Feb 16, 2018 11:03 AM
(This post was last modified: Feb 16, 2018 11:44 AM by bobby69.)
void.cat/#eaa96082a84105baed9e53563af33b3fd80d35a3
Use as you like, some of my "functions" were deleted ( not crucial for the software, they were useless stuff with a very bad updater, which was static generated with php, sadly it didn't have encryption or anything. )
some trash from my paths can be found
.php files not included
edit: this is from my 1 month of C# learning, which doesn't include books or tutorials, but straight out practice with google help ;)
DO NOT DEAL WITH THIS MEMBER
That is a shady link, but I downloaded it.
As you said "bad example of authentication", and yes this is correct. This is how EZLib USED TO operate, but thankfully I stopped being dumb and improved it. It should never go off a boolean to dictate if the user is logged in as it can be altered easily under a decompiler. This also has no end-to-end encrpytion which some systems here don't have either, EZLib does. Another bad thing is that it does not check if the proxy/IP address being sent to the server with the request is bad IP address/proxy (something other systems don't have, EZLib does).
Overall, thanks for sharing.
DO NOT DEAL WITH THIS MEMBER
(Feb 16, 2018 11:12 AM)EZLib Wrote: That is a shady link, but I downloaded it.
As you said "bad example of authentication", and yes this is correct. This is how EZLib USED TO operate, but thankfully I stopped being dumb and improved it. It should never go off a boolean to dictate if the user is logged in as it can be altered easily under a decompiler. This also has no end-to-end encrpytion which some systems here don't have either, EZLib does. Another bad thing is that it does not check if the proxy/IP address being sent to the server with the request is bad IP address/proxy (something other systems don't have, EZLib does).
Overall, thanks for sharing.
Here we go again:
Licensing is NOT ANTI-CRACK.
Of course security is a thing, but anything to and from a web server can be spoofed if it is static.
The best way to secure a program is to move code server sided, or to have the client application load a library from the server, and decrypt functions based on certain variables (IP address, user credentials, etc.).
(Feb 16, 2018 11:12 AM)EZLib Wrote: That is a shady link, but I downloaded it.
As you said "bad example of authentication", and yes this is correct. This is how EZLib USED TO operate, but thankfully I stopped being dumb and improved it. It should never go off a boolean to dictate if the user is logged in as it can be altered easily under a decompiler. This also has no end-to-end encrpytion which some systems here don't have either, EZLib does. Another bad thing is that it does not check if the proxy/IP address being sent to the server with the request is bad IP address/proxy (something other systems don't have, EZLib does).
Overall, thanks for sharing.
as I said, it's pretty bad. It was written in 2 days, since I lost my original source. It was limited to few dumb users, to get updates and stuff, but it works.
Also I like void.cat because it's simple, fast, anonymous and compact. Also, this was self coded, with some help from stackoverflow, you should note that I am learning C# and I started 1 month ago :D
|