理解你的心情
但不要重複發帖
OK.

FlexM 11以上你是说FlexM Net么？

替换pubkey的方法已经很成熟了，为啥还要修改pubkey_verify？

啥软件，能否提供一下看看

不好意思，发了两遍。

Target是一个common vendor daemon （ 包含了多套seeds的），就像Cadense之类的软件在发展过程中收购了很多的软件（就打包出了一个通用的DAEMON）
用tanker的更换key是不好用的（测试过了）。

请教一下     去除ecc的方法中     有一种是将10--->00 就ok了     请问这是基于什么原理修改的 ？   怎么确定这个关键位置呢？

10,16,1f 理解这个就知道怎样打补丁了

能给详细的讲一下吗？或者提供点参考资料也行    谢谢

hello bro.
I'm also looking for FLEXLM 11.12 PUBKEY_VERIFY for win x64.
Any ideas?

能否把11.12的守护进程发上来看看？

I guess you are asking for the vendor example?

Here is the file,it contains:

a vendor in exe format. It has ECC protection
second is a .dll file which has bothe ECC and RSA protection
They have Flexlm 11.12. They for the files for win x64

http://www.share.az/4n0ui9lm87fw/vendr.rar.html

(Just click on the blue download button on the left under facebook like botton)

Regards

Reply to nteamer:

I have had  a look at your vendor daemon named "SCHROD", it uses conventional 12 or 20 sign codes for licensing protection;it's not a case of ecc protection!

Thank you eric for your time.I've seen flexlm sign and also I've read it,  thats why I thought it had Ecc.
The other file in the link has also public key pattern. I gues it is rsa protection?

Would ypu pls help me in this?
PS Can you extract the seeds from the vendor?Do you know how to inject public key?

best regards

这个软件一开始发布加密就类似是这个样子:
FEATURE MMLIBS SCHROD 2013.1 31-dec-2015 uncounted HOSTID=ANY \

        vendor_info="jAt6CnIt ny7cHVEC EIfuTjR2 5nCEnk3C ciRb5K9Y \

        fkOSeWdC VprQM2Z2 PUOFGnaV gH9tqbTr zoNFVdJp p27CUJE+ qfvYTBnc \

        W9zZtuA7 cEk3SLrM ncoNmfAg sqi0bvMY rFsOmqEZ 5Kbrgwvw stSoB+3e \

        RFoOwqfT SdorDA6E g3pV7dPo c2Ed5+pe cprZqrgz GAsyebQm W1EqaAeY \

        P73drC/c G7WtpdIU 9xJnGTFh eOZ7hQzJ WWOzy30F VP30kjnp E2IdndGC \

        gDigIKDt 01jnmSEz jAogyHdB GadKEkkv 4hNH8BVK rxjrHqAE hwzP8yPV \

        UK1ZyigG 35L4/v0L k4KxNg==" ISSUER=Boot32 ISSUED=09-jun-2013 \

        START=09-jun-2013

SIGN="1E52 BB48 97F3 4453 5050 4566 2931 14EE 0C2B 4FBE EA9D 6BF1 CAE9 C018 ECFE 14BA FA0A 25BE BDB0        13C2 BE21 786F 281D B637 159D C3F2 2D36 18EA 09A4 EBB7"        
SIGN2="07D4 3273 FAE0 37C7 F419 F496 E19C E621 2349 34BD 7034 3C99 4B8A 3172 1052 03DF 399C BC17 181F 4097 0BEC C480 E9B0 05E2 A6A3 E95D 73CB D526 4198 AD0F"

其实windows的还好, linux下的版本我感觉难度极大,  2009版以前还可以搞搞现在就不行了, 可看看这个http://bbs.pediy.com/showthread.php?t=197097

本人很菜的, 也许有高人！

没看出有啥特别的啊，就是ECC+vendor_info自定义加密
PS. linux版本为啥比windows困难？

Helo lightgun,
Did you see/analyze my file?
Can you help me in this?
I guess if ECC protection can be overcome,we can manipulate the license file like expiration date etc right?
regards

高人，这个东东IDA反编译后你没发现大段大段的代码不清楚是什么意思，而且从一开头就怪怪的， 而之前早些版却不是这样，怀疑加了什么东东，不知是flexnet本身有这个功能还是另外加了什么壳之类。

光从license上看，这当然没有什么十分特别的，展示出来只是想说它有SING 和SING2, 而已。
有空高人可看看DAEMON本身有什么花样在里头，学习了。

在linux下其中还有部分模块，似乎有自校验，不能改原二进制代码。

linux下困难主要在于， 大多数人不在linux下破，所以很多工具没法用。 倒是有一些linux下的，用起来不是很爽。

再有win下Boot32替换PUBKEY生成了可用的license, 但那个PUBKEY很长，而从flexnet 11.9 SDK看， 不知如何用上这个长的PUBKEY进行lmcrypt.exe的编译？

Reply to wtscrystal:

依你post的linux daemon,做個測試如下,用傳統12字元sign code也會正確,重點在vendor_info的patch!

11:25:48 (SCHROD) FLEXnet Licensing version v11.10.0.0 build 95001 x64_lsb
11:25:48 (SCHROD) lmgrd version 11.12, SCHROD version 11.10

11:25:48 (SCHROD) Server started on linux01 for:        MMLIBS               
11:25:48 (SCHROD) EXTERNAL FILTERS are OFF

11:25:59 (SCHROD) This license server system can handle no more
11:25:59 (SCHROD) concurrent clients since it is out of file descriptors.
11:25:59 (SCHROD) We recommend splitting your licenses among more
11:25:59 (SCHROD) license server systems and using a license-file list
11:25:59 (SCHROD) so FLEXenabled applications can checkout from more servers.
11:25:59 (SCHROD) Although, more license server systems will improve response.
11:25:59 (SCHROD) Please see www.flexerasoftware.com or your vendor
11:25:59 (SCHROD) for more information.

请问你这个算是正确启动daemon了么？ 用什么命令达到的? 居然用12字元sign code也可以，是不是patch了 lm_ckout?
按理讲启动SCHROD要用lmgrd, 难道你也研究schrodinger?

Reply to wtscrystal:

並沒有patch,就做個license測試如下,你也可試試!

SERVER your_host_name ANY 27000
DAEMON SCHROD SCHROD
FEATURE MMLIBS SCHROD 11.1 12-nov-2016 10 258B5F61C894 \
        VENDOR_STRING="Test daemon only" START=09-jun-2013 \
        SIGN=3436ED1A21F0

10:27:23 (lmgrd)
10:27:23 (lmgrd)
10:27:23 (lmgrd) FLEXnet Licensing (v11.10.0.0 build 95001 x64_lsb) started on localhost.localdomain (linux) (1/27/2015)
10:27:23 (lmgrd) Copyright (c) 1988-2011 Flexera Software, Inc. All Rights Reserved.
10:27:23 (lmgrd) US Patents 5,390,297 and 5,671,412.
10:27:23 (lmgrd) World Wide Web:  http://www.flexerasoftware.com
10:27:23 (lmgrd) License file(s): /usr/local/flexlm/licenses/license.dat
10:27:23 (lmgrd) lmgrd tcp-port 27000
10:27:23 (lmgrd) Starting vendor daemons ...
10:27:23 (lmgrd) Started SCHROD (internet tcp_port 12184 pid 12633)
10:27:23 (SCHROD) FLEXnet Licensing version v11.10.0.0 build 95001 x64_lsb
10:27:24 (SCHROD) Server started on localhost.localdomain for:        MMLIBS               
10:27:24 (SCHROD) JAGUAR_MAIN        JAGUAR_PKA        JAGUAR_PARALLEL
10:27:24 (SCHROD) JAGUAR_QSITE        MMOD_MACROMODEL MMOD_MINTA       
10:27:24 (SCHROD) MMOD_XCLUSTER        MMOD_LIGPREP        MMOD_MBAE       
10:27:24 (SCHROD) MMOD_CONFGEN        MOPAC_MAIN        IMPACT_MAIN       
10:27:24 (SCHROD) IMPACT_GLIDE        IMPACT_GLIDE_DESOLV IMPACT_LIAISON       
10:27:24 (SCHROD) IMPACT_QSITE        IMPACT_PFF        IMPACT_COMBIGLIDE
10:27:24 (SCHROD) GLIDE_MAIN        GLIDE_XP_DESC        GLIDE_PRIMEX_LIGFIT
10:27:24 (SCHROD) GLIDE_SP_DOCKING GLIDE_XP_DOCKING GLIDE_DOCKING       
10:27:24 (SCHROD) GLIDE_COMBIGLIDE GLIDE_GPGPU        GLIDE_ELEMENTS       
10:27:24 (SCHROD) LIAISON_MAIN        QIKPROP_MAIN        QIKPROP_QIKFIT       
10:27:24 (SCHROD) QIKPROP_QIKSIM        PSP_SSP                PSP_STA               
10:27:24 (SCHROD) PSP_FR                PSP_BB                PSP_RB               
10:27:24 (SCHROD) PSP_PLOP        PSP_SKA                PSP_PLOP_MEMBRANE
10:27:24 (SCHROD) PSP_STA_GPCR        PSP_ADMET        PRIMEX_MAIN       
10:27:24 (SCHROD) PRIMEX_LIGPREP_EPIK MAESTRO_MAIN        MAESTRO_WINDOWS
10:27:24 (SCHROD) MAESTRO_FREE        MAESTRO_ELEMENTS FFLD_OPLS2007       
10:27:24 (SCHROD) FFLD_SERVER        FFLD_OPLS2007_PRINT FFLD_OPLS2008       
10:27:24 (SCHROD) FFLD_DEVELOPMENT FFLD_OPLS2008_PRINT PHASE_FEATURE       
10:27:24 (SCHROD) PHASE_PARTITION PHASE_SCORING        PHASE_DBCREATE       
10:27:24 (SCHROD) PHASE_DBSEARCH        PHASE_QSAR        PHASE_SELECTIVITY
10:27:24 (SCHROD) STRIKE_MAIN        EPIK_MAIN        EPIK_CYP       
10:27:24 (SCHROD) COMBIGLIDE_MAIN LIGPREP_MAIN        SITEMAP_MAIN       
10:27:24 (SCHROD) DESMOND_MAIN        DESMOND_WATERMAP DESMOND_GPGPU       
10:27:24 (SCHROD) WATERMAP_MAIN        WATERMAP_DEVELOPMENT MCPRO_MAIN       
10:27:24 (SCHROD) KNIME_MAIN        CANVAS_MAIN        CANVAS_FULL       
10:27:24 (SCHROD) CANVAS_SHARED        CANVAS_ELEMENTS GLIDE_CORE_HOPPING
10:27:24 (SCHROD) PHASE_CORE_HOPPING COMBIGLIDE_CORE_HOPPING PHASE_FQSAR       
10:27:24 (SCHROD) MAESTRO_ELEMENTS_BASIC MAESTRO_ELEMENTS_INTERMEDIATE MAESTRO_ELEMENTS_ADVANCED
10:27:24 (SCHROD) MAESTRO_ELEMENTS_CUSTOM PHASE_ELEMENTS        FFLD_OPLS2011       
10:27:24 (SCHROD) FFLD_OPLS2011_PRINT FFLD_OPLS        FFLD_OPLS_PRINT
10:27:24 (SCHROD) BIOLUMINATE_MAIN BIOLUMINATE_SHARED BIOLUMINATE_PROTEIN_DOCKING
10:27:24 (SCHROD) MATERIALSCIENCE_MAIN SOLUTIONS        PSP_GPGPU       
10:27:24 (SCHROD) ADME_PERM        ADME_P450        ADME_HERG       
10:27:24 (SCHROD) DESMOND_ACADEMIC
10:27:24 (SCHROD) EXTERNAL FILTERS are OFF
10:27:24 (lmgrd) SCHROD using TCP-port 12184

这个是启动了！

用：
SERVER localhost.localdomain ANY 27000
DAEMON SCHROD
FEATURE MMLIBS SCHROD 11.1 12-nov-2016 10 258B5F61C894 \
  VENDOR_STRING="Test daemon only" START=09-jun-2013 \
  SIGN=3436ED1A21F0

也确实能启动 SCHROD, 我将：3436ED1A21F0改一下就不行，说明这个SIGN是对的, 不过主程序并不能起来
FATAL -114: Could not check out a license for mmlibs version 2.2.
FATAL -114: Could not check out a license for mmlibs version 2.2.

但用有SIGN2的就能启动主程序, 看来SCHROD对SIGN 12位的也能跑. 请问你的seeds是不是从早期的SCHROD得来的,因为新近的几个版本似乎不太可能得到seeds.

This 2014U4, impact function can't be used, strongly suggest you use 2013U1.

看了一下，windows版本没啥难度，关键就是vendor_info的处理，这块应该不是在daemon中。
linux版本像是加了混淆或是壳，但如果主程序没进行过这样处理，其实也就是对vendor_info进行处理就行了

PS. 基于server的flexlm的检验是两端都会进行的（server和client），所以对于ECC加密而言，patch或者公钥替换是必须的

如果替换公钥了，还要对vendor——info进行处理吗？另外怎样进行处理，vendor——info的没有接触过