Hello Clockmaker,
Interesting. Just 1 week after 2.0.2 was posted, you've managed to =
crack it...And here we are about to release 2.0.3 (this will be Alpha =
2). I have yet to look at your upload, but I'd be curious to see how =
you've done it.
=20
Now be honest. :-) If you didn't have access to ALTestApp's source =
code, would you have known what to patch in ALTestApp.exe?
- Thanh
----- Original Message -----=20
From: uhrschmied=20
To: Act...@ya...=20
Sent: Sunday, October 12, 2003 1:45 PM
Subject: [ActiveLock] Security issue on ActiveLock.dll 2.0.0.2
(I'm not able to attach files in the new ActiveLock board, so I try=20
it here )
Hi,
I just downloaded ActiveLock-2.0.2.exe from ActiveLock.org forum, to=20
get an impression about the control. Needless to say that the prior=20
versions 1.x where more or less unsafe ( liberation key + lenght=20
shown in plain text etc. ).
The developers made a good job on encryption, but again - the=20
implementation is lousy.
I just uploaded ActiveLock 2.02.rar to files section, containing a=20
patched activelock2.dll ver. 2.0.0.2 and a patched ALTestApp.exe=20
from the same installation. The source of ALTestApp.exe was NOT=20
modified, I used the compiled version, provided with the=20
installation. There was only one byte to patch in each file, to get=20
an licensed application ( one for the Aquire method, one for the CRC=20
check of the dll ). It took me somewhat about 15 min, including the=20
time to load the debugger.
That's NOT an issue of an alpha version or so. The app status=20
depends again on 'is a bit set or not'.=20
If somebody from dev team is interested, I can provide more detailed=20
information about the weak points I've found. Guys don't be=20
frustrated, I'm an expirienced reverser for many years =20
regards
Clockmaker
Yahoo! Groups Sponsor=20
ADVERTISEMENT
=20
=20
=20
To unsubscribe from this group, send an email to:
Act...@ya...
Visit the group website at: http://groups.yahoo.com/group/ActiveLock
Get the latest version of Active Lock at: =
http://groups.yahoo.com/group/ActiveLock/files=20
Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.=20
|
