Reverse Engineering RET Homepage RET Members Reverse Engineering Projects Reverse Engineering Papers Reversing Challenges Reverser Tools RET Re-Search Engine Reverse Engineering Forum Reverse Engineering Links

Go Back   Reverse Engineering Team Board > Reverse Engineering Board > Reverse Code Engineering
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Display Modes
  #11  
Old 01-27-2012, 03:04 PM
Git Git is offline
Super Moderator
 
Join Date: Oct 2007
Location: Torino
Posts: 1,797
Default

> gits safedump n dmp2mkey say no aes algo
> involved in this app that means it cant be ultrapro or superproxm

How do you draw that conclusion?

Git
Reply With Quote
  #12  
Old 01-27-2012, 03:05 PM
zementmischer zementmischer is offline
Member
 
Join Date: Apr 2011
Location: Europe
Posts: 43
Default

@yogi_saw:
That's what I know about the current situation: It doesn't really matter if your UltraPro dongle uses access code 3 (standard query) or access code 7 (AES) because there's no public solution to solve either of the two. And Git's safedump/dmp2mkey - as well as pva 3.3 - is for dumping&solving SuperPro dongles - not UltraPro!
That said, you CAN access an ULP dongle by using the SSPro API because they are almost identical - well almost. That's the reason why many SSPro dumpers will also dump ULP dongles without any complains.
__________________
Real programmers don't comment their code.
If it was hard to write, it should be hard to read.
Reply With Quote
  #13  
Old 01-28-2012, 01:46 AM
yogi_saw yogi_saw is offline
Senior Member
 
Join Date: May 2009
Posts: 533
Default

@git i assume there r 2 diff algos in sentinel superpro standard and enhanced and 3 in superpro xm and ultrapro. Two of the above and one with aes tunneling which is still cant be solved.
I m away frm my pc now a days can somebody pls chk if safedump shows aes tunneling is on for this dongle. If it is off that means it must b superpro
pls correct me if i m wrong
@zementmischer u mean if an ulp that uses standard or enhanced algos cant be solved?
Sorry guys asking much but really i dont have any dongles to try
__________________
"Don't backstab me, i have two eyes on my back..." saint DABANGG
Reply With Quote
  #14  
Old 01-28-2012, 08:16 AM
Git Git is offline
Super Moderator
 
Join Date: Oct 2007
Location: Torino
Posts: 1,797
Default

Secure tunnel is totally separate to the algo type. Earlier superpro had standard and enhanced algo. Later superpro, ultrapro and XM additional have AES algo available for cell query. If you get the latest safedump it will show you suspicion of tunneling if an error occurs but does not specifically detect it. It does show you if it is an old or new type of superpro and exits with a message if it is ultrapro. It also shows you specific *capability* of the dongle in terms of tunneling, AES aglo etc but that does not necessarily mean they are in use. Tunneling has been explored and defeated but the information is not public or known to me, and I believe finding the key is not easy. Latest safedump is 2.38.5.7 7 december 2011.

Later - seems I did not release 2.38.5.7. Latest released version is 2.32 for 1 jun 2011.
http://hotfile.com/dl/136554489/1f2a...mp232.rar.html

Git

Last edited by Git : 01-28-2012 at 09:01 AM.
Reply With Quote
  #15  
Old 02-05-2012, 10:26 AM
chanvaidan chanvaidan is offline
Member
 
Join Date: Jan 2009
Posts: 30
Default

Hi Git
I have use Safedump for my dongle but it don't work with multikey.
C:\>safedump.exe 0x5888
Key family is = SuperPro
Key form is = Parallel
Key has = 64 cells
serverName = 0
serverIPAddress = 0
serverIPXAddress = 0
version = 7.6.0
protocol = NONE
devId = 0x5888
serialNum = 0x0CDF
Password Counter not present. Bruteforce of WP should be saf
capabilities = LEGACY
hardLimit = 1
inUse = 0
numTimeOut = 0
highestUse = 0
subLicLimit = 0
subLicInUse = 0


Processing dongle 5888
Finding cell data...
Found 0 Query cells
WorkingWriting dump file RNBO_5888.dmp

Done

Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\MultiKey\Dumps\00005888]
"DongleType"=dword:00000003
"Copyright"="None"
"Created"="Sat Feb 04 21:55:02.555 2012 by dmp2mkey v2.5.9.1"
"Name"="5888 Sentinel SuperPro Dump"
"Type"=dword:00000000
"CellType"=hex:\ 
    01,01,03,03,03,01,03,01,\ 
    00,00,00,00,00,00,00,00,\ 
    00,00,00,00,00,00,00,00,\ 
    00,00,00,00,00,00,00,00,\ 
    00,00,00,00,00,00,00,00,\ 
    00,00,00,00,00,00,00,00,\ 
    00,00,00,00,00,00,00,00,\ 
    00,00,00,00,00,00,00,00
"sntMemory"=hex:\ 
    DF,0C,88,58,00,00,00,00,00,00,00,00,00,00,00,00,\ 
    00,00,00,00,00,00,00,00,00,00,00,00,00,00,AA,55,\ 
    03,10,01,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 
    00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 
    5C,00,00,00,00,00,00,00,00,00,00,00,34,1A,00,00,\ 
    00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 
    00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 
    00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
You can help me.

Last edited by chanvaidan : 04-04-2012 at 07:41 AM.
Reply With Quote
  #16  
Old 02-05-2012, 11:05 AM
kjms kjms is offline
Senior Member
 
Join Date: Aug 2009
Posts: 337
Default

@chanvaidan JUST CHANGE THE AS HIGHLIGHTED, POST YOUR RESULTS...
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\MultiKey\Dumps\00005888]
"DongleType"=dword:00000003
"Copyright"="None"
"Created"="Sat Feb 04 21:55:02.555 2012 by dmp2mkey v2.5.9.1"
"Name"="5888 Sentinel SuperPro Dump"
"Type"=dword:00000000
"CellType"=hex:\ 
    01,01,03,03,03,01,03,01,\ 
    00,00,00,00,00,00,00,00,\ 
    00,00,00,00,00,00,00,00,\ 
    00,00,00,00,00,00,00,00,\ 
    00,00,00,00,00,00,00,00,\ 
    00,00,00,00,00,00,00,00,\ 
    00,00,00,00,00,00,00,00,\ 
    00,00,00,00,00,00,00,00
"sntMemory"=hex:\ 
    DD,0C,88,58,00,00,6F,B6,00,00,00,00,00,00,00,00,\ 
    00,00,00,00,00,00,00,00,00,00,00,00,00,00,AA,55,\ 
    03,10,01,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 
    00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 
    5C,00,00,00,00,00,00,00,00,00,00,00,34,1A,00,00,\ 
    00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 
    00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 
    00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
Reply With Quote
  #17  
Old 02-05-2012, 06:11 PM
Git Git is offline
Super Moderator
 
Join Date: Oct 2007
Location: Torino
Posts: 1,797
Default

Alternately, READ what it says and find the WP for yourself.

Git
Reply With Quote
  #18  
Old 02-07-2012, 08:43 PM
zementmischer zementmischer is offline
Member
 
Join Date: Apr 2011
Location: Europe
Posts: 43
Default

Quote:
Originally Posted by yogi_saw View Post
u mean if an ulp that uses standard or enhanced algos cant be solved?
At least that's what I've said.
But honestly I'm not really sure about this because my assumption is based on reports from other members.
Until I can get my hands on the real thing (I'll probably get two ULP dongles in a week or two) you shouldn't rely on my statement.
I'll post an update when I'm sure about it...
__________________
Real programmers don't comment their code.
If it was hard to write, it should be hard to read.
Reply With Quote
  #19  
Old 02-14-2012, 01:00 PM
chanvaidan chanvaidan is offline
Member
 
Join Date: Jan 2009
Posts: 30
Default

Hi kjms, Thank you so much but i can't my program when i remove key dongle. When i run my program with multikey it report error
Quote:
##Unable to write to extarnal keylock!
. You can help me make a multikey for my program.
Reply With Quote
  #20  
Old 02-15-2012, 12:45 AM
yogi_saw yogi_saw is offline
Senior Member
 
Join Date: May 2009
Posts: 533
Default

@chanvaidan ur app doesnt make queries log ur dongle with sentinel loger until it shows error then in log search for write operation for dongle u will find wp as an argument to that function. Insert the same in reg. It will work. And dont forget apply changes shown by kjms if u r using mk 18.2 above
__________________
"Don't backstab me, i have two eyes on my back..." saint DABANGG
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump





Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2020, Jelsoft Enterprises Ltd.