Log in

View Full Version : Flexlm 11.4 problem


Hero
October 12th, 2009, 00:27
Hi all
I'm working on a flexlm 11.4 daemon.
I have found enc_seed 1,2 (2 different way and same result,so i assume it is correct).
now I try to make a license file using genlic32.
I used my enc_seeds and VKs generated from nolan's tool as version 11 vendor keys,but I got "Invalid FLEXlm key data supplied FLEXlm error: -44,49".
I checked internet and I didn't find anything good that describes when this happens so I worked more on it.
I thought it is possible that nolan's tool cannot generate good vendor keys for this version, so I went to lc_init() of my application and used my own application VKs, TRLs and strength. but now that I try to use genlic32, I will get a funny error with this string: "No current Error"...

I don't know what is my problem.
Any Idea how I should solve it?

In lc_init() TRLs was assigned,so i think this application will use TRLs. In addition application uses LM_SIGN_V2 too(I mean flags that is described in crackz latest information for flexlm is 2). In addition,lc_init() shows that application uses 239 bit strength.

Regards

NoFlexlm
October 16th, 2009, 00:12
why not compile sdk then get your lmcrypt.exe to generate your license file?

Hero
October 16th, 2009, 00:14
Quote:
[Originally Posted by NoFlexlm;83358]why not compile sdk then get your lmcrypt.exe to generate your license file?


I have never tried to compile SDK before,for doing it should I have seeds or not?because I cannot collect seeds.

NoFlexlm
October 17th, 2009, 06:27
Yes, you should have seeds ahead. EFALicGen doesn't support ECC format.

Quote:
[Originally Posted by Hero;83359]I have never tried to compile SDK before,for doing it should I have seeds or not?because I cannot collect seeds.

Hero
October 17th, 2009, 22:31
Quote:
[Originally Posted by NoFlexlm;83378]Yes, you should have seeds ahead. EFALicGen doesn't support ECC format.


then I cannot do it,because I cannot find seeds in this version.
Any other idea?

NoFlexlm
October 18th, 2009, 09:18
Actually, you don't need to find any seeds for flexlm ecc patch. You need only patch _l_pubkey_verify to return 0, then you can give any same bits SIGN as you like.

Hero
October 18th, 2009, 13:22
Quote:
[Originally Posted by NoFlexlm;83386]Actually, you don't need to find any seeds for flexlm ecc patch. You need only patch _l_pubkey_verify to return 0, then you can give any same bits SIGN as you like.


this mean that I only need to patch _l_pubkey_verify(), then use certificates that is only shows a list of features with SIGN=0?

Hero
October 19th, 2009, 08:11
Quote:
[Originally Posted by Hero;83390]this mean that I only need to patch _l_pubkey_verify(), then use certificates that is only shows a list of features with SIGN=0?


I checkout,there is no use of _l_pubkey_verify() in my program,if I assume ida can find this function correctly and its name is not obfuscated(I saw this in sig file,so I think it is not obfuscated)

CrackZ
October 28th, 2009, 20:07
Hiya,

I'll shortly post some new research I've been carrying out into FLEXlm v11.x so won't add much to the thread for now.

Hero, I seem to recall you might have PM'd me target info. which I have misplaced, so let me have it again if thats the case and I'll help out.

Regards,

CrackZ.

Nelix
November 18th, 2009, 04:59
Hello!

I惴 an absolute beginner!
However, I have a target using Flexlm 11.6.1.0.
Can anybody help me to generate a working license? I just have an expired demo license...

Nelix

FoxB
November 18th, 2009, 05:49
@Nelix: try to show an expired demo license and upload the vendor daemon's file

kiki
November 18th, 2009, 23:40
CrackZ i'd like to read your new research regarding FLEXlm v11.x, does it cover some of CRO/TRL patch in v11.x?

whyIII
November 20th, 2009, 00:28
It's an exciting news. And I guess many of us are waiting for the great moment!

SiGiNT
November 26th, 2009, 03:31
Hero,

Check your PM.

SiGiNT

Hero
December 4th, 2009, 08:26
Opps hi all... :P
it seems there are a lot of posts while I was not around...
I should say that I successfully bypassed flexlm 11.4 only by patching _l_pubkey_verify.
Thanks for all answers...
regards