[PLAY] Crack My Delphi Protection

kokoloko75

kokoloko75

Elite Member
Joined
Jan 1, 2011
Messages
1,627
Reaction score
1,950
Hi everybody,

I built a CrackMe with the protection I use in my commercial softwares.
The goal of this thread is educational, so we can discuss about protection systems and development.

If some of you want to try to crack it, feel free, but the work will be hard :D
To succeed you have to access to the second window with some controls (button, radio button, ...).

Validation uses server checking.
This system can easily generate a crypted licence file (possibly locked on one PC via hard-disk ID).

Download :
Code: 
http://www.mediafire.com/?ab1kyw7b2mcml0b

VirusTotal :
Code: 
The EXE is packed with PECompact, so some anti-virus (AhnLab, ClamAV, eSafe) can flag it as suspicious but I guarantee that the file is clean (not packed version included).
https://www.virustotal.com/file/60edc3529cccb9f56251694d21cb207450293438ea535dd29af1e1f5cd5fc273/analysis/

:)

Beny

PS : Is CrackMe games allowed on BHW ? Not found rules against...
 
Advertise on BHW
yes1.png

yes2.png
 
Lol !Wtf ?! :D
Congratulations (Thanks + Rep given).

How did you do that ?

Beny
 
It's amazing ;]
You spent much time on protecting it and he cracked it within a few hours :D[FONT=arial, sans-serif][/FONT]
 
That should be a good lesson for all those who think their homebrew solution is better than solutions made by specialists in the field with huge experience in software protection (and whose protections still get cracked despite that).

+rep @sockpuppet for taking the time and effort to do it.
 
Last edited:
I have a very little idea of what you guys are talking about but from what I understood, that dude "sockpuppet" did it LIKE A BAWS!!

Well done, dude.
 
Screenshot by Sockpuppet :

23qyulv.png


Beny
 

Attachments

  • 23qyulv.jpg
    23qyulv.jpg
    63.9 KB · Views: 235
Congratulations Chris !
Like Sockpuppet you used IDA.

I have to hide the condition and strings...

Beny
 
You didn't even bother encrypting the strings in your protection scheme? :o First thing you look to locate where the validation check exists, is to find the registration strings and see what part of the code uses them.

That 's a screenshot from IDA Pro. The jnz in the red line is the assembly command that means "Jump short if not zero". All he had to do is use the debugger to flip the Zero Flag (ZF) from 1 to 0


Edit: Just saw the new posts, congrats to Chris22 as well:)
 
Last edited:
Another thing you should take note of is that you are using a HTTP GET to send the key to your server, I'd encrypt this and the response if I were you. You also have authentication details hard coded in there, you should encrypt these too.
 
Who uses Delphi anymore anyway??

Just kidding. I have used it since 1996. I still use it and have several programs still on the market!
 
now we know who need to contact when we need to protect our software.
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top