Jan 13, 2011 08:08 AM
(This post was last modified: Jan 13, 2011 09:50 AM by The-One.)
Hey,
Okey, so most of you know how to crack applications, you can use different methods, I preffer using a disassembler like OllyDbg.
But, we can also use other tools, like the tools I will be using.
So, get your program you want to crack and start reading!
Step 1:
Download the following files:
- Simple Assembly Explorer
- Red Gate Reflector .NET
Step 2:
Open the file you want to crack in Red Gate's reflector. (Drag it inside the form).
Now you will see one of these two icons:
[img]http://www.pl0xy.eu/images/32432kjxas3.png[/img]
Step 2b:
Open up Simple Assembly Explorer en navigate to the folder where u saved the executable you want to crack.
Right click, and click Deobfuscator. You will see a window, if you haven't already, I recommend using this setting(There might be better one's, if you have one, make a screen and post it, and I will edit it):
[img]http://www.pl0xy.eu/images/19238123.png[/img]
Now, for the next step, use the deobfuscated file (Saved in the directory where the original file is saved with the same name but .Deobf added at the end).
Step 3:
Now, if you want the source first or find something (Maybe the link where the program gets the return of the hwid check?) right click on the executable and click reflector.
If you want to patch(crack) it, right click and press class editor.
Step 4:
Follow the steps on the picture:
[img]http://www.pl0xy.eu/images/4u34kj.png[/img]
I selected the string, so it searches for a string (Because the link is set as a string), then I select the string I want to search for, easy, 'http://' (If that doesn't work try 'www' , or 'hwid', 'check' etc. If you really can't find it, you can try getting it with Sandboxie with sandboxie you can see what link the program navigates to.) then we click next to let it search.
Step 5:
[img]http://www.pl0xy.eu/images/23219312.png[/img]
If you want to know what this does:
Spoiler (Click to View)
Now, right click on the link, and select edit. You will see the link in a textbox. Open the link in a browser and (Don't enter a GUID) and see what it returns.(SAVE IT)
Step 6:
Open notepad.
Paste in the found string and save it as a .php (Name doesn't matter)
Upload it on a host.
Step 7:
Next, open the Simple Assembly Explorer window again, and replace the following part IN the TEXTBOX.
Lets say I found: http://www.url.com/hwid.php?hwid=
Replace: http://www.url.com/hwid.php with http://www.yoursite.com/yourphp.php
Press OK.
Step 8:
Now, at Simple Assembly Explorer's menubar, press save, save the patched file.
Open it, and you will see it now logs in!
This was my tutorial.
Enjoy, for questions, reply.
Okey, so most of you know how to crack applications, you can use different methods, I preffer using a disassembler like OllyDbg.
But, we can also use other tools, like the tools I will be using.
So, get your program you want to crack and start reading!
Step 1:
Download the following files:
- Simple Assembly Explorer
- Red Gate Reflector .NET
Step 2:
Open the file you want to crack in Red Gate's reflector. (Drag it inside the form).
Now you will see one of these two icons:
[img]http://www.pl0xy.eu/images/32432kjxas3.png[/img]
Step 2b:
Open up Simple Assembly Explorer en navigate to the folder where u saved the executable you want to crack.
Right click, and click Deobfuscator. You will see a window, if you haven't already, I recommend using this setting(There might be better one's, if you have one, make a screen and post it, and I will edit it):
[img]http://www.pl0xy.eu/images/19238123.png[/img]
Now, for the next step, use the deobfuscated file (Saved in the directory where the original file is saved with the same name but .Deobf added at the end).
Step 3:
Now, if you want the source first or find something (Maybe the link where the program gets the return of the hwid check?) right click on the executable and click reflector.
If you want to patch(crack) it, right click and press class editor.
Step 4:
Follow the steps on the picture:
[img]http://www.pl0xy.eu/images/4u34kj.png[/img]
I selected the string, so it searches for a string (Because the link is set as a string), then I select the string I want to search for, easy, 'http://' (If that doesn't work try 'www' , or 'hwid', 'check' etc. If you really can't find it, you can try getting it with Sandboxie with sandboxie you can see what link the program navigates to.) then we click next to let it search.
Step 5:
[img]http://www.pl0xy.eu/images/23219312.png[/img]
If you want to know what this does:
Spoiler (Click to View)
Now, right click on the link, and select edit. You will see the link in a textbox. Open the link in a browser and (Don't enter a GUID) and see what it returns.(SAVE IT)
Step 6:
Open notepad.
Paste in the found string and save it as a .php (Name doesn't matter)
Upload it on a host.
Step 7:
Next, open the Simple Assembly Explorer window again, and replace the following part IN the TEXTBOX.
Lets say I found: http://www.url.com/hwid.php?hwid=
Replace: http://www.url.com/hwid.php with http://www.yoursite.com/yourphp.php
Press OK.
Step 8:
Now, at Simple Assembly Explorer's menubar, press save, save the patched file.
Open it, and you will see it now logs in!
This was my tutorial.
Enjoy, for questions, reply.
FR1908
