have the origonal dongle and the person who gave me the exe file isnt around anymore and he probobly dosent have it anyway.

If it is encrypted, would it be possible to brute-force the key? (i.e. try every possible key untill you find the one that works) How large is the key (which I assume is on the dongle) for this stuff?

[dyn!o]

After reading your sentences it looks 99% as HASP envelope. Pure shit but easy shit... You can bruteforce the keys of course but that is wasting of time. If you don't know any person who owns the dongle better run Emule or search on cracks sites for a crack or full version of this software... HASP is the most known protection so there is a big chance that this software is already cracked.


Good luck,
dyn!o

[jonwil]

Its not something that is likely to have been cracked.

Any info on brute-forcing the keys?

Can be not that easy if the envelope uses 3C/3D functions. If the dongle is HASP4 those functions are used for sure. These functions are used for code decription using the algorithm stored in the dongle, but usually they decrypt only a couple bytes and everythig else is a software algo. 3C is encryption, 3D - decryption function. You can built protection crypting throu the dongle.

The envelope usually contains a couple HASPSEED calls and a 3C/3D stuff. Also there can be some reads from the donlge memory. You can found the HASP API calls using bpx FreeEnvironmentStringsA in Sice. AX is function number as I remember.

[jonwil]

Basicly, its a beta version of a program.
The final version has no locks whatsoever.
Its just that the beta had extra features
Plus, I have debugging information (*.pdb) that goes with this exe (no code though and dont ask how I got the exe or PDB)

I have read from somewhere (I think somewhere from fravia's site) that the HASP encoding algorithm has a vulnerability in it that makes it rather easy to work out the code backwards. I will try to find the source....


I can't find the online source, but I found this which may help you.

[ibro]

All You need are http://www.wasm.ru/tools/6/hasp.zip + IDA+ ASM skills

[Zigmund]

hxxp://www.wasm.ru/tools/6/hasp.zip
- will help you only with old hasp API protection (used old drivers haspnt.sys). Now migth all applications protected with hasp use new drivers (all queries via hardlock.sys/vxd)...

There a 3rd generation techniques about "HASP" protecting a software.
To perform a "traffic-spy" between the computer and the HASP , the hasp is 100% required.

But try to find first of all , if the software is already cracked...
This is the best way...and after that , if you don't have find the crack try to find the dongle and do the emulation by using the Brain HASP Emulator.

VD

[suresh.hacker]

Kindly help me some one.. i've a HASP protected prg. Any Idea How to crack that?

[leetone]

I wish I had more information to give you but a friend of mine not too long ago craceked v-ray for 3ds max and maya, both require a dongle and I believe utilize HASP (correct me if I'm wrong, it rings a bell..) and he was able to do it simply by patching some bytes up in 2 different DLL files. It may be a lot simpler than you think, does the program have any protection of you simply subverting the current roadblock? Some, like vray, don't - it's bloody funny! They sell it at $1,500 a license and don't give a damn when it is cracked.