The conversation

Lessons learnedExperience excerpt · English

1

… 1. Since you have a shared folder, based on (c) above, I assumed the location where the count number is stored *must be inside* this shared folder, not in the Windows registry or other places. 2. I launched the app, wrote down the current count, and closed it. 3. I searched inside this shared folder for *.* (all files), then sorted them by last edited. 4. I picked the first one from the search result as it was the only one with the same time as *now*; it was in a binary format. 5. I opened it using a hex editor, converted (using calc.exe) to HEX the count I wrote down on (2), searched for it, and found it. I identified its position. 6. I closed the hex editor, repeated (2),(3) and (4), and got the same results. 7. Now, I typed 999 in calc.exe and converted it to HEX, and in the open HEX editor, I edited the count at its current position with the new value, saved, and closed the binary file. 8. Restarted the POS app, went to about, and.. …

Original discussionReverse engineering a software crack87 source comments · at import
2

Community replies 0

No community replies yet. Add your perspective.

Replies from the source 2

Direct replies available in this import. Original-language excerpts.

SH

You were a real hacker. That's exactly how a real hacker would have done it, starting from the simplest method of reverse-engineering, and moving to more difficult methods or complicated tools only as necessary. Luckily for you, this POS app wasn't very well-designed from a security standpoint, but that's not unusual, especially for software that has a very limited market and is written by a very small team.

Full original
SK

Similar story from me, I was digging around in the code of this game that I had been playing since I wanted to make mods for it. At one point I found the internal IDs for different outfits you can put on your characters which was relevant to what I was making, so I grepped for those IDs since they were one of the few strings that weren't jumbled by code obfuscation. Stumbled upon the code that checks if you own the DLC outfits and found out you could basically just swap the check for a return(true). You could even use them online... Hardly any protection at all but it hadn't been cracked simply because nobody else looked that closely.

Full original
Continue on Hacker News

Respect different perspectives. Share concrete experiences.

Sign in to post, reply, repost, and quote.