Hack Forums
[.NET] Apple [Client / Server Login Authentication] [HWID Protection] [Opinion] [TCP] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] Apple [Client / Server Login Authentication] [HWID Protection] [Opinion] [TCP] (/showthread.php?tid=4097722)

Pages: Pages 1 2

Apple [Client / Server Login Authentication] [HWID Protection] [Opinion] [TCP] - xDowwdeen - Mar 5, 2014

Hi HF,

I have been creating a Client / Server application that would allow you to add username and authentication check to applications over a TCP Connection.

The plan is that when I finish this that I would release it to HF. But first I want to see what you think of the idea while I still code it.

Instead of having the applications having to connect to a website to check it the login details, it would connect to one of my servers that would handle the login of all the applications that a developer has set up using my login system. It would then all be centrally managed from my server so that no hosting is needed for the developer them selfs.

Features
  • Data sent over is encrypted with RSA
  • 1 Username / Password for App's
  • Username / Password Login
  • Login check with / without HWID (Developer choice)
  • Seperate App ID's for each app
  • Admin Panel - Manage the users on the apps / License Length / Ban User


Screenshot below of the Client / Server.
[Image: m8Tghz0.png]

Let me know what you think and what other features could be a good idea.

Possible Features
  • Prevent Multi-Login
  • Add a failover to a HTTP server

p.s I would be looking for testers for the system when it is nearer completion. PM me if you are interested

-xDowwdeen

* - programtesting28 - Mar 5, 2014

nice Authentication, but whether it should portfowarding first ? if client want to login, the server must on ? i think it's more better to use hosting, not a TCP Connection... sorry for my bad english :D

* - xDowwdeen - Mar 5, 2014

(Mar 5, 2014 05:59 AM)programtesting28 Wrote:  nice Authentication, but whether it should portfowarding first ? if client want to login, the server must on ? i think it's more better to use hosting, not a TCP Connection... sorry for my bad english :D
The server would be on as I will host it on my Windows Server that is in a Datacenter

-xDowwdeen

* - CodeAssassin - Mar 5, 2014

Seems like a good idea, what level of protection dose it have with regard to being reverse engineered. Would love to give this a little test for you :) Great idea and work!

* - LethalNET - Mar 5, 2014

seems pretty neat but this
[Image: 7jVtB.jpg]
would mean you could run through Dot net resolver and change the values to crack it, Maybe add some sort of secure encryption method? Would be pretty neat.
Other then that small flaw it is a nice little project!

* - Ikhuhz - Mar 5, 2014

This seems like an awesome project sir!

- 🤝

* - jeiceei - Mar 5, 2014

looks good, keep goin, there has to be a function for kicking multilogin users

* - SubGenius - Mar 5, 2014

I had worked with a similar idea once, I used the concept that every application should generate its own ID in first run, then save this ID with other infos into a file, a 'Cookie' file.
Although I used php files to send data to database, you are using TCP nice idea.

Your project seems cool, keep working on it.

* - DragonHunter - Mar 5, 2014

Lol when I read the title I thought it was about Apples login system or something XD

* - SIM-1456245 - Mar 5, 2014

Pretty cool idea, but don't you think hosting a server with thousands of applications will be easy for you, I mean you'll be the responsible one if hundreds of applications stop working.

* - xDowwdeen - Mar 5, 2014

(Mar 5, 2014 09:22 AM)LethalNET Wrote:  seems pretty neat but this
[Image: 7jVtB.jpg]
would mean you could run through Dot net resolver and change the values to crack it, Maybe add some sort of secure encryption method? Would be pretty neat.
Other then that small flaw it is a nice little project!

Thanks for the interest into the program yes i am aware that people can just change the values using dot net resolver but at the moment i am still creating the system but i would need to look at some help for preventing that from happening. Not really my strong point. I have put in RSA encryption for when the data is being sent so that it makes it harder for the messages to be interpreted and changed

-xDowwdeen
(Mar 5, 2014 11:15 AM)jeiceei Wrote:  looks good, keep goin, there has to be a function for kicking multilogin users

Thanks for the Idea I have added it to my list of possible features

-xDowwdeen
(Mar 5, 2014 11:22 AM)Electroalek Wrote:  Pretty cool idea, but don't you think hosting a server with thousands of applications will be easy for you, I mean you'll be the responsible one if hundreds of applications stop working.

Yes that I am aware of, but if it does become what people are looking into using I am willing to take that responsibility as I would be providing a service to the customers

-xDowwdeen

* - LethalNET - Mar 5, 2014

(Mar 5, 2014 11:18 AM)DragonHunter Wrote:  Lol when I read the title I thought it was about Apples login system or something XD

Haha thats why I clicked it originally XD

* - xDowwdeen - Mar 6, 2014

(Mar 5, 2014 04:44 PM)LethalNET Wrote:  Haha thats why I clicked it originally XD

Oh lol, Guess thinking about it the name probe not the best now.

-xDowwdeen

* - ๖ۣۜXilluX - Mar 6, 2014

As soon as I saw the HWID, it looked really suspicious in my eyes. I know that HWID generator, that´s the one with the 'win32_processor', right ?

If so immediately delete that code, that HWID generator is not unique. I know that I had the issue, where 20 people had the same HWID.

* - DeadLine - Mar 6, 2014

(Mar 6, 2014 04:30 PM)๖ۣۜXilluX Wrote:  As soon as I saw the HWID, it looked really suspicious in my eyes. I know that HWID generator, that´s the one with the 'win32_processor', right ?

If so immediately delete that code, that HWID generator is not unique. I know that I had the issue, where 20 people had the same HWID.

Code
ManagementClass managClass = new ManagementClass("win32_processor");
ManagementObjectCollection managCollec = managClass.GetInstances();

foreach (ManagementObject managObj in managCollec)
{
    cpuInfo = managObj.Properties["processorID"].Value.ToString();
    break;
}

True, you shouldn't just grab the processor ID and claim it as a HWID because a lot of people will have the same processor ID.

Instead you should grab the ID's of various components and form your HWID with those values.