Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 09-14-2019, 18:27
devwhatsapp
 
Posts: n/a
Inno Setup Password Method

Hi

Does the method applied to ida pro setups works for any other inno setup password protected setups of any other software ?

Regards
Reply With Quote
  #2  
Old 09-15-2019, 14:40
DARKER DARKER is offline
VIP
 
Join Date: Jul 2004
Location: Somewhere Over the Rainbow
Posts: 454
Rept. Given: 15
Rept. Rcvd 119 Times in 51 Posts
Thanks Given: 11
Thanks Rcvd at 731 Times in 194 Posts
DARKER Reputation: 100-199 DARKER Reputation: 100-199
No. Its because IDA used to generate Perl script that use custom characters and conditions to generate password. Attack was aimed to PRNG of this custom script.

Chances that other setups use the same way is 0.

You can use same approach in other cases if you know more about how developer generate password.
Reply With Quote
  #3  
Old 09-15-2019, 16:28
deepzero's Avatar
deepzero deepzero is offline
VIP
 
Join Date: Mar 2010
Location: Germany
Posts: 300
Rept. Given: 111
Rept. Rcvd 64 Times in 42 Posts
Thanks Given: 178
Thanks Rcvd at 215 Times in 92 Posts
deepzero Reputation: 64
Wasnt there also a problem with the setup generator software that included the plaintext password in the setup?
Reply With Quote
  #4  
Old 09-15-2019, 17:41
DARKER DARKER is offline
VIP
 
Join Date: Jul 2004
Location: Somewhere Over the Rainbow
Posts: 454
Rept. Given: 15
Rept. Rcvd 119 Times in 51 Posts
Thanks Given: 11
Thanks Rcvd at 731 Times in 194 Posts
DARKER Reputation: 100-199 DARKER Reputation: 100-199
Quote:
Originally Posted by deepzero View Post
problem with the setup generator software that included the plaintext password in the setup
Only for Linux and MacOS versions (was used InstallBuilder but with new version 19.2.0 they fixed it)

Code:
https://blog.bitrock.com/2019/02/installbuilder-1920-released.html

Last edited by DARKER; 09-15-2019 at 17:46.
Reply With Quote
  #5  
Old 09-19-2019, 20:52
devwhatsapp
 
Posts: n/a
If someone can check this installer and confirm something is possible ?

https://www37.zippyshare.com/v/lu3phhRz/file.html

Thank you
Reply With Quote
  #6  
Old 09-20-2019, 02:59
DARKER DARKER is offline
VIP
 
Join Date: Jul 2004
Location: Somewhere Over the Rainbow
Posts: 454
Rept. Given: 15
Rept. Rcvd 119 Times in 51 Posts
Thanks Given: 11
Thanks Rcvd at 731 Times in 194 Posts
DARKER Reputation: 100-199 DARKER Reputation: 100-199
Quote:
Originally Posted by devwhatsapp View Post
If someone can check this installer and confirm something is possible ?
You can try luck with Hashcat, but if they use long password ...

Inno Setup Version = 5.5.7 (Unicode)
Password Hash = f9933183d3866af6019036c9395bcba373dbd9b8
Password Salt = c279cb101d94b042
Reply With Quote
The Following User Says Thank You to DARKER For This Useful Post:
niculaita (09-21-2019)
  #7  
Old 09-21-2019, 06:18
Tamrwa Tamrwa is offline
Friend
 
Join Date: Jul 2019
Posts: 7
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 5 Times in 1 Post
Tamrwa Reputation: 0
Quote:
Originally Posted by DARKER View Post
You can try luck with Hashcat, but if they use long password ...

Inno Setup Version = 5.5.7 (Unicode)
Password Hash = f9933183d3866af6019036c9395bcba373dbd9b8
Password Salt = c279cb101d94b042
Could you show us how you got the values please?
Reply With Quote
  #8  
Old 09-21-2019, 08:14
atom0s's Avatar
atom0s atom0s is offline
Family
 
Join Date: Jan 2015
Location: 127.0.0.1
Posts: 396
Rept. Given: 26
Rept. Rcvd 126 Times in 63 Posts
Thanks Given: 54
Thanks Rcvd at 730 Times in 279 Posts
atom0s Reputation: 100-199 atom0s Reputation: 100-199
Tools like InnoExtractor can pull that kind of information.
__________________
Personal Projects Site: https://atom0s.com
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 18:03.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )