首页
社区
课程
招聘
[旧帖] [求助]Rocky4 0.00雪花
发表于: 2013-4-20 16:03 6830

[旧帖] [求助]Rocky4 0.00雪花

2013-4-20 16:03
6830
有大大能帮忙破解一个Rocky4的加密狗吗?
软件在这:http://pan.baidu.com/share/link?shareid=522365&uk=872440300

[课程]Linux pwn 探索篇!

收藏
免费 0
支持
分享
最新回复 (4)
雪    币: 414
活跃值: (531)
能力值: ( LV9,RANK:170 )
在线值:
发帖
回帖
粉丝
2
程序只是一个服务器程序,如果是Rockey4的狗,可以先看一下狗的手册,使用OD进行调试,带狗应该会容易破解一些,如果彻底一些的,更可以考虑直接复制一下,论坛里有方法复制的。
2013-4-20 20:21
0
雪    币: 230
活跃值: (11)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
3
别人用R4 Monitor读了一下,他说有加密算法,不好弄。真的吗?

DongleInfo.LOG

////////////////////////////////////////////////////////////////
//  Feitian's Rockey4 API Monitor, (c) 2007 - 2008 ngoksun  ////
////////////////////////////////////////////////////////////////

// Dongle Info

ROCKEY4 USB

P1 = 4CEF
P2 = 8F40
P3 = 0000
P4 = 0000

// Dongle ID

HID = 3B953D4D
UID = 20010601

// Dongle memory

0000:  01 00 03 01 00 05 00 00  ........
0008:  09 00 EB E6 73 51 00 00  ....sQ..
0010:  00 00 00 00 00 00 00 00  ........
0018:  00 00 00 00 00 00 00 00  ........
0020:  00 00 00 00 00 00 00 00  ........
0028:  00 00 00 00 00 00 00 00  ........
0030:  00 00 00 00 00 00 00 00  ........
0038:  00 00 00 00 00 00 00 00  ........
0040:  00 00 00 00 00 00 00 00  ........
0048:  00 00 00 00 00 00 00 00  ........
0050:  00 00 00 00 00 00 00 00  ........
0058:  00 00 00 00 00 00 00 00  ........
0060:  00 00 00 00 00 00 00 00  ........
0068:  00 00 00 00 00 00 00 00  ........
0070:  00 00 00 00 00 00 00 00  ........

// SeedCode Table

R4Monitor.LOG

////////////////////////////////////////////////////////////////
//  Feitian's Rockey4 API Monitor, (c) 2007 - 2008 ngoksun  ////
////////////////////////////////////////////////////////////////

Rockey4 API Monitor is started...

In:RY_FIND
   Bas. PsW1 = 4CEF, PsW2 = 8F40
   Adv. PsW3 = 0000, PsW4 = 0000
Out: HardwareID = 3B953D4D, status = ERR_SUCCESS

In:RY_FIND
   Bas. PsW1 = 4CEF, PsW2 = 8F40
   Adv. PsW3 = 0000, PsW4 = 0000
Out: HardwareID = 3B953D4D, status = ERR_SUCCESS

In:RY_OPEN
   Bas. PsW1 = 4CEF, PsW2 = 8F40
   Adv. PsW3 = 0000, PsW4 = 0000
   HardwareID= 3B953D4D
Out: Handle = 0000, Dongle Type = ROCKEY4 USB, status = ERR_SUCCESS

In:RY_READ_USERID
   Handle = 0000
Out: UserID = 20010601, status = ERR_SUCCESS

In:RY_READ
   Handle = 0000
   UDZ Offset = 00, length = 0A
Out: status = ERR_SUCCESS
   Data = 01 00 03 01 00 05 00 00 09 00

In:RY_CALCULATE1 (Based on user value)
   Handle = 0000
   Algo Start = 0, Parameter = 00000000
   A = A638, B = 0074, C = BC48, D = 0358
Out: A = 190C, B = A6D8, C = A688, D = A680, status = ERR_SUCCESS

In:RY_CLOSE
   Handle = 0000
Out: status = ERR_SUCCESS

In:RY_FIND
   Bas. PsW1 = 4CEF, PsW2 = 8F40
   Adv. PsW3 = 0000, PsW4 = 0000
Out: HardwareID = 3B953D4D, status = ERR_SUCCESS

In:RY_OPEN
   Bas. PsW1 = 4CEF, PsW2 = 8F40
   Adv. PsW3 = 0000, PsW4 = 0000
   HardwareID= 3B953D4D
Out: Handle = 0000, Dongle Type = ROCKEY4 USB, status = ERR_SUCCESS

In:RY_READ_USERID
   Handle = 0000
Out: UserID = 20010601, status = ERR_SUCCESS

In:RY_READ
   Handle = 0000
   UDZ Offset = 00, length = 0A
Out: status = ERR_SUCCESS
   Data = 01 00 03 01 00 05 00 00 09 00

In:RY_CALCULATE1 (Based on user value)
   Handle = 0000
   Algo Start = 0, Parameter = 00000000
   A = 6BDA, B = 0031, C = BC6D, D = 15C1
Out: A = BE25, B = 6C3A, C = 6C0A, D = 402A, status = ERR_SUCCESS

In:RY_CLOSE
   Handle = 0000
Out: status = ERR_SUCCESS

In:RY_FIND
   Bas. PsW1 = 4CEF, PsW2 = 8F40
   Adv. PsW3 = 0000, PsW4 = 0000
Out: HardwareID = 3B953D4D, status = ERR_SUCCESS

In:RY_OPEN
   Bas. PsW1 = 4CEF, PsW2 = 8F40
   Adv. PsW3 = 0000, PsW4 = 0000
   HardwareID= 3B953D4D
Out: Handle = 0000, Dongle Type = ROCKEY4 USB, status = ERR_SUCCESS

In:RY_READ_USERID
   Handle = 0000
Out: UserID = 20010601, status = ERR_SUCCESS

In:RY_READ
   Handle = 0000
   UDZ Offset = 00, length = 0A
Out: status = ERR_SUCCESS
   Data = 01 00 03 01 00 05 00 00 09 00

In:RY_CLOSE
   Handle = 0000
Out: status = ERR_SUCCESS

In:RY_FIND
   Bas. PsW1 = 4CEF, PsW2 = 8F40
   Adv. PsW3 = 0000, PsW4 = 0000
Out: HardwareID = 3B953D4D, status = ERR_SUCCESS

In:RY_OPEN
   Bas. PsW1 = 4CEF, PsW2 = 8F40
   Adv. PsW3 = 0000, PsW4 = 0000
   HardwareID= 3B953D4D
Out: Handle = 0000, Dongle Type = ROCKEY4 USB, status = ERR_SUCCESS

In:RY_READ_USERID
   Handle = 0000
Out: UserID = 20010601, status = ERR_SUCCESS

In:RY_READ
   Handle = 0000
   UDZ Offset = 00, length = 0A
Out: status = ERR_SUCCESS
   Data = 01 00 03 01 00 05 00 00 09 00

In:RY_WRITE
   Handle = 0000
   UDZ Offset = 0A, length = 04
   Data = 34 D5 73 51
Out: status = ERR_SUCCESS

In:RY_READ
   Handle = 0000
   UDZ Offset = 0A, length = 04
Out: status = ERR_SUCCESS
   Data = 34 D5 73 51

In:RY_CLOSE
   Handle = 0000
Out: status = ERR_SUCCESS

In:RY_FIND
   Bas. PsW1 = 4CEF, PsW2 = 8F40
   Adv. PsW3 = 0000, PsW4 = 0000
Out: HardwareID = 3B953D4D, status = ERR_SUCCESS

In:RY_OPEN
   Bas. PsW1 = 4CEF, PsW2 = 8F40
   Adv. PsW3 = 0000, PsW4 = 0000
   HardwareID= 3B953D4D
Out: Handle = 0000, Dongle Type = ROCKEY4 USB, status = ERR_SUCCESS

In:RY_READ_USERID
   Handle = 0000
Out: UserID = 20010601, status = ERR_SUCCESS

In:RY_READ
   Handle = 0000
   UDZ Offset = 00, length = 0A
Out: status = ERR_SUCCESS
   Data = 01 00 03 01 00 05 00 00 09 00

In:RY_CLOSE
   Handle = 0000
Out: status = ERR_SUCCESS

In:RY_FIND
   Bas. PsW1 = 4CEF, PsW2 = 8F40
   Adv. PsW3 = 0000, PsW4 = 0000
Out: HardwareID = 3B953D4D, status = ERR_SUCCESS

In:RY_OPEN
   Bas. PsW1 = 4CEF, PsW2 = 8F40
   Adv. PsW3 = 0000, PsW4 = 0000
   HardwareID= 3B953D4D
Out: Handle = 0000, Dongle Type = ROCKEY4 USB, status = ERR_SUCCESS

In:RY_READ_USERID
   Handle = 0000
Out: UserID = 20010601, status = ERR_SUCCESS

In:RY_READ
   Handle = 0000
   UDZ Offset = 00, length = 0A
Out: status = ERR_SUCCESS
   Data = 01 00 03 01 00 05 00 00 09 00

In:RY_WRITE
   Handle = 0000
   UDZ Offset = 0A, length = 04
   Data = EB E6 73 51
Out: status = ERR_SUCCESS

In:RY_READ
   Handle = 0000
   UDZ Offset = 0A, length = 04
Out: status = ERR_SUCCESS
   Data = EB E6 73 51

In:RY_CLOSE
   Handle = 0000
Out: status = ERR_SUCCESS

In:RY_FIND
   Bas. PsW1 = 4CEF, PsW2 = 8F40
   Adv. PsW3 = 0000, PsW4 = 0000
Out: HardwareID = 3B953D4D, status = ERR_SUCCESS

In:RY_OPEN
   Bas. PsW1 = 4CEF, PsW2 = 8F40
   Adv. PsW3 = 0000, PsW4 = 0000
   HardwareID= 3B953D4D
Out: Handle = 0000, Dongle Type = ROCKEY4 USB, status = ERR_SUCCESS

In:RY_READ_USERID
   Handle = 0000
Out: UserID = 20010601, status = ERR_SUCCESS

In:RY_READ
   Handle = 0000
   UDZ Offset = 00, length = 0A
Out: status = ERR_SUCCESS
   Data = 01 00 03 01 00 05 00 00 09 00

In:RY_CALCULATE1 (Based on user value)
   Handle = 0000
   Algo Start = 0, Parameter = 00000000
   A = 6BFE, B = 0010, C = BC67, D = 8078
Out: A = 50D1, B = 6C1E, C = 6C0E, D = 2C1E, status = ERR_SUCCESS

In:RY_CLOSE
   Handle = 0000
Out: status = ERR_SUCCESS

In:RY_FIND
   Bas. PsW1 = 4CEF, PsW2 = 8F40
   Adv. PsW3 = 0000, PsW4 = 0000
Out: HardwareID = 3B953D4D, status = ERR_SUCCESS

In:RY_OPEN
   Bas. PsW1 = 4CEF, PsW2 = 8F40
   Adv. PsW3 = 0000, PsW4 = 0000
   HardwareID= 3B953D4D
Out: Handle = 0000, Dongle Type = ROCKEY4 USB, status = ERR_SUCCESS

In:RY_READ
   Handle = 0000
   UDZ Offset = 00, length = 0A
Out: status = ERR_SUCCESS
   Data = 01 00 03 01 00 05 00 00 09 00

In:RY_CLOSE
   Handle = 0000
Out: status = ERR_SUCCESS
2013-4-21 20:09
0
雪    币: 414
活跃值: (531)
能力值: ( LV9,RANK:170 )
在线值:
发帖
回帖
粉丝
4
这几处都是算法的调用,如果你只是玩玩,那你就看一下手册,看一下算法的定义方法,试着猜一下算法。
如果算法出来,那基本这个狗就可以搞定了。
你的狗应该是一个增强版的狗或是网络版的狗

算法有80条

In:RY_CALCULATE1 (Based on user value)
   Handle = 0000
   Algo Start = 0, Parameter = 00000000
   A = A638, B = 0074, C = BC48, D = 0358
Out: A = 190C, B = A6D8, C = A688, D = A680, status = ERR_SUCCESS

In:RY_CALCULATE1 (Based on user value)
   Handle = 0000
   Algo Start = 0, Parameter = 00000000
   A = 6BDA, B = 0031, C = BC6D, D = 15C1
Out: A = BE25, B = 6C3A, C = 6C0A, D = 402A, status = ERR_SUCCESS

In:RY_CALCULATE1 (Based on user value)
   Handle = 0000
   Algo Start = 0, Parameter = 00000000
   A = 6BFE, B = 0010, C = BC67, D = 8078
Out: A = 50D1, B = 6C1E, C = 6C0E, D = 2C1E, status = ERR_SUCCESS
2013-4-21 20:47
0
雪    币: 230
活跃值: (11)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
5
In:RY_CALCULATE1 (Based on user value)
   Handle = 0000
   Algo Start = 0, Parameter = 00000000
   A = 6BFE, B = 0010, C = BC67, D = 8078
Out: A = 50D1, B = 6C1E, C = 6C0E, D = 2C1E, status = ERR_SUCCESS

A = 6BFE, B = 0010, C = BC67, D = 8078
A=27646        B=16       C=48231         D=32888

A = 50D1, B = 6C1E, C = 6C0E, D = 2C1E
A=20689        B=27678         C=27662          D=11294

A=
B=A+B*2
C=A+B
D=
其它的看不出什么联系?
2013-5-1 15:55
0
游客
登录 | 注册 方可回帖
返回
//