• 0

Stealing EXE !


Question

  • 0

just open an exe in debuger and you have the assembly code, real hard to do right? well that ASM code can very painfully be converted to any languge if you have the right converter... and it will never be exactly the same as the original source unless you have the symbols listing

Recommended Posts

  • 0
you're trying to win an impossible war, and the worst thing about it, is the fact your knowledge on it is obviously very low... people who have been doing this their entire lives and know the ins and outs of every single system still can't pull it off, so there is very little chance that you would do it... mainly because its impossible

585263781[/snapback]

actually i made it (in most of my important progs ), you seem confused , and if you want me to prove it , tell me anything of the logic and i will send you the code ( but in VB .net as i have small knowledge about it )

  • 0
actually i made it (in most of my important progs ), you seem confused , and if you want me to prove it , tell me anything of the logic and i will send you the code ( but in VB .net as i have small knowledge about it )

585263802[/snapback]

send that exe to any professional cracker.. and check it out.. and do one thing.. send it to me.. let me try if I can crack it up.. I am not pro, but I have pretty good knowledge about it..

pro crackers will surely be able to do that...

  • 0
Think about it for a moment - you don't even understand what an EXE file is, let alone anything lower level, but you are going to defeat hardcore crackers who understand the thing from top to bottom.

Lame tricks don't work, security through obscurity is a non-starter - every cracker worth his salt would use a file monitor and network monitor  to instantly spot this "scheme" and then just a couple of NOPs would render it useless. It may stop the casual copier - but a simple key stops 95% if them anyway.

But none of this matters as it's quite obvious you lack any in depth understanding of the problem at hand - you scheme assumes the crackers are stupid, the best crackers are as good as the best security makers - that's why the battle continues.

585263787[/snapback]

man i said before its a TRICK , recognized = its OVER , and BTW i respect you for saying "file monitor and network monitor " cause thats a part of solution but if the crackers know that how they conclude the mechanism !!! i know its hard but i didn't said its impossible , um just saying "does any one hears about this tricks ?"

and also you know that crack and virus makers are the most intelligent people in programming .....

trick means "the hours which make your cracker seeking for the solution"

  • 0
send that exe to any professional cracker.. and check it out.. and do one thing.. send it to me.. let me try if I can crack it up.. I am not pro, but I have pretty good knowledge about it..

pro crackers will surely be able to do that...

585263828[/snapback]

cool man are u serious ........ ok please give me ur name and ur e-mail , i was really seeking to find people do that because you know that no one can rate him self , other rate him

  • 0
actually i made it (in most of my important progs ), you seem confused , and if you want me to prove it , tell me anything of the logic and i will send you the code ( but in VB .net as i have small knowledge about it )

585263802[/snapback]

I seem confused? I'm a PhD candidate in computer science... I have a degree in Computer Science and Information Security... please dont tell me IM confused... Your program is even in VB.NET which is one of the easiest things to take into MSIL and convert back to code that is very easy to hack... if you think you are going to pull something off in .NET you are badly mistaken...

  • 0
no thats ur opinion , but if u read the whole thread you will find that i said i use "decompilation" in peace purpose like "anti-cracker tricks" ,they didn't belive  me and then we are here .......

winston, i know u have great experience , but u know the disadvantages of forums is that there is posts and u seem confused as you are reading a story ( if we made forums seems like chating ;) ... it will be cool )

585263777[/snapback]

I wish i can understand what on earth your reply is about, so i could at least form a coherent response to that... :blink:

  • 0
deal , ......... i will made it and post it in the forum between 4 - 5 days ( exams here ;) ) and that will be great , agree ?

585263887[/snapback]

no, not a deal, that gives you enough time to run away and hope we forgot about this thread... if you actually had something now then you'd be able to post it now... as you are already spending so much time just on this single thread, it doesn't show me that you are necessarily strapped for time.

  • 0
man i said before its a TRICK , recognized = its OVER , and BTW i respect you for saying "file monitor and network monitor " cause thats a part of solution but if the crackers know that how they conclude the mechanism !!! i know its hard but i didn't said its impossible , um just saying "does any one hears about this tricks ?"

and also you know that crack and virus makers are the most intelligent people in programming .....

trick means "the hours which make your cracker seeking for the solution"

585263835[/snapback]

No crackers and vxers are not the most intelligent people in programming - SOME of them MAY be AMONGST the best programmers/engineers/problem solvers in the field, but it's not a given. It's just that when developing security, obscurity is nothing more than hide and seek and you should always think (true or not) that your enemy is cleverer, craftier and more skilled than you.

Many crackers take on the task of cracking simply as an intellectual challenge, it doesn't matter if it takes minutes, hours, days or weeks.

If you were talking about physical security, then "the hours which make your cracker seeking for the solution" may help - in the real world a safe cracker couldn't take days. But software security is the equivalent of giving a safe cracker the safe to take home, then he has all the time in the world to bring the strongest tools to bear on the problem...you can bet the safe is opened sooner rather than later.

The only recent case I have seen where protection offered a hard enought challenge to make the time less than worthwhile, has been StarForce 3 copy protection. SF3 protected games appear on warez a long time after their release (unlike Safedisk and Securom) and with entertainment software, it's this "time to warez" that hurts the most.

  • 0
deal , ......... i will made it and post it in the forum between 4 - 5 days ( exams here ;) ) and that will be great , agree ?

585263887[/snapback]

If you post it here and it doesn't get cracked that doesn't say anything about your scheme.

You would do better, posting it to a some dedicated cracker forums with the title "UNCRACKABLE PROTECTION - give it a try" - if it's not as lame as it sounds, you should get a response within the hour. But it may well be such a lame scheme that no one bothers to respond - kind of like when someone tells an awful joke and nobody responds.

  • 0
i was wondering the same lol

585263946[/snapback]

you both : txt is identified in regeitry ( the extension only) , try in dos "EX: copy c:\>a.txt con ", and exe as an example identified by registry and the file codes ...

i have no much time ...... neofuse u see me in the programmers forum , and please don't forgot , if u will then PM me after 4 days

  • 0
you both : txt is identified in regeitry  ( the extension only) , try in dos "EX:  copy c:\>a.txt con ", and exe as an example identified by registry and the file codes ...

i have no much time ...... neofuse u see me in the programmers forum , and please don't forgot , if u will then PM me after 4 days

585263978[/snapback]

you really don't havea clue what you're talking about do you?

  • 0
Funniest thread ever

so true, well at least in the programming section of neowin.

and also you know that crack and virus makers are the most intelligent people in programming .....

as _Pablo said

No crackers and vxers are not the most intelligent people in programming - SOME of them MAY be AMONGST the best

look Elagizy, with out flaming, you need to be a bit more humble and listen to the people on neowin. Your "arrogance" is causing this thread to become a bit of a joke. if you are serious about what you are trying to do, be humble and listen.

The idea that you think that a bag of tricks can make your program un-crackable is really making people reading this thread laugh. just say ok, so how can I best protect my program if that is what you really want to do.

BTW: your knowledge of computer science (not just programming) appears to be seriously lacking. I suggest you follow the tutorial links people have posted for you.

  • 0

unless you first now how to code, and im not exactly sure that you do, you probably shouldnt even be touching assembly code. Use any debugger, VS will do. But changing the assembly code is practically useles if you're trying to make improvements, you have to hook a program normally. It sounds to me like you're trying to write a crack or something. In which case just change the jump lines, such as xxxx73 to xxxx74, i think, i cant remember exactly, i havnt touched assembly code for a while...

  • 0
great man ...........

i will tell you 2 logics , cause i don't know ur skills in this ..

1- security system will depend on hardware ( HDD serial ) then encoding it to numbers and if every 1st 2 numbers ( after encoding ) will have an alternative number which is Authorization Code  ( so we got 01 to 99 numbers ) ..... don't tell me making KEYgen will gonna work ..... and after programing that make a (EX VB :  public  sub  ajskhdakjhad ()," or  you can name it a feature in your prog ( and that is the trick " ) and on each button in your prog call this sub to check the authorization code which is saved in a file in other path .........

hope u solve it ;) Preparing the 2nd logic

585263540[/snapback]

You clearly have very little idea of what you're talking about. Whatever system you put in place can be circumvented... all it takes is time. Cracking can take two main approaches.... either you work with the security that has been put in place (such as a keygen) or you circumvent the security (such as by adding code to bypass any checks).

Your first example is far too simple to present much of a challenge to a cracker.

  • 0
2-

A security system depends on the number of opened process ( ctrl+alt+del ), put a value ( authorization code ) for each number between ( 1 to 500 , i think no one will have more than 500 or he is crazy ) where no value has no relation to the other ( so there is no keygen can be made ) after that make a timer each 3 minutes  check the value of authorization code  which saved in a file and saved also in other file ( which is used by program in other functions ) by using a trick ( public sub ) and if the crack is found, then the program will know that, by making a variable which confirm that Authorization code is confirmed and checked , if the variable came with a code which means its not confirmed ( EX if a = "Form1.WMP.PLay" another trick ), then from a secret link in your website have a page which has another code ... let the program read this code and if its confirmed that is crack then let ur program read the code from the website then save it to file which saved file in another path , and finally make the prog check this code and then self damage to ur prog ( "PROGRAM CORRUPTED") ;)

585263652[/snapback]

I haven't coded in years, however I'll try and tell you the problems I see with your logic:

For one this is very, very inefficient. So a user's process list changes, then the program becomes unusable for 3 minutes? A secret link on your webpage with code to "complete" more code? What happens if the site is down? The user has to wait for it to be back up? Oh the user can't wait, because the last part of the "trick" involves corrupting itself?

Alright well say someone actually wanted a program that does this. The cracker disables the timer, so it only checks once. Now the program stays authorized. And now it checks the website for some sort of secret code. Well let's say it can't be decompiled, well simple monitoring of WinSOCKS should tell you what URL its trying to snag. So now the secret code is snagged and then placed locally and the HOSTS file is changed for that URL to resolve locally to the local code saved. More than likely the URL will be changed via Hex or whatnot anyway.

Not only is this method defeated, it is now actually more effecient.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • My father still uses a programme written in dbase3. Still manages to work with a little help from dosbox. 
    • Microsoft hides these secret Windows 11 performance boost settings available on every PC by Sayan Sen Windows enthusiasts often look for ways to extract as much performance out of their systems as possible, and it's often the case that they try and do so while trying to minimize the heat and power consumption. This is especially relevant in the case of mobile Windows PCs since laptops and notebooks tend to get hot and management of that heat and power is harder in such a form factor. As such users often turn to techniques like under-volting which can be used to squeeze out the maximum capabilities of a chip while also maintaining lowered power levels. There are official apps from AMD and Intel with the likes of Ryzen Master and XTU (Extreme Tuning Utility). While these are quite handy, most enthusiasts probably prefer to dig into the BIOS and play around with settings there like Curve Optimizer on Ryzen, which lets users set various frequency-voltage scaling values. These are essentially called P-States. If you are not familiar with them, Processor Power Management is done through Advanced Configuration and Power Interface (ACPI) P-states and C-states. While P-states or performance pwoer states handle CPU voltage-frequency scaling, C-states deal with CPU sleep states so that some of the CPU functions, which are not necessary at that moment, can be disabled. The P-states and C-states work together to make the processor run more efficiently. It helps the OS and apps determine which cores can be parked and which should be boosted. Of course not every user is an enthusiast or knows the technicalities and integrities of how things like overclocking or undervolting work. Thankfully for them Windows itself offers something pretty cool, though it is hidden by default on all systems. By default, Windows only has two P-States, "Minimum Processor State" and "Maximum Processor State." However, this can be changed with a Registry trick to expand the options under a secret "Processor performance boost mode" dropdown. This essentially enables the HWP or hardware P-States available on a device, and these are not controlled just by the OS itself as the underlying hardware gets involved too. In total there are five Processor Performance Boost Mode profiles that control how Windows requests and allows CPU turbo/boost behavior under the different power policies. They are: Disabled: In this mode, processor boosting is effectively turned off. The CPU will avoid entering turbo or boost frequencies and instead operate closer to its base frequency ceiling. This can significantly reduce power consumption and heat output, but at the cost of reduced burst performance and responsiveness in short workloads. Enabled: This is the standard behavior where boost functionality is allowed under normal conditions. The processor can opportunistically increase frequency when workload demands it, balancing performance gains with power and thermal constraints as managed by the system. Aggressive: Aggressive mode favors performance more heavily, allowing the CPU to enter higher boost states more readily and sustain them longer. This should in theory improve responsiveness under bursty or heavy workloads but increases power draw and thermal output compared to the default enabled behavior. Efficient Enabled: This mode still allows boosting, but with a stronger bias toward energy efficiency. The system attempts to use boost more selectively, avoiding unnecessary frequency spikes when the performance gain is marginal. Efficient Aggressive: This is a hybrid approach where boost is still performance-responsive, but the system continuously weighs efficiency more heavily than in Aggressive mode. It aims to deliver noticeable performance improvements while reducing wasted power in less demanding scenarios. Here's how to enable the Processor performance boost mode: Open Registry Editor: Press Win+R, type regedit, and click OK. Go to: HKLM\SYSTEM\CurrentControlSet\Control\Power\PowerSettings\54533251-82be-4824-96c1-47b60b740d00\be337238-0d82-4146-a960-4f3749d470c7 (where HKLM stands for HKEY_LOCAL_MACHINE_) Modify the value of Attributes from 1 to 2 (you can find modify option by right-clicking) After that, exit Registry, you should now be able to see the new "Processor performance boost mode" dropdown menu: As you can see there are now five new P-States or CPPC states or power profile available that help define the boost mode processor setting on your PC. Wrapping it up here's a quick run-down of the settings as defined by Microsoft itself. Setting Description Disabled The corresponding P-state-based behaviour is disabled. Collaborative Processor Performance Control (CPPC) behaviour is disabled. Enabled The corresponding P-state-based behaviour is enabled. CPPC behaviour is Efficient Enabled. Aggressive The corresponding P-state-based behaviour is enabled. CPPC behaviour is Aggressive. Efficient Enabled The corresponding P-state-based behaviour is Efficient. CPPC behaviour is Efficient Enabled. Efficient Aggressive The corresponding P-state-based behaviour is Efficient. CPPC behaviour is Aggressive. Aggressive At Guaranteed Windows calculates the desired extra performance above the guaranteed performance level, and asks the processor to deliver that specific performance level. Efficient Aggressive At Guaranteed Windows always asks the processor to deliver the highest possible performance above the guaranteed performance level. In the next part we shall be comparing these settings to explore how much of a benefit or regression they can provide in terms of performance and power efficiency. If you decide to change the values on your system and are experiencing problems like crashes or an overheating PC, make sure to revert the steps back to the original state.
    • I think he means you haven't reviewed previous UFC games. Of course it doesn't matter... Every time you just report on something that involves the President even if just simply what happened you guys usually get accused of being anti-Trump. We live in fun times.
  • Recent Achievements

    • One Month Later
      Leroy Jethro Gibbs earned a badge
      One Month Later
    • Conversation Starter
      flexorcist earned a badge
      Conversation Starter
    • One Month Later
      AndreaB earned a badge
      One Month Later
    • One Month Later
      agatameier earned a badge
      One Month Later
    • Week One Done
      agatameier earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      518
    2. 2
      +Edouard
      198
    3. 3
      PsYcHoKiLLa
      147
    4. 4
      ATLien_0
      93
    5. 5
      Steven P.
      77
  • Tell a friend

    Love Neowin? Tell a friend!