[Banksу]

Here's mirror to minus.com.

http://minus.com/mlVDbx49s

[DragonHunter]

Looks good. But I'm wondering why one can't make a simple TCP client/server?

Client sends 'hey execute function one'
Server sends 'okay executing, here is the return value ...'

Client handles return value and deals with it.

What exactly are the pros of it?

Oh and the download requires an account, you should up it to minus.com.

Well with that u need to make first a whole library or putting the whole thing hardcoded and with LiteCode ur just good to go and no need to have knowledge about sending packets

[facebookdoom]

Well with that u need to make first a whole library or putting the whole thing hardcoded and with LiteCode ur just good to go and no need to have knowledge about sending packets

That is true. Definitely a nice project. Do you have any suggestions on places where one could get a affordable Windows VPS? Also I just tried your example and I keep getting the "InterfacePrototype msut be a interface and public" exception, which is at "LiteCode.Shared.DynamicClassCreator.CreateDynamicClass[InterfacePrototype](Type Basetype, SharedClass sharedClass)"

Here's mirror to minus.com.

http://minus.com/mlVDbx49s

Thanks.

[зяяоя]

This is pretty damn cool. But one question; is this basically suppose to be like a terminal to the real application, or does it return a value to the desktop application? I may be way off, didn't look at all of the code.

[DragonHunter]

Okey guys, imagine that, you code a crypter , you obviously only want some people to crypt, so you check via an mysql database and php if the user is in the database, and then you let them crypt

Now all a cracker needs to do is removing that mysql/php check and let other people crypt too.

Now with this kind of security code he posted, you can tell his a username and password and hardwareid, if its in the database it returns the crypted file, if its not then it wont return it.

Now you cant crack this one, since the method to crypt the file is on the server and not in the application itself.

This can still be cracked, tho :D

Lemme post soon in the cracker section a very simple login program and lets see who will be able to receive a file ;)
Also I updated the download link with the new version of SSP

new updates from SSP:
Fixed some minor bugs
Fixed Man-In-The-Middle attacks, the keys are now generated dynamicly calculated at the real data
http://ssp.codeplex.com/SourceControl/ch...nges/17958

So in short with the new SSP if you would change just 1 byte
with wpe pro orsomething before it's being handled by the client/server or send for fun a packet the next time you send/receive data the data is raped

[.CRz]

Well, its still not uncrackable, since all you need to do is patch the compiled bin :p

So crypters are still able to get cracked... but its getting harder and harder now, because we now have to write a builder and replace the crypted files resources with a new server

The objective is not getting it uncrackable but yes imcrease your protection drastically than you was using obfuscators.

It is a almost perfect protection, and one of the reasons it Isnt is becuse it needs internet access, but who cares? Everyone has internet. Is not just that, i'm sure there are some weak points of this kind of protection.

But i never saw such thing before.

[dreamer66]

I think everyone is forgetting how easy it is to DDoS these days. It just takes 1 bored person to ruin the experience for all your customers.

[Assault]

I think everyone is forgetting how easy it is to DDoS these days. It just takes 1 bored person to ruin the experience for all your customers.

Multiple servers, firewalls, blah.
Also, a majority of the people on HF use whored bots/shells to DDoS. There isn't much to worry about on these forums, and you shouldn't be worrying about getting attacked.

Ex; You can run a website, but it only takes one person to take it down. Why would you run it?

[dreamer66]

Implying that wouldn't be a problem if you didnt used this protection.

We are talking about local vs online software protection. Obviously ddosing your home connection (which getting the IP is harder than just checking were does your software connects to) won't affect the software if the program doesn't need to connect online to get the data.

Multiple servers, firewalls, blah.

So you are saying that in order for me to be able to run this kind of protection system I would need to set up a whole network just to be able to keep my server up ? Not to mention that even big companies got DDoS'ed down (LoL servers, Sony, the list goes on and on, so firewalls and multiple servers can only do that much). Not to mention the extra money and maintenance this will require from the administrator.

[DragonHunter]

If anyone is interested in trying to crack a simple crackme I made here u go (https://hackforums.net/showthread.php?tid=2657930)
"idonotcare" if ur good in cracking give it a try, It's like u said, login, build and there u go, let's see if there is a weakness hehe^.^

[.CRz]

What the fucking fuck are you talking about? A internet connection being a disadvantage?

How the fuck are you suppose to get your customers? Do you meat them at a bus station and give them a fucking usb drive and tell them the software is on there? Obviously you are advertising it online so no internet is no fucking disadvantage.

Sorry for the rage, but stuff like that is just plain stupid and makes no sense.

Anyway, its actually sick what dragonhunter did, he is surprising me all the time.

One question tho, how do you execute code online? Like does a application on a vps do that and then return the results or what? Didn't really looked into your example.

you shouldn't talk with that rage becuse probably unlike you my mind is not closed to hf space. what if you use this protection for a company where they have only intranet?

you can still connect to server without internet.

lets give an proper example, not all software requires internet connection, using this protection would just take that advantage.

i'm not saying it isn't good, in fact is EXTREAMLY good for most of cases.
in some cases internet connection is good, orhers not.
are we clear now?

[Washi]

I really like the idea, however i'm just thinking about when your computer is turned off, the software cannot be used anymore 'till you start up your computer again. Not everyone wants his computer turned on 24 hours a day.

But good job =D

[soft2050]

I really like the idea, however i'm just thinking about when your computer is turned off, the software cannot be used anymore 'till you start up your computer again. Not everyone wants his computer turned on 24 hours a day.

But good job =D

Thats why this would require a Windows VPS or Dedicated Server just like websites need.

I would like to propose one suggestion if possible of hosting the server side through a c++ code that can be run on a linux server too. I remember that in WCF this implementation is possible.

[CyNecx]

what about using a Asp.net that will make the connection secure too ;)

[Banksу]

Okey guys, imagine that, you code a crypter , you obviously only want some people to crypt, so you check via an mysql database and php if the user is in the database, and then you let them crypt

Now all a cracker needs to do is removing that mysql/php check and let other people crypt too.

Now with this kind of security code he posted, you can tell his a username and password and hardwareid, if its in the database it returns the crypted file, if its not then it wont return it.

Now you cant crack this one, since the method to crypt the file is on the server and not in the application itself.

This can still be cracked, tho :D

I had basically the same idea with my crypter. Except I send the encrypted codedom source if the server sided check goes through.