[C++]Protect DLL based HWID

Dalam tutorial kali ini saya akan memberitahu bagaimana menggunakan proteksi berdasarkan HWID.
Jalankan file "Get Hardware Identifier.exe" lalu akan muncul angka HWID komputer anda.

Dan ini kode untuk memanfaatkan HWID untuk memproteksi DLL



[sourcecode language="cpp"]
// coded by drache
// modified by rcd
#include <windows.h>
//include header dari protector
//#include "ThemidaSDK.h"

UCHAR
szFileSys[255],
szVolNameBuff[255];

DWORD
dwMFL,
dwSysFlags,
dwSerial;

#define My_HWID (1289182852)

VOID CheckValidHardwareID()
{
/* WEAK POINT */
/*
LAKUKAN PERLINDUNGAN TERHADAP FUNGSI CheckValidHardwareID()
karena jika CheckValidHardwareID() di patch dengan RET maka CheckValidHardwareID()
tidak akan dipanggil dan dll berjalan tanpa pengecekan HWID !
kamu bisa gunakan CodeVirtualizer, Themida Code Replace, atau Enigma Protector untuk melindungi fungsi CheckValidHardwareID()
*/
//CODEREPLACE_START // CODE REPLACE EXAMPLE
//VIRTUALIZER_START // VIRTUALIZER EXAMPLE
//#include "vm_begin.inc" // ENIGMA PROTECTOR EXAMPLE
GetVolumeInformation("C:\\",(LPTSTR)szVolNameBuff,255,&dwSerial, &dwMFL,&dwSysFlags,(LPTSTR)szFileSys,255);
if (dwSerial == My_HWID) // Lakukan perbandingan dengan hwid yang baru diambil dengan My_HWID
{
MessageBox(0,"VALID HARDWARE ID","INFORMATION",MB_OK | MB_ICONINFORMATION);
// Serial valid
}
else // Jika serial tersebut tidak cocok
{
MessageBox(0,"VALID HARDWARE ID","INFORMATION",MB_OK | MB_ICONERROR);
ExitProcess(1); // Force Exit
// Invalid Serial
}
//CODEREPLACE_END // CODE REPLACE EXAMPLE
//VIRTUALIZER_END // VIRTUALIZER EXAMPLE
//#include "vm_end.inc" // ENIGMA PROTECTOR EXAMPLE
}
BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
if (dwReason == DLL_PROCESS_ATTACH)
{
DisableThreadLibraryCalls(hDll);
//CODEREPLACE_START // CODE REPLACE EXAMPLE
//VIRTUALIZER_START // VIRTUALIZER EXAMPLE
//#include "vm_begin.inc" // ENIGMA PROTECTOR EXAMPLE
/* WEAK POINT */
/*
LAKUKAN PERLINDUNGAN TERHADAP PEMANGGILAN FUNGSI CheckValidHardwareID()
karena jika CheckValidHardwareID() di patch dengan RET maka CheckValidHardwareID()
tidak akan dipanggil dan dll berjalan tanpa pengecekan HWID !
kamu bisa gunakan CodeVirtualizer, Themida Code Replace untuk melindungi fungsi CheckValidHardwareID()
*/
CheckValidHardwareID();
//CODEREPLACE_END // CODE REPLACE EXAMPLE
//VIRTUALIZER_END // VIRTUALIZER EXAMPLE
//#include "vm_end.inc" // ENIGMA PROTECTOR EXAMPLE
}
return TRUE;
}
[/sourcecode]

Perlu diperhatikan bahwa function CheckValidHardware() harus anda proteksi dengan aplikasi protector (Themida, Virtualizer, dll..) agar tidak mudah dibypass

VirusTotal

HardwareIDProject.zip

Get Hardware Identifier.zip

Visual Basic 6 Enterprise + SN Highly Compressed [80 MB]

Yang sedang mencari Visual Basic 6, bisa ditemukan disini. VB6 sudah saya kompres dengan 7zip dan membuat size lebih kecil 60%
dari 200MB > 80 MB



DOWNLOAD NOW

Code Virtualizer v1.3.8 + LICENSE KEY

Code virtualization consists of the transformation of binary code from a specific machine into a different binary code that is understood by another machine. That is, the instruction set from a specific machine is converted into a new instruction set which is understood by a different machine. The following picture represents the transformation from a block of Intel x86 instructions into a new instruction set for another machine (specifically a RISC 32-bit CPU):





Figure 3: Transformation from x86 to RISC 32-bit CPU

Code Virtualizer can generate multiple types of virtual machines with a different instruction set for each one. This means that a specific block of Intel x86 instructions can be converted into different instruction set for each machine, preventing an attacker from recognizing any generated virtual opcode after the transformation from x86 instructions. The following picture represents how a block of Intel x86 instructions is converted into different kinds of virtual opcodes, which could be emulated by different virtual machines.





Figure 4: Transformation from x86 to multiple Imaginary CPUs

When an attacker tries to decompile a block of code that was protected by Code Virtualizer, he will not find the original x86 instructions. Instead, he will find a completely new instruction set which is not recognized by him or any other special decompiler. This will force the attacker to go through the extremely hard work of identifying how each opcode is executed and how the specific virtual machine works for each protected application. Code Virtualizer totally obfuscates the execution of the virtual opcodes and the study of each unique virtual machine in order to prevent someone from studying how the virtual opcodes are executed.


Code Virtualizer can be embedded inside your Win32 and Win64 applications and device drivers with ease. You just need to select which areas in your source code are going to be protected by Code Virtualizer. The following example shows how you can protect a block of code in a C application.

#include <stdio.h> #include "VirtualizerSDK.h" void main() { VIRTUALIZER_START // the area to protect starts here printf("Hello World"); VIRTUALIZER_END // end of area to protect }

The VIRTUALIZER_START/VIRTUALIZER_END macros are dummy macros which do not interfere with the execution of the original application. It's only in protection-time when Code Virtualizer will recognize those areas of code and will covert them into unique virtual opcodes, which are then emulated by a virtual machine when the protected application is running.

The following picture represents the image of an original compiled application (before being protected) and how it's transformed when it's protected by Code Virtualizer:



Figure 5: Original Application versus Protected Application

As the image shows, Code Virtualizer needs to embed the generated virtual machine at the end of the protected application in order to emulate the virtual opcodes when they are going to be executed. The size of the virtual machine can vary from 10 Kb to 30 Kb (depending on the complexity level selected), making no impact in the final size of the protected application.


Code Virtualizer is a powerful technology that can prevent someone from inspecting your sensitive code, such as your routines that validate an entered serial key for registering your application. Also, Code Virtualizer slightly modifies the PE header of the protected application, meaning you could put a compressor or other software protector on top of Code Virtualizer with no problems.

If you are a device driver developer and felt neglected when there was no solution to protect your device drivers, Code Virtualizer offers you the same technology to do so (for either 32-bit and 64-bit drivers) in the same way as your applications and DLLs.

Try Code Virtualizer today and start inserting the latest software protection into your Win32/Win64 applications and device drivers!

DOWNLOAD CODE VIRTUALIZER + LICENSE !!

Themida 2.1.1.0 + XBundler + LICENSE KEY

When an application is being created, the Compiler will compile the application source code into several object files made of machine language code. Then the object files are linked together to create the final executable.





Figure 1: Compilation of your source code

In the same manner that the source code of an application is converted into machine code at compilation time, there are tools that can convert a compiled application into assembly language or a higher programming language. These tools are known as dissemblers and de-compilers.







Figure 2: Decompilation of your application

An attacker can use a dissembler or de-compiler to study how a specific application works and what a specific routine does. When the attacker has a good knowledge of the target application, he can modify the compiled application to alter his behavior. For example, the attacker could bypass the routine that checks for the trial period in an application and make it run forever or even worse, cause the application to behave as if it was registered.


Software protectors where created to keep an attacker from directly inspecting or modifying a compiled application. A software protector is like a shield that keeps an application encrypted and protected against possible attacks. When a protected application is going to be run by the operating system, the software protector will first take control of the CPU and check for possible cracking tools (dissemblers or de-compilers) that may be running on the system. If everything is safe the software protector will proceed to decrypting the protected application and giving it the control of the CPU to be executed as normal.



The advantages of using a Software Protector are:

• Protect an application against piracy.


• Prevents attackers from studying how an application is implemented.


• Will not allow attackers to modify an application to change its behavior .

Since software protectors were born, many attackers have centered most of their efforts on attacking the software protectors themselves instead of the applications. Many tools have been developed that aid in the attacking of software protectors. These attacks often result in the attacker obtaining the original application that is decrypted and has the protection wrapper removed.



Figure 3: Common software protectors philosophy

The main problem with software protectors is that they use protection techniques very well known by crackers, so they can be easily bypassed with traditional cracking tools.

Another important problem in software protectors is that they have restricted execution by the operating system, that is, they run with normal application privileges. Because of this attackers can use cracking tools that run at the same priority level as the operating system allowing them to fully supervise what a software protector is doing at a certain time and attack it in specific places.


With Themida® , we have centered in the main weakness that software protectors have thus providing a complete solution to overcome those problems. Themida® uses the SecureEngine® protection technology that, when running in the highest priority level, implements never seen before protection techniques to protect applications against advanced software cracking.



Figure 4: Themida® protection procedure

Click here to see all Themida® features.

SecureEngine® defeats all current cracking tools that can be used against protected applications and it will make sure that your protected applications are only run in safe environments.



Figure 5: SecureEngine® technology adds more strength to the existing protection

Click here to learn more about SecureEngine®



Software protection programming is not a very well known field for most programmers. Software protection techniques are not like "visible" features that can be seen and compared. Because of this most software protection authors could talk about impressive techniques that are included deep inside the protection scheme, when many times most of these techniques hardly exist or they are much simpler than what they seem.

Most software protectors reiterate a lot about using very strong cryptographic algorithms like RSA, Elliptic curves and AES hoping that the final user will believe that those protectors and the cryptic algorithms are unbreakable. This if far from the truth as software protection is very different from data protection. Even if a software protector encrypts the protected application with the most robust cryptographic algorithm, sooner or later the protected application needs to be decrypted in order to be run by the CPU. It is in this phase when most attackers will start their work by dumping the decrypted application from memory to disk thus not having to deal with the cryptographic algorithm and reconstructing of the original application.


In Themida® we want to be realistic about which weakness can be exploiting by attackers and what we really need to pay attention to protect an application with the highest security possible against software cracking.



DOWNLOAD THEMIDA + LICENSE KEY !!

VMProtect.Ultimate.2.06.Retail+Key

What is VMProtect?

VMProtect protects code by executing it on a virtual machine with non-standard architecture that makes it extremely difficult to analyze and crack the software. Besides that, VMProtect generates and verifies serial numbers, limits free upgrades and much more.

Five Reasons To Use VMProtect

Most of our competitors do not have the same innovative features and none has the same leading combination of features and cost efficiency. See why VMProtect is better:

VMProtect Virtualizes Code

Code virtualization is the next step in software protection. Most protection systems encrypt the code and then decrypt it at the application’s startup. VMProtect doesn’t decrypt the code at all! Instead, the encrypted code runs on a virtual CPU that is markedly different from generic x86 and x64 CPUs as the command set is different for each protected file.

VMProtect Supports Nearly All Executable Formats

VMProtect allows the protection of executable files (EXE, SCR), dynamic-link libraries (DLL, OCX, BPL) and drivers (SYS). You can use the same protection for your application, its plugins and even drivers!

VMProtect Supports 64-bit Code

Due to the growing number of 64-bit systems, it is essential that the protector supports them. We added the support of 64-bit applications, libraries and drivers in 2007, so everything is tested well and you can easily migrate to 64 bits.

VMProtect Supports Most Versions Of Windows

Unlike some competitors, VMProtect doesn’t rely on undocumented Windows features, so protected files work well on almost any version of Windows OS, starting from Windows 95. Both 32 and 64-bit versions are supported and there are no problems with DEP or UAC.

VMProtect Is A Complete Protection Solution

VMProtect allows the generation and verification of serial numbers. Both manual and automatic generation are supported. Serial numbers can be limited by time or date and locked to the hardware, while the free upgrade period can also be limited. VMProtect ensures it is physically impossible to run code without a serial number.

DOWNLOAD VMPROTECT + LICENSE KEY !

The Enigma Protector 2.33 + Serial

What is The Enigma Protector?

The Enigma Protector is powerful tool that was designed for complex protection of program modules. Program modules include following types of objects:

• Windows 32 and 64 bits Portable Executable files (*.exe);


• Windows Screen saver files (*.scr);


• Dynamic Link Libraries (*.dll);


• ActiveX control files (*.ocx);


• .NET executables (*.exe).

When we say "protection" we mean realization of two major ideas. First one is integration of "try before you buy" conception support system into the program module. Second one is protection of machine code of program module from analysis and cracking. As can be seen, the protection is realized in different, but nevertheless greatly interrelated aspects, which are protection of developer economic interests and technical protection of the program product.

What can The Enigma Protector do?

The Enigma Protector has advanced scheme of registration keys generation:

• Comfortable interface for creating and verifying of registration keys. You do not need to search any safe decisions how to generate registration keys for customers. The Enigma Protector helps you to create keys with very safe algorithm like RSA up to 4096-bits key length!


• Special Enigma API. Enigma API is the set of special functions to make communication between protected program module and the Enigma loader. It gives access to full information about registration keys, current trial parameters and so on.


• Hardware locking of registration keys. This perfect feature helps you to generate registration keys for particular computer only! The registration key generated with the hardware lock function enabled will works only on one PC you have chose.


• Time limited registration keys. If you need to limit time of usage of registered version of module, just create time limited registration key!


• Registration dialog designer. Allows to customize registration dialog that is shown at the module startup!

The Enigma Protector includes few unique tools for managing of licenses:

• License Manager serves for storing of licenses generated for the registered users. Once you generate a registration key you can simply add this information into internal database. License Manager provides you to create/edit licenses and customers records.


• Mailer serves for automatically generate and send emails to the users that are stored in the database. For any software developer is the common thing to send notification emails to the registered users (for example, if the newest version of the software has been realized or new registration scheme has been implemented), Mailer provides you very simple way automatically generate and send emails.

The Enigma Protector has wide range of features to limit time of module usage:

• Executions, days, date, time limitations. The main conception of shareware is "try before you buy". The customer should see how the application works and what features it has. Let's show these features but do not forget to limit usage time to increase motivation to buy application.


• System clock control. This feature is used to control system clock reversing. It helps you to avoid not honest customers.

The Enigma Protector has a lot of features to make your software resistant to cracking:

• Anti-debugger tricks. Debuggers are the special tools that allow to reverse source machine codes of executed module. All reverse engineers use these tool to understand how your module works or how the protection of module works. Using of this feature helps to avoid simultaneous execution of protected module with debug tools.


• Control sum checking. Control sum is a special data which helps to understand is the data region modified or not. Every crack (e.g. removing of protection) needs to modify some of machine code region, The Enigma Protector is able to check is the sources modified and if it is then make alert. The Enigma Protector checks not only machine codes of protected module but the own sources too!


• Set startup password. Sometimes you need to limit count of users which are using protected module to particular group. Using of startup password feature is the most safe decision.


• External files checkup. Allows to check version and (or) attributes and (or) hash (checksum) and or date of external files.


• Processes checkup. Allows to set a list of dangerous tools that could not simultaneously work with protected module (this feature can help to do not execute protected module if sceencaptures tools, or any monitors or debuggers are running).


• Virtualization tools checkup. Allows to stop execution if the protected module is running under Virtual Machine like VMWare, Virtual PC or etc.


• Here are also checkups of Installed services and Windows version.


• Additional features. They checks up number of simultaneous executed copies of protected module, file name of module, disk type on which module is executed.


• Hard modifications of import table of executable. Nobody will know what import libraries uses your module.

The Enigma Protector has features to help programmer to add beautiful things into existing module without writing any additional sources strings:

• Splash screen. Adds splash screen to module startup. Choose your own picture to show it while module is starting.

====================================================

Daripada bingung search digoogle sampe bosen gak dapet dapet, ini aku dapet dari forum tertutup........

Download aja dimari gan............

DOWNLOAD NOW !!!

[PB] I3ExecOnTheFly 1.0

Product Name                  : I3ExecOnTheFly

Creator                       : RCD a.k.a richardiy

Compiler                      : LCC Win32

==================================
DUMPING TUTORIAL
1.



C&P I3ExecOnTheFly ke directory dimana PB berada,,,,dan jalankan
2.

Jalanin aja petunjuknya sampe sukses, .i3Exec ter-load
3.

Tinggal diDump, Enjoy

============================================

Kalau udah diDump, kamu bisa mencari offset dengan OllyDBG, scan AOB dari CE [Open Process : LOADLL.EXE], dan lain lain,,,,

SCAN AOB TUTORIAL
Load File hasil Dump pake OllyDBG, trus buka CE, Open Process [LOADDLL.EXE],,,,
Centang "Also Scan Read Only Memory",,,,,,trus pilih value type jadi "Array Of Bytes"

Contoh :

SYGNATURE : 55 74 00 00 E9 EB C4 00 00 C3
MASK : x x ? ? x x ? ? ? x

Maka di Cheat Engine, Sygnature menjadi

55 74 ?? ?? E9 EB ?? ?? ?? C3

Download


VirusTotal

PBQUICKWHXV8 - DEMO

Internetan Gratis Pakai 3 - Three

sumber = http://ujie-caprone.blogspot.com/2010/12/internetan-gratis-pakai-3-three.html


Kalau dengar kata Internet Gratis pasti rame ya... hehe sebenarnya gak gratis sih, berbayar juga cuma murah kok. Saya tidak dibayar sama operator 3 atau apalah untuk menguntungkan atau merugikan operator 3. Saya hanya berbagi apa yang saya ketahui. Ini khusus pengguna Internet dengan kartu 3 saja dulu saya posting. haduh..., pusing juga menyusun kata-kata ni karena senangnya....

Singkat cerita saya baru sebulan ini mencoba internet menggunakan kartu 3 dengan bayaran Rp. 25.000,-/Bulan/unlimited dengan batasan 500MB setelah lebih maka kecepatan akan berkurang. (sekarang udah naik jadi Rp. 29ribuan gitu)


Ok, langsung aja.
1. Sediakan Modem GSM/HP juga bisa dijadiin Modem
2. Kartu Perdana 3 / yang lama juga bisa.
3. Daftar paket internet 3 yg paling murah aja perbulan Rp. 29ribuan.
Untuk daftar silakan ketik *234# OK. pilih yang 500M.
4. Jika paket internetnya aktif, akan dikirim pesan untuk setting dial up internetnya
APN: 3data
dial : *99#
User : 3data
pass: 3data
coba lakukan koneksinya,jika sukses koneksinya trus disconnectkan lagi.
5. Nah setelah itu,setting dial upnya itu diganti menjadi:
apn : tre.it
Dial : *99#
user : [kosongkan]
pass : [kosongkan]
6. Coba lakukan dial up...
7. Selesai, kira-kira udah internetan sekita 10 menit coba kamu cek sisa kuota internet 3 nya dengan mengirimkan pesan "INFO(spasi)DATA" tanpa petik kirim ke 234
Semoga kuotanya tidak berkurang dan sukses melakukan percobaannya.

NB:
- Saya minta maaf karena bahasa penulisan saya yang kurang baik
- Maaf juga nih buat operator 3
- Ini saya coba langsung tanpa mengcopy artikel orang lain.

Belakangan ini banyak yang mengalami disconnect setelah menggunakan apn "tre.it", namun gak usah kuwatir. Setiap mau koneksi internet, pertama anda harus koneksikan dulu menggunakan apan "3data" setelah konek langsung aja di disconnect kan. Seteah itu langsung koneksikan menggunakan apn "tre.it"

[PB] PBQuickWallHaxV2

Released on 31/01/2011

TESTED WINDOWS 7 = 120 menit no BugTrap

Product Name                  : PBQuickWallHaxV2
Released                      : 31/01/2011
Creator                       : RCD
Greetz to                     : My friends
Archive Type                  : ZIP
Packer                        : o Injector = None
                                o DLL = PESpin
Included files                : o PBQuickWallHaxV2.exe
                                o _richardyusan.wordpress.com~.dll
Game Target                   : PointBlank
Anti-Cheat                    : AhnLab HackShield Pro
Type                          : D3D9 Hack
Feature                       : [*] WallHaxChams0r [Always ON]
Blog                          : http://www.richardyusan.wordpress.com

SS

DOWNLOAD : CLICK HERE

NB :
o Tidak akan ada update dalam waktu dekat.
o Tidak boleh meminta source code ( leecher bgt )
o Dilarang share ke Blog, Forum manapun kecuali [richardyusan.wordpress.com] dan [nyit-nyit.net]. Kalau ada yang melanggar maka update selanjutnya akan saya release dalam jangka waktu yang lama.

 

Blog yang melanggar aturan :

1.

maka dari itu update akan saya sediakan di VIP N3