[PLAY] Crack My Delphi Protection

[kokoloko75]

Hi everybody,

I built a CrackMe with the protection I use in my commercial softwares.
The goal of this thread is educational, so we can discuss about protection systems and development.

If some of you want to try to crack it, feel free, but the work will be hard
To succeed you have to access to the second window with some controls (button, radio button, ...).

Validation uses server checking.
This system can easily generate a crypted licence file (possibly locked on one PC via hard-disk ID).

Download :

http://www.mediafire.com/?ab1kyw7b2mcml0b

VirusTotal :

The EXE is packed with PECompact, so some anti-virus (AhnLab, ClamAV, eSafe) can flag it as suspicious but I guarantee that the file is clean (not packed version included).
https://www.virustotal.com/file/60edc3529cccb9f56251694d21cb207450293438ea535dd29af1e1f5cd5fc273/analysis/

Beny

PS : Is CrackMe games allowed on BHW ? Not found rules against...

 

[sockpuppet]

 

[kokoloko75]

Lol !Wtf ?!
Congratulations (Thanks + Rep given).

How did you do that ?

Beny

 

[Piotr__11]

It's amazing ;]
You spent much time on protecting it and he cracked it within a few hours [FONT=arial, sans-serif][/FONT]

 

[sockpuppet]

hehe,
i write you a pm

 

[arsaltheman]

hahahahaha...@sockpuppet great man!

 

[Nookie Monster]

Buy that man a beer!

 

[kokoloko75]

Buy that man a beer!

Lol, yes he deserves !
I was ridiculed...

Beny

 

[jazzc]

That should be a good lesson for all those who think their homebrew solution is better than solutions made by specialists in the field with huge experience in software protection (and whose protections still get cracked despite that).

+rep @sockpuppet for taking the time and effort to do it.

 

[bk071]

I have a very little idea of what you guys are talking about but from what I understood, that dude "sockpuppet" did it LIKE A BAWS!!

Well done, dude.

 

[kokoloko75]

Screenshot by Sockpuppet :

Beny

 

[Chris22]

 

[kokoloko75]

Congratulations Chris !
Like Sockpuppet you used IDA.

I have to hide the condition and strings...

Beny

 

[Chris22]

I use OllyDbg.

 

[jazzc]

You didn't even bother encrypting the strings in your protection scheme? First thing you look to locate where the validation check exists, is to find the registration strings and see what part of the code uses them.

That 's a screenshot from IDA Pro. The jnz in the red line is the assembly command that means "Jump short if not zero". All he had to do is use the debugger to flip the Zero Flag (ZF) from 1 to 0


Edit: Just saw the new posts, congrats to Chris22 as well

 

[Chris22]

Another thing you should take note of is that you are using a HTTP GET to send the key to your server, I'd encrypt this and the response if I were you. You also have authentication details hard coded in there, you should encrypt these too.

 

[Gmk1212]

I use OllyDbg.

What add-ons are you running in Olly? It has been a few years since I ran it (donned my white hat).

 

[Gmk1212]

Who uses Delphi anymore anyway??

Just kidding. I have used it since 1996. I still use it and have several programs still on the market!

 

[dewaz]

now we know who need to contact when we need to protect our software.

 

[Chris22]

What add-ons are you running in Olly? It has been a few years since I ran it (donned my white hat).

Just Stealth64