HASP SRM dump

[husmanafper3]

Hi expert


I have dump file for SRM doungle how can i convert it to emulator plz?

Thanks in advance

[crackslab]

dump file not enough for Hasp SRM Solution, need usbtrace log also

[husmanafper3]

i have usb trace i have dump can any one help ?????
BR

[TEMS]

Dear brother,
please kindly help how to make emulator SRM from dump and usb trace to emulator SRM

Thanks for kindly support

[saullow]

agree with TEMS, please help us....

[Git]

OK, better stop there. This is NOT a warez board. We are here to promote learning of reverse engineering, not the swapping of commercial software.

Git

[Larry]

HASP SRM USB Protocol are crypting by AES. You need make UsbTrace decode tool to decrypt the log.

Dongle use a few AES keys. At least:

* One - for communicate with aksusb.sys driver (functions 2F/AF: check the dongle by white-box AES crypto; you can skip to solve this key now, just install old Sentinel HASP driver < 6.56);

* One - for communicate with HASP License Manager (difference versions of HASP License Manager used defferent AES Keys; now it's a 3 different keys);

* One - for communicate with the protected software (read memory, write memory, hasp_encrypt() / hasp_decrypt() operations, etc).

To decrypt UsbTrace log you need reverse HASP License Manager and modify public HASP Emulator source by Chingachguk & Denger2K.

You can use this drivers' version to reverse the USB Protocol crypting:
http://rapidshare.com/files/458985502/HASPUserSetup.zip

It isn't good packed and crypted. You need research the file Windows\system32\hasplms.exe.

You need to use Rjindael AES C++ source code as base for decrypt/encrypt USB Packets. You can find it in Google.

If you done the reverse of decrypt/encrypt packets between HASP SRM and HASP License Manager after dongle's plug, you will need to get the next AES key from the protected software to decrypt UsbTrace Log between HASP SRM - HASP License Manager - The Protected Software. Just open the protected software in IDA Pro or OllyDbg, find the place where api calls to the dongle are forming and crypting by AES, put the breakpoint on the AES setup key function and get the AES key. After it decode respective packets.

Other case if your software used new white-box AES. It's more difficult to recover the AES-key for decode packets between HASP SRM - HASP License Manager - The Protected Software.

[Prenumele Numele]

decoder for usbtrace log txt of hasp hl srm
parser / processor


I have an old decoder for hasp4/hl usbtrace
I also have srm emulator source code
I need help making log txt decoder / parser
that will use AES vendor code
also have decoder.exe to compare and guide to good results.

best regards,
Nick

[skr706]

Hi There,

I got a encrypted package named as hasp 4 hl srm*emulator*6.51*srmkit250.rar. from http://dc489.4shared.com/download/Ek2jVUQ0/hasp_4_hl_srmemulator651srmkit.rar?tsid=20140619-092112-4ad82c36&lgfp=2000
or from http://dc489.4shared.com/download/Ek2jVUQ0?tsid=20140617-102917-abd205c4&dsid=7bcouj.f2f1bc85e52299500a2d0e141bb19949&sbsr=484ba9266ac668e5cc2b5629247c6b192816ddd00c3f8 34f&forDownloadHelper=true&lgfp=8000&dsid=7bcouj.f2f1bc85e52299500a2d0e141bb19949

Can anyone try to get the password for the file.

Best Regards
Sunil

[BfoX]

over 20 symbol for rar archive :D

[Prenumele Numele]

I got password into a txt files with passwords
indeed is a long password

who wants I could test my tools and this emu for hasp hl srm donglesed softs

[BfoX]

Show your stuff

[skr706]

Could you please send/ share the password for the "hasp 4 hl srm*emulator*6.51*srmkit250.rar"
skr706@gmail.com
@Sunil

[user1]

fake shit.

[Prenumele Numele]

here is srmkit tyrus 2 6.63
cause password fits as that for 6.51

http://directmirror.com/v8ea0ksi9464/hasphlsrm6.63.rar
http://directmirror.com/dhv5fszrtr76/hasphlsrm6.63.rar

or
with 7-zip
http://www19.zippyshare.com/v/CYbMN7vG/file.html
http://www19.zippyshare.com/v/eWYYvvNi/file.html
http://www19.zippyshare.com/v/vgFDjkyE/file.html
http://www19.zippyshare.com/v/Cemnc9yQ/file.html
http://www19.zippyshare.com/v/sDwagrrT/file.html
http://www19.zippyshare.com/v/AY5NXIfo/file.html
http://www19.zippyshare.com/v/I4Qb91a7/file.html
http://www19.zippyshare.com/v/5lWmmUHP/file.html

I recomand
https://1fichier.com/?u22sek2q18

[Prenumele Numele]

Show your stuff

http://www11.zippyshare.com/v/bjetAx0n/file.html
http://www11.zippyshare.com/v/IEGChkbA/file.html

who wish these:
http://www11.zippyshare.com/v/gIoA0mlD/file.html ?

[Git]

Thanks for upoloading these folks, but i can't find a single link that doesn't want to install toolbars, download managers, ILivid.exe, or a 7 hour download, etc, etc. Could somebody please upload to mega.nz ? For those who don't know it is the fastest, most secure download site out there. TIA

Also, I don't understand "cause password fits as that for 6.51", can you share the password please?

Git

[BfoX]

@Git: it is fake - market step if you want to buy this kit...

https://mega.co.nz/#!bU4F0TDb!fW7DVLjgbthPZJmWKuNi0-uljUcgK7jC2SyMTG5kML4

i test tyrus password from 6.51 - not jet

[Prenumele Numele]

6.51 I mean pass of that:

http://www.4shared.com/rar/Ek2jVUQ0/hasp_4_hl_srmemulator651srmkit.html

[Git]

Why not just TELL US WHAT IS THE PASSWORD please?.

And even though I am registered with 4shared all I see is when I try to download 6.51 is crazy ILivid crap and adverts and diversions and everything EXCEPT the file you want. Why do people use these sites?

Git

[BfoX]

6.51 also password protected and my passwd wrong for it

[Prenumele Numele]

6.51 also password protected and my passwd wrong for it

that/also my password begins with !@@

[BfoX]

you need show ends also =)
i'm will compare

[Prenumele Numele]

... ####yyt^
all with capital letters

[BfoX]

... ####yyt^
all with capital letters

my pwd is 90 symbol length and not have your

[don_007]

can you share password here

[Prenumele Numele]

hasp srm 1.5 not works well on windows vista, 7 and 8.(1)
I could give password/ or srm kit v2 6.65 free of money for that can prove that he/she deserves it. It contains updated dumper and decoders/solvers.

[BfoX]

you start casting of the deserve?

[Prenumele Numele]

http://www62.zippyshare.com/v/Cllp8xFV/file.html
http://www62.zippyshare.com/v/rsIgXou9/file.html

[Prenumele Numele]

my dumper http://www57.zippyshare.com/v/oQqlaA1h/file.html
I can decode in spare time your dumps made by this personalised to me.
also if you have usbtrace logs only or with aes key I can decode them.

How to use UsbTrace
http://www.mediafire.com/download/8rcw0w21biatuea/how_to_make_usbtrace_for_dongle.wmv or
http://lostdongle.com/?page_id=104

[Git]

prove that he/she deserves it

How on earth can anybody *prove* that they deserve it?. I am disabled and living on state welfare, but if you think I am going to send a photo of me in my wheelchair and a copy of my bank statement you can think again!.

Git

[Prenumele Numele]

http://files.brstudio.com/SentinelHASP_6.50_GUI.rar

util for old emu posted last days

[BfoX]

can prove that he/she deserves it



tell us criteria of selection of the deserve

[Prenumele Numele]

first probe to start server http://www25.zippyshare.com/v/WyRijzEs/file.html in ollydbg or inline patching or other way. no need to fix vmprotect

in memory is enough

[BfoX]

inside mks.sys vmprotected. x86 and x64

[Prenumele Numele]

maybe a pc clone would help

how to force hardware ids for virtual machine ?

maybe an injection of these sys files in server exe or in clients will do/

I tried to install as device x86 sys but failed.

[Git]

hmmm ?

Git

[Prenumele Numele]

I think HDD drive serial and BIOS serial would be enough if I could customise a vmware machine with windows xp.

[BfoX]

Bios date, windows install time, cpuid feature

[Prenumele Numele]

maybe, there are simple or complicate with many parameters protections.

try to see what values are checked http://www48.zippyshare.com/v/Uo1vkp4S/file.html

[BfoX]

my answer is based on the hasp srm source v6.60 protection

[BfoX]

inside exe mksId.sys, x32 and x64
all total vmprotected

[Prenumele Numele]

concentrate on exe only, ignore sys
make it to start server

[BfoX]

Concentrate for?! Password is mirage;)

[Prenumele Numele]

inside mks.sys vmprotected. x86 and x64

seems driver expert @JEbolic succeded it.
if he not shares, I will not share clients and sys file too to him.

[user1]

Because no one reversed it, just empty talk and fake claims.

[Git]

Empty talk on reversing VMProtect?. I fully agree. There has been partial unpacking, but it is not full reversing, and I have yet to see a 'reversed' vmp target that functions fully.

Git

[BfoX]

Why not just TELL US WHAT IS THE PASSWORD?

This man is sell the tyrus and rceguru package. From 200 and 600 euro for each...

[Prenumele Numele]

no mandatory

for example http://www42.zippyshare.com/v/K8MpAyPp/file.html

[Git]

What are you trying to prove?

Git

[Prenumele Numele]

making mk working will be good for more people

[BfoX]

making mk working will be good for more people

remake hasp srm with/witout wbaes for x32/x64 without licensing =)

[Prenumele Numele]

password comes with 0allpart01..13 dictionary of passwords

http://www.4shared.com/office/fqQqWxKPba/0all_about__dictionary_with_mo.html

[zeuscane]

I think this is a Board for Reverse Engineering and not a shop to sell solutions for protected software.
Within the file it says:
"That database of most wanted password costs 1000 dollars
using www.paypal.com to dictionary4diaspora@yahoo.com email address
there are no duplicates in it.
.................................................. .....................
password of hasp hl srm tyrus 2 srm emulator kit is included in price"

For me this is unacceptable.

regards
zeuscane

[darsy]

I think this is a Board for Reverse Engineering and not a shop to sell solutions for protected software.
Within the file it says:
"That database of most wanted password costs 1000 dollars
using www.paypal.com to dictionary4diaspora@yahoo.com email address
there are no duplicates in it.
.................................................. .....................
password of hasp hl srm tyrus 2 srm emulator kit is included in price"

For me this is unacceptable.

regards
zeuscane

yes, you are right zeuscane!

[user1]

If u don't like don't buy. Nobody force you to buy it.
Just keep at this forum subject about RE.

[zeuscane]

Certainly I don't buy anything,
What I wanted to say is that you can't use the forum to sell solutions.
Then I ask Git to use his authority to stop these practices.

zeuscane

[user1]

Say something new. This was from beginning and will never end.
Positive part is that some of this sellers are good people that like RE and help me in development of tools....

[Git]

Prenumele Numele - you KNOW the rules of this forum. They very clearly state no selling. Even the slightest hint of this type of activity in the future and you will be banned.

Others please take note of this. This forum is about reverse engineering and buying and selling of solutions is hated and not wanted or allowed here.

Git