View Full Version : Hasp4 Cloning
Scavenger
June 4th, 2006, 22:23
I am new to this forum and do not know much about Hasp Dongles or programming. I have 3 dongles for the same software company and would like to extract the information from one and put it in the other 2. I have searched google all day and can only find sites that lead to nothing, emulators or places to buy dongles.
Is what I want to do possible? If I can do this are there tools available to do this? Or do I have to learn a programming language or a combination of both? If at all possible could you point me in the right direction so I can learn what I need too.
I have searched google with “Clone Hasp4” and “copy Hasp4” Is there a site or anything specific I should search for?
Any input you have will be greatly appreciated.
Scav
After a discussion of Posting Guidelines, Scavenger has started this Thread over. In the original Thread CRACKZ had posted the following response, which I repeat here, for completness of information addressing that actual topic.
CRACKZ stated:
The simple answer is yes.
The only requirement is that the dongles you have truly are from the same manufacturer.
Best way to do this, you'll need to dig out the HASP passwords from your protected program, all the dongles internal memory can then be edited using Aladdins very own HaspEdit program from their webpage, if you are a little more savvy it wouldn't take much to use their own API to read all of the memory and then write it back to the other HASPs.
_________
Regards,
Scavenger
June 4th, 2006, 22:45
Thank you for your reply this means I was on the right track! I have used a program and found password 1 and password 2 both passwords contain 4 characters three numbers and one letter (example: 1A23, 123A). When I use Haspedit it will not let me place letters in the password only numbers. I have tried to copy and paste the passwords in the field and it does place all four **** in the box but it says I have the wrong password.
If the program I used to get the Passwords was an emulator would that give me the correct passwords or are they an emulated password?
I have done a search for “getting hasp password” and once again found nothing but crack sites and so forth. Also the help file with Haspedit says nothing about getting pass codes (which is understandable) and my emulator program (if that is the right thing to use) has no help file on the commands so I am just using trial and error.
If you can point me in the right direction on what to do about obtaining the passwords? or if the ones I have are correct and I am just using haspedit wrong?
Could I have damaged the dongle?
Any input would be great
Scav
Just a suggestion, as a "failsafe" test, if you haven't attempted it already. Try to extract the password(s) from one or both of the other dongels and see if they are in the same configuration. That might, at least, suggest whether there is something "different" with the results you have been getting.
As a second possibility: Is you HaspEdit program the proper one for your particular HASP version? I really don't know if they make more than one, but it would seem a reasonabile possibility and at least worth checking.
Regards,
Scavenger
June 4th, 2006, 23:21
JMI
Thanks for the info. I have tested all 3 dongles and the emulator program says all the passwords are the same but the Hasp ID is different on each. I am still unsure if the Emulator program is the way to go to get the correct passwords but that is what I am going with right now.
I did not check into a different version of hasp edit I just downloaded the latest from there site. I will go and check into that.
I just checked and found the same HASPedit off of a different site. When I open it and create a new session using connected key it asks for the password. Haspedit will not allow me to type any Letters in the password box. Is this normal?
Most of the discussions I've seen talk about using an emulator to recover the passwords of HASP dongels. There are several Threads on the Exetools Forum, where I also happen to be an Admin, which discuss these issues. I know a couple of the members appear to be "reversing" dongels "professionally" and I believe a couple sell emulators themselves.
There are many "emulators" available on the net and you might want to research "emulator + HASP" and/or "emulator + HASP4" (without the Quotes) and look for some information. I know there is something called Brain Studio, which has a site of its own, and may be "commercial" at the moment, but is a "commercial" product would allow you to recover the password and then use the HASPEdit to change the contents of the HASP, it might be "cheaper" in terms of time and money, to think about going that route, rather than thinking about how you might learn to "reverse" the code yourself.
Consider the time/value of money verses the learning curve.
I've never had a dongel nor software which used one or needed it, so I've had little interest in the subject, other than I collect tutorials and articles on the subject, as I do on most topics and read those I can find time to digest.
I'm sure there are many people here who have hands on experience, and CRACKZ is one of the best, if he wishes to help you further.
Regards,
Scavenger
June 5th, 2006, 01:40
JMI Thanks
I did not want to mention any software names but I do have the Brain studio Software. That is where I got my passwords from. I have tried using the passwords on 2 different computers with Haspedit and on both machine it will not let me put the letters in for the pass code. I think if I can get past this I might be able to figure it out. I did a serch for hasp passwords and found another site and a USB scanner program to get passwords. Every time I use that program to get the passwords my system shuts down and restarts. If you say that the Brain Studio software will give me the passwords I have to believe that they are correct that there is another problem possibly with Haspedit or the Dongle itself not letting me put the password in.
If anyone has any input on how to get this to work it would be greatly appreciated.
I will check the other forums
Scavenger
June 5th, 2006, 02:16
Well I have come to the conclusion that my passwords are correct. I have used another program and got the same passwords. I have also tried two Aladdin programs Haspedit and Diagnostix both programs will not let me enter a letter into the password, only numbers. I tried the other forum mentioned and found a program that might work. But with the other forum you have to me a member to download the programs and it will not allow you to register.
If anyone can shed some light on why I can’t put the passwords into Haspedit that would be great.
maestro
June 5th, 2006, 08:21
Try to not put in the hex values but the decimal values in haspedit.
That works a lot better :-)
Scavenger
June 5th, 2006, 10:28
Quote:
[Originally Posted by maestro]Try to not put in the hex values but the decimal values in haspedit.
That works a lot better :-) |
What does that mean? how do i get the decimal values?
Scavenger
June 5th, 2006, 10:41
Holly cow I found a way to make a converter from hex to decimal and it worked!
Now to figure out how to make a config file.
SiGiNT
June 5th, 2006, 11:25
Uh,
You have a built-in Hex to Dec converter in windows - the calculator in scientific mode - not flaming just letting you know it's there and I use it all the time, really handy if you have button on your keyboard to bring it up.
SiGiNT
Scavenger
June 5th, 2006, 11:50
Thanks for the calculator tip. That would have been faster than making a wepage and inserting the passwords that way. I did find the code so it was not to bad.
Can anyone explain what will be changed when I clone my keys? I have used Haspedit and went throught the help file. It says to read the information before making the utility to program the key you must read the contents of the Memory and FAS. I did this and made a program. When done I switched keys and ran the program I had previously made.
The keys still have different Id’s low word and high word etc. I do believe that this is what needs changed but cannot figure out how to change that. When I use the emulator program is shows me the secret code and all the boxes which I assume where the places on the dongle you can write to. The hasp edit program shows me nothing the memory is full of “FFFFF” and the FAS is empty. Is this correct or am I missing a step of something?
Am I going in the right direction or am I way off coarse?
CrackZ
June 5th, 2006, 15:51
Have you compared the memory contents for each dongle?, i.e. the one you are trying to clone and then the one you are trying to write too (via HaspEdit). Are there any differences?.
The HASP hardware will not easily allow you to change the Id, these are assigned per key by Aladdin at manufacturing time (in their manuals you'll even find in their FAQ that you can't request specific Id's), its very unlikely any software developer would therefore check the Hasp ID for functionality.
Regards
CrackZ.
Scavenger
June 5th, 2006, 17:43
CrackZ Thank you for your reply. This is what I have done. I have a Parallel Dongle that is the GOOD one and 2 USB dongles that I want to put the Parallel information in. The software recognizes all three differently. Since I do not want to screw up my parallel dongle I am at first trying to make a copy of one of the USB dongles so I have two identical USB’s. When I perfect this then I will try to clone the parallel one. (I do not want to screw it up in any way)
With that said I have looked at both USB Keys with Haspedit and the only difference I can see is in these fields:
Hexadecimal
Decimal (which is the HASP ID)
ID Low Word
ID High Word
The memory and FAS look the same on both keys nothing in the FAS and all F’s in the Memory.
Is it the Encode / Decode function? This asks me for keyboard input and or a file input. I am clueless to this part. It is probable what I need to learn next.
I am thinking I should be able to read the dongle and make some sort of file with the embedded information and then use that information to manually enter into the other dongles. Is this correct?
Also am I close to getting this or have I just started? Will I need to learn code etc?
Most projects I do I can search and find some sort of tutorial or walk through to guide me through. So you know of anywhere I could find one? I have searched and searched and found nothing.
Any help, incite or explanation you can give me would be greatly appreciated. I am starting to wonder if I am in over my head on this project.
Scav
Scavenger
June 6th, 2006, 10:12
After extensive searching and reading it seems that the only difference in all three dongles is the Hasp ID #. I did a footprint of all the dongles with Hasp Emulator and everything matched up but the Hasp ID. Using Hasp Edit everything I can see is the same on all three also except the Hasp ID.
When the program is started it searches for the dongle and then produces a code which is then given to the software company via phone and they give you the unlock key for the software. When the software starts I get a different code with each key. Now if everything looks the same with hasp edit and hasp emulator other then the ID is the software using the hasp ID to generate the code?
In the Hasp programmers guide that I read there was a part in it that stated something like that under protection strategies (Tips and Tricks) here is a quote
“For example, you can use the unique HASP ID number as a key for encoding the HASP memory.”
Now after reading that again would the Id of each hasp have to be written into the program itself? Which means that that each user needs different code in the program. Well know this is not the case because I can use my dongle and provided code on any computer with the software installed.
Can someone point me in the right direction?
I give props to anyone who can do this stuff I can usually do anything I set my mind to and this one is giving me a headache!!!
Scav
CrackZ
June 6th, 2006, 16:51
My only additional thought to this is that perhaps the program distinguishes between parallel and USB keys with service 5 (HaspStatus()) and reacts accordingly, do both the parallel and USB dongles have the same amount of memory on board? (check the range in HaspEdit).
The other answer is to send me some files and I'll have a look, its very unlikely all dongle memory would be 0xFFFF in all the keys and the Hasp ID somehow used to do some sort of decryption.
Regards
CrackZ.
Scavenger
June 6th, 2006, 20:00
CrackZ Now you got me thinking. “What files would he be talking about?” The only files I could think of where the Application itself, the .HED file I can make in Hexedit and a .Reg file that I can make with Hasp Emulator.
I would like to do this myself if it is possible. I already have over 36 hours playing with the darn thing. This is my latest finding it would be great if you could shed some light on what I am looking for or what I need to accomplish first etc.
I have found that the .Reg files for each USB Dongle are different along with the Parallel Being different also. When I use the hasp emulator I see no difference in the program it’s self but the regfile show these fields are different.
The .reg files when opened with notepad show
"SN"=dword: (different on all 3)
"NetMemory"=hex: (different on all 3)
"Option"= (different on all 3)
All other data is identical in the .reg files.
Now with the Hasp Edit the .HED when opened with notepad does not show me all the information the reg file does. It shows me this
[Haspedit]
version=9.00
[BatchParameters]
Pass1=*****
Pass2=*****
KeyType=HASP4 M1
;;
;; MemoHASP Memory in hexadecimal format
;;
[MemoHASPMemory]
Image= 0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF \
0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF \
0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF \
0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF \
0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF \
0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF \
0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF 0xFFFF
Can I place the additional information from the .reg file like “SN”, “NetMemory”, Option” into the. hed file and reprogram the dongle? Will that work? Am I getting somewhere now? Or am I way off?
I really do appreciate your time
Scav
CrackZ
June 7th, 2006, 01:59
Hiya Scavenger,
I was thinking either the protected files or the 3 registry dumps that you have for each of the dongles.
The NetMemory entry is unlikely to be the culprit since the parallel dongle is a local MemoHASP4-M1 (have plenty of those here in fact ;-) ), don't know what the USB ones are since you didn't say (but likely local as well).
The SN entry is also unlikely to be the culprit since software developers can't easily request from Aladdin ID's that they can use to distinguish between individual or groups of dongles. See my caveat though.....
The Option entry in that particular emulator IS likely to be the culprit, it controls some non-important things like HASP API version and certain options for the emulator, several of the entries however are used for HASP's API HaspStatus() which is the most logical way any developer could distinguish between a parallel and USB dongle. There is some fairly remote possibility that they could also distinguish by ID if the parallel and USB ID's were in ranges (really don't think thats likely though).
If it is what I'm eluding too, no amount of reprogramming is going to help you, since HaspEdit only allows editing of the memory and not much else. Hence my request that either yourself or someone needs to look at the application to see what HASP services are being called and if my theory is correct.
Regards
CrackZ.
Scavenger
June 9th, 2006, 12:17
CrackZ I sent you a PM with the information the other day did you receive it or have a chance to look at it?
Scav
Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.