LPT & Intercpet Capture in WINXP

[learner38]

Hello,,,i am not profesional..so i try to be beginer...so..


The old dongles only read some bits (as i think it is a jumps and something like that) from the PIC or epprom or IC in Dongle..the electronic is very hard to READ..caz if you try to read .the fues will destroy...Like self terminator.
but there is anther way to read the epprom or PIC y phisical way.it is so hard and may make ur dongle damage..

the second way.is what we are doing..which understand the algo of dongle..and edit in VXD or SYS file (which is drviver and conect to dongle) tomake this driver readfrom file or from registery...

the easiest WAY and ofcourse not work with the new dongles..
is capture the intercpet between the program and the dongle(record all the transmited bits from and to dongle)and after that make a file ..and make a virtual LPT port..and put rmulator read the file ..

WKPE is a nice program..IN CrackZ Dongle : said
This one was kindly sent to me by the author and is freeware (Windows 95 only). Its approach is vxd based yet not specific to any specific dongle, seems to rely on trapping low-level IO access (of course you need the original dongle). The author claims 80% reliability or effectiveness, I recall reading elsewhere that this could be somewhat optimistic :-). I can only advise you try this (it didn't work on the HASP or Sentinel I have here). As its free I don't really think you ought to trouble the author too much for support.

I already tested it .and it working very fine with windows 98 SE
with MARX crypto-Box Dongle .
there is another program called virtual dog..same as WKPE

i wish to have it working under winxp... the WKPE have only VXD ..in XP must be SYS driver. so.any one can make it..
or have another program ..workas same..

i wish to see any reply..
thanks alot for all

new dongle use usb dongle~ lpt to old. it's make sense.
maybe you need to study lpt+usb common emulator

[DCA]

For USB you can start with USBsniffer (see attachment)

LPT you can sniffed by several tools, something like:

hxxp://www.sysinternals.com/Utilities/Portmon.html

WKPE is not usable for the newer dongle types, even if it was
as sys-driver for XP/2000

[learner38]

i tried Portmon ..and not working
even if worked ..how i willmake the emulator for it..

case is :
P4
Win XP SP1
LPT port
Portmon
marx cryptobox (very old)

WKPE intercepts direct I/O access made from Ring3 applications (DOS,Win16 and Win32) using a Win9x-specific VMM service called 'I/O port trapping'.

Unluckly, WinXP doesn't have a similar feature, and also ALL the I/O access from Ring3 is blocked, and cause a 'privileged instruction' trap.

Anyway, if your app is a legacy DOS or WIN16 application, all the I/O access is 'emulated' from NTVDM.EXE. In this case only, it's possible to write a VDM driver and, using VDDInstallIOHook, intercept & emulate all the I/O access to the LPT port address.
If you need a good VDM driver example, look for VDMSound on sourceforge...

[learner38]

i this the program use the old ..which u talking about...
caz i conect the dongle in xp with the program..and the program not see the dongle or feel it..so i updated the dongle driver underxp to see the dongle..
so the program use the old technology..
what i should do now???

[DCA]

@miniwahib1

Another thing that might help you is at:

hxxp://www.ntkernel.com/w&p.php?id=21

@miniwahib1

I found a very good article about how to implement I/O trapping using pentium debug registers.
hxxp://bugtraq.ru/library/programming/haspprotection.html
Maybe it should be useful if you want to write a VXD replacement for WKPE.

There are already other progs who can use the same i/o trap method, like the Virtual DOG emulator (still Win9x only), or the Safekey's "delaynt" driver (NT/2000/XP).

In case you aren't too much familiar with pentium control & debug registers, maybe this slide should helps:
hxxp://www.cs.usfca.edu/~cruse/cs635/lesson10.ppt

[learner38]

thanks alot for help...
for @sapu
@DCA

i will try to emulate marx cryptobox
but i didn't found any dumper for it

[.:hack3r2k:.]

@mina:

P.S: Stop playing www.nsdongle.com because is not a hasp u can play in 5 min with some free net soft.

Br

I need something similar.
as many of nowadays' computers are equipped with no LPT port but still a lot of (crap) devices using it, I need to realise a fully functional LPT port over USB. but since it is not (fully) accessed over windows API, I need to write a kernel driver.

this is alright.
the question is: how can I hook the base level handler for 0xC0000096 exception into my driver? before system could pass it to the program?

anyone knows the answer?

[learner38]

@.:hack3r2k:.
Hello Mr Mobile
i am not play with mobile programs ..caz it is the most protected for two rerason
1-the programers in mobile unlocking is always a crckers so..they make some god trick

2-caz they make some code or part f program in IC in the dongle(box)
just i try to study and make research for all kind of dongle emualotr which avaible
thanks

this is bullshit

get an algo in a smartcard and use that algo to calculate eg. static crc in se new series. then emulate that

Originally Posted by etienne

I need something similar.
as many of nowadays' computers are equipped with no LPT port but still a lot of (crap) devices using it, I need to realise a fully functional LPT port over USB. but since it is not (fully) accessed over windows API, I need to write a kernel driver.

this is alright.
the question is: how can I hook the base level handler for 0xC0000096 exception into my driver? before system could pass it to the program?

anyone knows the answer?

Hy

Use an hardware converter like pl23xx or ftdi based chip.

c'mon, I need some serious help
prolific and ftdi are rs232, lpt is totally different (among being port as well )