+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] [Release] EXTREMLY secure .NET protection. Screw obfuscation, Use this! [BitCrypt] (/showthread.php?tid=562361)
[Release] EXTREMLY secure .NET protection. Screw obfuscation, Use this! [BitCrypt] - PAGMAN - Jul 23, 2010
About
A few days ago, I was thinking about some alternatives to obfuscation when this idea came to mind. I did not get this from anyone else's work. Even though a member told me that this was already done, I haven't seen it anywhere yet.
This is a very powerful protection method. It is practically IMPOSSIBLE to run a protected program on a computer that it is not licensed to. Even if a cracker reverses all of the stub code, It is still extremely difficult to run the attached file if the cracker doesn't know what he\she is doing.
This is a complete noob-proof anti-leak method.
##Credits to Deathader for his Avira Bypass. Credits to me for this method of protection (Unless someone tells me who, if anyone, originally made it)##
Screenshot
[img]http://i29.[censored].com/ofrpdc.gif[/img]
(yes, I spelt "customers" wrong. lol)
Download
Source Code:
http://www.4shared.com/file/nA7iEVNY/BitCrypt.html
Test App:
http://www.4shared.com/file/R4uDiXmn/crp_TestDecrypt.html
Upcoming Changes
With the creation of HeavyKey, There is no feasible way to bruteforce this. More info about HeavyKey is in my sig.
.
* - Boxxy - Jul 23, 2010
Hmm, send me a program. I bet I can get it to run ;]
* - PAGMAN - Jul 23, 2010
(Jul 23, 2010 06:08 PM)Boxxy Wrote: Hmm, send me a program. I bet I can get it to run ;]
How much would you like to bet? lol. Look at the code and then reconsider :D
* - Rue - Jul 23, 2010
You spelled 'customer' wrong.
EDIT: Too bad running shit in memory kills the stability of almost everything.
* - PAGMAN - Jul 23, 2010
(Jul 23, 2010 06:09 PM)Rue Wrote: You spelled 'customer' wrong.
Lol, I refreshed the page and saw your comment just after adding to the OP that I spelt it wrong.
Just posted a test application! Good luck
(Jul 23, 2010 06:09 PM)Rue Wrote: You spelled 'customer' wrong.
EDIT: Too bad running shit in memory kills the stability of almost everything.
Yes, But only paying costumers can get it into memory. It is still more secure than obfuscation IMO.
* - PAGMAN - Jul 23, 2010
Wow, I am really surprised that this was not as popular as I expected it to be...
* - Neroxan - Jul 23, 2010
lemme guess
If hwid = false then it dosent inject?
There are spoofers for some forms of HWID, not everything has to do with your file alone when it comes to protection...
Ontop of that, I have a program that once injected into memory, would allow me to dump this back out. Thus pretty much fucking up the whole "memory defense" game plan
* - Surpintine - Jul 23, 2010
You shouldn't be so cocky saying this is "impossible to crack", but it will keep complete noobs away. A beginner-intermediate hacker wouldn't have too much trouble cracking it however. But the idea is really nice, keep working at it.
* - South Park - Jul 23, 2010
Thanks, will look into this :)
obfucate your file b4 you use this is more secure btw ^_^
* - Dark_Knight_ - Jul 23, 2010
Very nice !
:):):):):):):):)
Code
t* - jkymmel - Jul 24, 2010
Ill try moding it and changing the GUI :), I won't release it, but if I do, ill give credits :)
btw, does it mean that some codes wont work, when you run it in memory
* - South Park - Jul 24, 2010
This is simple...
Why didn't I ever think of this? 0_o
* - ubbelol - Jul 24, 2010
This is nowhere near fool-proof -.- And it's very possible to run the embedded bytes
* - DarkSeven46 - Jul 24, 2010
Thanks for the source. Will be reading it.
* - PAGMAN - Jul 24, 2010
Glad most of you liked it. And I do agree, I shouldn't have said that it was "impossible" to crack. The thought of a HWID spoofer slipped my mind at the time of posting.
EDIT: I am planning on adding more information into the text to be hashed other than just the motherboards HWID. If I had all of the HDDs and motherboard hashed, It would be much more difficult to spoof. Also, A while ago, I remember reading a memory protection program on CodeProject. I skimmed over it and it looks like a very good way to protect applications from being dumped\modified from\in memory.