OP 09 February, 2020 - 05:11 PM
Hi guys,
since few days I'm trying to crack one software.
There is no way (with my RE skill) to do it by RE so I'm trying to set some "fake Auth responses".
How does it look?
token is a part of url (domian.com/login=xxx&password=xxx&&HWID=xxx&token=xxx)
example of token:
59189ffe19abe551f976a873875c1140
I'm getting response with some hash in a content.
examples of this hash:
fb812685182aee2c06a634fd1e4389d7
17e279dd684d57efef774a6d9a846ea9
it's 32-digit hash. I was sure it's md4/5 of token...but it's not. It should be something with actual data too becouse first request returns data in format: day.month.year hour:minute
any ideas what can I do to make it working? thanks for any tips
since few days I'm trying to crack one software.
There is no way (with my RE skill) to do it by RE so I'm trying to set some "fake Auth responses".
How does it look?
token is a part of url (domian.com/login=xxx&password=xxx&&HWID=xxx&token=xxx)
example of token:
59189ffe19abe551f976a873875c1140
I'm getting response with some hash in a content.
examples of this hash:
fb812685182aee2c06a634fd1e4389d7
17e279dd684d57efef774a6d9a846ea9
it's 32-digit hash. I was sure it's md4/5 of token...but it's not. It should be something with actual data too becouse first request returns data in format: day.month.year hour:minute
any ideas what can I do to make it working? thanks for any tips