Jul 8, 2012 06:43 AM
(This post was last modified: Jul 10, 2012 03:05 PM by DragonHunter.)
Maybe you have been reading some stuff already about LiteCode ( https://hackforums.net/showthread.php?tid=2655105)
Well I thought of making the crackme to see if people were able to crack it so here you go
Just login, press download and thats it, show results of the app u had to download by pressing download
Download: http://min.us/mbrKc3lBUL
Screenshot:
[img]http://img837.imageshack.us/img837/7214/53790616.png[/img]
If you think you can only crack it by having some "legit" account here u go
Username: I_Am_A_Cheater
Password: Fake_Login_idonotcare
now crack it
Members who cracked it:
I will give this a go, can you pm me a legit login , thanks.
![[Image: it6dJ.png]](https://i.imgur.com/it6dJ.png)
After that it is similar to those bruteforce me and no one would be able to go further with only this!
This can be only cracked by these 2 methods
1. As we all know Bruteforcing
2. The cracker would require a working username, password combination that should return the original download file. Then the cracker could change or add that direct code inside the assembly and then share the modified assembly which in no way connects to the server!
Still, as i said in the other thread, this is a lot more safe then other methods!
(Jul 8, 2012 07:14 AM)soft2050 Wrote: 2. The cracker would require a working username, password combination that should return the original download file. Then the cracker could change or add that direct code inside the assembly and then share the modified assembly which in no way connects to the server!
This.
Although it is good protection but I don't think it is enough to protect one's app considering the limit the crackers can go these days.
i want to give it a try..
but not on mah pc right now....
will see it tonight....
challange accepted
I haven't tried it yet but as it gets the method just inject into the dll and make it dump the method should work in theory.
Might try to do this tomorrow..
Jul 10, 2012 02:43 AM
(This post was last modified: Jul 10, 2012 02:43 AM by DragonHunter.)
(Jul 9, 2012 03:39 PM)The-One Wrote: I haven't tried it yet but as it gets the method just inject into the dll and make it dump the method should work in theory.
Might try to do this tomorrow.. If u just looked at what LiteCode does it does not gets stored in the client but in the server so dumping is not a option
But it obviously returns something ,and we can just use that, pm m a login info and ill crack it
Otherwise its just as secure as my cloud stub.
Added a account u can actually login with, now proof it u can crack it now
are you not able to host the litecode on a more secure/reliable server to prevent being "downed"? or are all hosting/servers susceptible to being attacked and downed?
Here it is, the same crackme in dragonhunters style, to show you how stupid this is -.- because all we need is 1 valid login
https://hackforums.net/showthread.php?tid=2667270
@idonotcare
Calm your tits man, you've got it all wrong anyway. I'm quite sure DragonHunter is meaning something like this:
- DragonHunter makes a crypter.
- Only wants people with a valid login to crypt files, but .NET cracking is so simple. WHAT DO?
- He uses LiteCode to store the actual crypting functions.
- From there when a customer wants to crypt their virus, they essentially upload the virus to the LiteCode server which then crypts and returns the fud file.
- Only people with a valid login can crypt AND it's impossible to crack because all the logic is stored on the server-side.
If you still think this is crackable, then you're an idiot.
DO NOT DEAL WITH THIS MEMBER
Jul 11, 2012 02:52 PM
(This post was last modified: Jul 11, 2012 02:53 PM by facebookdoom.)
(Jul 11, 2012 02:45 PM)AirKode Wrote: @idonotcare
Calm your tits man, you've got it all wrong anyway. I'm quite sure DragonHunter is meaning something like this:
- DragonHunter makes a crypter.
- Only wants people with a valid login to crypt files, but .NET cracking is so simple. WHAT DO?
- He uses LiteCode to store the actual crypting functions.
- From there when a customer wants to crypt their virus, they essentially upload the virus to the LiteCode server which then crypts and returns the fud file.
- Only people with a valid login can crypt AND it's impossible to crack because all the logic is stored on the server-side.
If you still think this is crackable, then you're an idiot.
This. The code is executed on the server, the client merely updates the UI with the results the server returns. This is impossible to crack, but it's not usable in all kind of projects. But a cypter is the perfect example that could be used for this purpose.
Well server-sided code should only be used in rare occasions, that idea is floating around for like 10 years, but no one have the infrastructure to support thousands of users. At most you should only have your algo on the server and possibly few checks for authenticity.
|