How are Keygens made?

Discussion in 'Software' started by Ayahuasca, Dec 30, 2020.

  1. Ayahuasca

    Ayahuasca Rock Star

    Joined:
    Jun 15, 2020
    Messages:
    218
    Likes Received:
    356
    Lets say I have the challenge code for a piece of software and also have the license code generated from entering the challenge code, how many challenge codes and return license keys would I need to create a keygen and how do you work out what calculation needs to be done to generate the correct license number from the challenge code? Is there a specific type of software that exists that can work out the calculation for you?
     
  2.  
  3. vuuru_keg

    vuuru_keg Platinum Record

    Joined:
    Oct 24, 2018
    Messages:
    254
    Likes Received:
    154
    well im no expert but as far as i know, its like a lock and a key i'd say.

    lets say you have a lock.
    you cant create or duplicate a key for it unless you have atleast one key that opens that lock.
    however, once you got one key that opens the lock - you can create multiple of those.

    pretty much the same thing with software (AFAIK), meaning crackers will need atleast one legit license, and debug and disassemble the security with that license key/file (AKA the hard/complicated stuff) -> once they see and understand the algorithm, they can create a generator for that algorithm.

    most times its not enough and the software itself needs to be patched in its binaries to be able to accept "fake" serial numbers.
    this is why on alot of R2R releases you see both "Patched" and "keygen"

    alot of times these serials are based on some type of encryption (XOR/SHA/RSA etc..)
     
    • Interesting Interesting x 1
    • List
  4. Ayahuasca

    Ayahuasca Rock Star

    Joined:
    Jun 15, 2020
    Messages:
    218
    Likes Received:
    356
    Interesting thanks! so is there no software that helps with "understanding the algorithm" or is it purely just brainpower?
     
  5. vuuru_keg

    vuuru_keg Platinum Record

    Joined:
    Oct 24, 2018
    Messages:
    254
    Likes Received:
    154
    i wouldnt know... im assuming its not just simple software that does that for you, sounds too easy lol

    im assuming its some brainpower with some help of software of encryptors&decryptors, but again im no expert
     
  6. DjLuigi

    DjLuigi Ultrasonic

    Joined:
    May 28, 2018
    Messages:
    49
    Likes Received:
    34
    I would say it would depend on the complexity of the formula the software is using. I believe though that the way these guys make their keygens is by analyzing the code and trying to find out what is the exact formula the software is using. Then they build a program around that formula that's capable of generating valid serials
     
    • Like Like x 1
    • Useful Useful x 1
    • List
  7. Ayahuasca

    Ayahuasca Rock Star

    Joined:
    Jun 15, 2020
    Messages:
    218
    Likes Received:
    356
    in my scenario the license response code is 616 digits coming from a 17 digit challenge code, im sat here scratching my head wondering how the magic works
     
  8. Roboto

    Roboto Producer

    Joined:
    Sep 9, 2013
    Messages:
    223
    Likes Received:
    88
    You need software to reverse engineer and understand how each program works.

    https://hackmag.com/security/software-for-cracking-software/

    If you're on this for the TC Powercore, you'll need to find who is handling that registering process. If it's the TC Powercore itself, it might be harder to disassemble (I don't really know)
     
  9. Ayahuasca

    Ayahuasca Rock Star

    Joined:
    Jun 15, 2020
    Messages:
    218
    Likes Received:
    356
    I think its just a calculation done based on your hardware id as the challenge code
     
  10. Roboto

    Roboto Producer

    Joined:
    Sep 9, 2013
    Messages:
    223
    Likes Received:
    88
    Yes. But you don't know the algorithm that generates the key. So, in order to find it, you have to do some diving to guess "why" does it accept a key or not, either in Powercore Control Panel or the device itself.

    Let's say that my software only accepts keys that are multiples of 2.

    0002 would be accepted, 0003 would not, 0004 would and 0005 would not.
    Or maybe only 0002 and 0004 are accepted and numbers greater than that, are not.

    But in this example, you need to find (using the tools) that the software accepts the key or not depending on if it's multiple of two or not.

    Of course, in real life, there's stuff more complicated than that.
    There's a challenge code and then some calculations based on that code, and the machine is expecting something that matches.
     
    Last edited: Dec 30, 2020
  11. starkid84

    starkid84 Producer

    Joined:
    Mar 29, 2015
    Messages:
    170
    Likes Received:
    131
    The short answer is: with math. keygens are made with math. mostly algebra.

    The long answer is: it depends. ie; Insert the infinte ways of coding protection, and insert algorithm or key to break, unlock or circumnanvigate it.

    The details and the process can vary way beyond the scop of this post, but thats the most basic break down.
     
  12. Roboto

    Roboto Producer

    Joined:
    Sep 9, 2013
    Messages:
    223
    Likes Received:
    88
    Yes. And if it's obfuscated, it gets harder. I doubt it's an easy task for a newbie.

    Years ago, I managed to skip the license check for a software with very basic protection. Not generating a license, just skipping it (the program didn't allow you to continue without it).

    Still took me hours and hours, of course 'cause I had no idea. Which seems the case.
     
  13. Polomo

    Polomo Guest

    You don't need a key to make it work and 1 Key to make a Keygen (Most of the times )
    If you understand how the program works (make a backup and look what happens)
    Something will change in the registry in the normal case. (different Apps works different here Keyfiles or Registry, Dongle or something else without knowing the Programm nearly impossible to know )

    Also, a Brute Force attack would work so no math is need directly.

    For some VST it's very easy to outsmart them with low knowledge (For example Karma FX Endless Demo with simple delete registry in Win )

    If you ask you'll have a long way to go.:winker:

    ("Simple" 3 Steps
    1. Learn Programming (3 Years +)
    2. Learn Reverse engineering (1Year +)
    3. Do It Make a Keygen)


    Step
    1. https://archive.org/details/2018FundamentalsOfCppProgramming/page/n3/mode/2up
    or https://freecomputerbooks.com/Fundamentals-of-Programming-Cpp.html
    2. https://github.com/onethawt/reverseengineering-reading-list
    3. Do it
     
    • Like Like x 1
    • Winner Winner x 1
    • List
  14. Ayahuasca

    Ayahuasca Rock Star

    Joined:
    Jun 15, 2020
    Messages:
    218
    Likes Received:
    356
    I doesnt help that im terrible at maths :/
     
  15. Ayahuasca

    Ayahuasca Rock Star

    Joined:
    Jun 15, 2020
    Messages:
    218
    Likes Received:
    356
    R2R is that you? :rofl:
     
  16. Roboto

    Roboto Producer

    Joined:
    Sep 9, 2013
    Messages:
    223
    Likes Received:
    88

    We're talking about a 616 digit keygen.
    A Brute Force attack would be nearly impossible.

    The endless demo could work, but I think we're talking about a TC Powercore Device, so the clock must be "frozen" or automatically reset somehow. Or maybe clear or edit the flag that says "this user installed this product on 31st December 2020". Again, it first needs to be found.
     
    • Interesting Interesting x 1
    • List
  17. Ayahuasca

    Ayahuasca Rock Star

    Joined:
    Jun 15, 2020
    Messages:
    218
    Likes Received:
    356
    Yes we are talking TC Powercore btw (you know me too well) :mates:
     
  18. Polomo

    Polomo Guest

    If we know more infos we can shorten this (maybe)
    also this is just the GUI site
    maybe under the hood it's simpler (just guessing here, never worked with this )
     
  19. Ayahuasca

    Ayahuasca Rock Star

    Joined:
    Jun 15, 2020
    Messages:
    218
    Likes Received:
    356
    So ive attached what im looking at, each license I have seperated using the dashed line. These are Virus Powercore license files I have opened with a text editor

    https://pastebin.com/RB62XFYy
     
    • Interesting Interesting x 1
    • List
  20. Polomo

    Polomo Guest

    At least it's only Alpha numeric and non Case Sensitive (so it's not a worst case. ) But still very heavy
     
  21. Ayahuasca

    Ayahuasca Rock Star

    Joined:
    Jun 15, 2020
    Messages:
    218
    Likes Received:
    356
    Yeah I just assumed as its 16 odd years old it might be alot easier now, I assumed wrong :dunno:
     
Loading...
Similar Threads - Keygens made Forum Date
R2R Keygens Mac / Hackintosh Mar 19, 2024
R2R Keygens don't open PC Nov 12, 2023
R2R Keygens not showing up on Windows Software Jul 6, 2023
Has anyone managed to get the R2R TAL keygens to work in a VM? Software Mar 12, 2023
Bitdefender...how to stop it from detecting keygens! PC Aug 7, 2022
Loading...