[xDowwdeen]

Hi HF,

I have been creating a Client / Server application that would allow you to add username and authentication check to applications over a TCP Connection.

The plan is that when I finish this that I would release it to HF. But first I want to see what you think of the idea while I still code it.

Instead of having the applications having to connect to a website to check it the login details, it would connect to one of my servers that would handle the login of all the applications that a developer has set up using my login system. It would then all be centrally managed from my server so that no hosting is needed for the developer them selfs.

Features

• Data sent over is encrypted with RSA
  
• 1 Username / Password for App's
  
• Username / Password Login
  
• Login check with / without HWID (Developer choice)
  
• Seperate App ID's for each app
  
• Admin Panel - Manage the users on the apps / License Length / Ban User
  
  

Screenshot below of the Client / Server.

Let me know what you think and what other features could be a good idea.

Possible Features

• Prevent Multi-Login
  
• Add a failover to a HTTP server
  

p.s I would be looking for testers for the system when it is nearer completion. PM me if you are interested

-xDowwdeen

[programtesting28]

nice Authentication, but whether it should portfowarding first ? if client want to login, the server must on ? i think it's more better to use hosting, not a TCP Connection... sorry for my bad english :D

[xDowwdeen]

nice Authentication, but whether it should portfowarding first ? if client want to login, the server must on ? i think it's more better to use hosting, not a TCP Connection... sorry for my bad english :D

The server would be on as I will host it on my Windows Server that is in a Datacenter

-xDowwdeen

[CodeAssassin]

Seems like a good idea, what level of protection dose it have with regard to being reverse engineered. Would love to give this a little test for you :) Great idea and work!

[LethalNET]

seems pretty neat but this

would mean you could run through Dot net resolver and change the values to crack it, Maybe add some sort of secure encryption method? Would be pretty neat.
Other then that small flaw it is a nice little project!

[Ikhuhz]

This seems like an awesome project sir!

- 🤝

[jeiceei]

looks good, keep goin, there has to be a function for kicking multilogin users

[SubGenius]

I had worked with a similar idea once, I used the concept that every application should generate its own ID in first run, then save this ID with other infos into a file, a 'Cookie' file.
Although I used php files to send data to database, you are using TCP nice idea.

Your project seems cool, keep working on it.

[DragonHunter]

Lol when I read the title I thought it was about Apples login system or something XD

[SIM-1456245]

Pretty cool idea, but don't you think hosting a server with thousands of applications will be easy for you, I mean you'll be the responsible one if hundreds of applications stop working.

[xDowwdeen]

seems pretty neat but this

would mean you could run through Dot net resolver and change the values to crack it, Maybe add some sort of secure encryption method? Would be pretty neat.
Other then that small flaw it is a nice little project!

Thanks for the interest into the program yes i am aware that people can just change the values using dot net resolver but at the moment i am still creating the system but i would need to look at some help for preventing that from happening. Not really my strong point. I have put in RSA encryption for when the data is being sent so that it makes it harder for the messages to be interpreted and changed

-xDowwdeen

---

looks good, keep goin, there has to be a function for kicking multilogin users

Thanks for the Idea I have added it to my list of possible features

-xDowwdeen

---

Pretty cool idea, but don't you think hosting a server with thousands of applications will be easy for you, I mean you'll be the responsible one if hundreds of applications stop working.

Yes that I am aware of, but if it does become what people are looking into using I am willing to take that responsibility as I would be providing a service to the customers

-xDowwdeen

[LethalNET]

Lol when I read the title I thought it was about Apples login system or something XD

Haha thats why I clicked it originally XD

[xDowwdeen]

Haha thats why I clicked it originally XD

Oh lol, Guess thinking about it the name probe not the best now.

-xDowwdeen

[๖ۣۜXilluX]

As soon as I saw the HWID, it looked really suspicious in my eyes. I know that HWID generator, that´s the one with the 'win32_processor', right ?

If so immediately delete that code, that HWID generator is not unique. I know that I had the issue, where 20 people had the same HWID.

[DeadLine]

As soon as I saw the HWID, it looked really suspicious in my eyes. I know that HWID generator, that´s the one with the 'win32_processor', right ?

If so immediately delete that code, that HWID generator is not unique. I know that I had the issue, where 20 people had the same HWID.

Code

ManagementClass managClass = new ManagementClass("win32_processor");
ManagementObjectCollection managCollec = managClass.GetInstances();

foreach (ManagementObject managObj in managCollec)
{
    cpuInfo = managObj.Properties["processorID"].Value.ToString();
    break;
}

True, you shouldn't just grab the processor ID and claim it as a HWID because a lot of people will have the same processor ID.

Instead you should grab the ID's of various components and form your HWID with those values.