Lets say I have the challenge code for a piece of software and also have the license code generated from entering the challenge code, how many challenge codes and return license keys would I need to create a keygen and how do you work out what calculation needs to be done to generate the correct license number from the challenge code? Is there a specific type of software that exists that can work out the calculation for you?

 

well im no expert but as far as i know, its like a lock and a key i'd say.

lets say you have a lock.
you cant create or duplicate a key for it unless you have atleast one key that opens that lock.
however, once you got one key that opens the lock - you can create multiple of those.

pretty much the same thing with software (AFAIK), meaning crackers will need atleast one legit license, and debug and disassemble the security with that license key/file (AKA the hard/complicated stuff) -> once they see and understand the algorithm, they can create a generator for that algorithm.

most times its not enough and the software itself needs to be patched in its binaries to be able to accept "fake" serial numbers.
this is why on alot of R2R releases you see both "Patched" and "keygen"

alot of times these serials are based on some type of encryption (XOR/SHA/RSA etc..)

 

Interesting thanks! so is there no software that helps with "understanding the algorithm" or is it purely just brainpower?

 

i wouldnt know... im assuming its not just simple software that does that for you, sounds too easy lol

im assuming its some brainpower with some help of software of encryptors&decryptors, but again im no expert

 

I would say it would depend on the complexity of the formula the software is using. I believe though that the way these guys make their keygens is by analyzing the code and trying to find out what is the exact formula the software is using. Then they build a program around that formula that's capable of generating valid serials

 

in my scenario the license response code is 616 digits coming from a 17 digit challenge code, im sat here scratching my head wondering how the magic works

 

You need software to reverse engineer and understand how each program works.

https://hackmag.com/security/software-for-cracking-software/

If you're on this for the TC Powercore, you'll need to find who is handling that registering process. If it's the TC Powercore itself, it might be harder to disassemble (I don't really know)

 

I think its just a calculation done based on your hardware id as the challenge code

 

Yes. But you don't know the algorithm that generates the key. So, in order to find it, you have to do some diving to guess "why" does it accept a key or not, either in Powercore Control Panel or the device itself.

Let's say that my software only accepts keys that are multiples of 2.

0002 would be accepted, 0003 would not, 0004 would and 0005 would not.
Or maybe only 0002 and 0004 are accepted and numbers greater than that, are not.

But in this example, you need to find (using the tools) that the software accepts the key or not depending on if it's multiple of two or not.

Of course, in real life, there's stuff more complicated than that.
There's a challenge code and then some calculations based on that code, and the machine is expecting something that matches.

 

Last edited: Dec 30, 2020

The short answer is: with math. keygens are made with math. mostly algebra.

The long answer is: it depends. ie; Insert the infinte ways of coding protection, and insert algorithm or key to break, unlock or circumnanvigate it.

The details and the process can vary way beyond the scop of this post, but thats the most basic break down.

 

Yes. And if it's obfuscated, it gets harder. I doubt it's an easy task for a newbie.

Years ago, I managed to skip the license check for a software with very basic protection. Not generating a license, just skipping it (the program didn't allow you to continue without it).

Still took me hours and hours, of course 'cause I had no idea. Which seems the case.

 

You don't need a key to make it work and 1 Key to make a Keygen (Most of the times )
If you understand how the program works (make a backup and look what happens)
Something will change in the registry in the normal case. (different Apps works different here Keyfiles or Registry, Dongle or something else without knowing the Programm nearly impossible to know )

Also, a Brute Force attack would work so no math is need directly.

For some VST it's very easy to outsmart them with low knowledge (For example Karma FX Endless Demo with simple delete registry in Win )

If you ask you'll have a long way to go.

("Simple" 3 Steps
1. Learn Programming (3 Years +)
2. Learn Reverse engineering (1Year +)
3. Do It Make a Keygen)


Step
1. https://archive.org/details/2018FundamentalsOfCppProgramming/page/n3/mode/2up
or https://freecomputerbooks.com/Fundamentals-of-Programming-Cpp.html
2. https://github.com/onethawt/reverseengineering-reading-list
3. Do it

 

I doesnt help that im terrible at maths :/

 

R2R is that you?

 

We're talking about a 616 digit keygen.
A Brute Force attack would be nearly impossible.

The endless demo could work, but I think we're talking about a TC Powercore Device, so the clock must be "frozen" or automatically reset somehow. Or maybe clear or edit the flag that says "this user installed this product on 31st December 2020". Again, it first needs to be found.

 

Yes we are talking TC Powercore btw (you know me too well)

 

If we know more infos we can shorten this (maybe)
also this is just the GUI site
maybe under the hood it's simpler (just guessing here, never worked with this )

 

So ive attached what im looking at, each license I have seperated using the dashed line. These are Virus Powercore license files I have opened with a text editor

https://pastebin.com/RB62XFYy

 

At least it's only Alpha numeric and non Case Sensitive (so it's not a worst case. ) But still very heavy

 

Yeah I just assumed as its 16 odd years old it might be alot easier now, I assumed wrong