How to write a Keygen Part1/2

[PyroPlasticPenguin]

So the 'mystery string' is a regex?

[kubuntuboy]

@PyroPlasticPenguin Has nothing todo with regular expressions at all.

[Ne0Que]

@PyroPlasticPenguin Probably, the mistery string is the string that is used to generate..? Maybe equal to password salt ;P

[kubuntuboy]

@Ne0Que Bingo! ;)

[ddvedo]

What if the program you try to crack gives no error message, but is still wrong?

[HowToVideos250]

OK you know how to write keygens but you cant make your video HD fail....

[lateefishere]

Who is this music by please and thanks.

[TheBasscontroller]

does this work on DLL files?

[kubuntuboy]

@TheBasscontroller Yes it's also possible with DLL files since they are basicly the same as EXE files.

[TheBasscontroller]

@TheBasscontroller very nice

[cincityallstar]

i absolutely despise tutorials with no narration, if you want to make tutorials at least invest in a mic, reading little tiny txt docs on shitty quality videos is no pleasant learning experience.

[kubuntuboy]

@cincityallstar You wont learn RE from watching videos even if someone reads out text for you. But pro tip for you: Maybe Microsoft Sam can help you.

[Paksyiet]

What if you can't open "All referenced text strings"?

[kubuntuboy]

@Paksyiet Search for API Calls like MessageBoxA or whatever method is used near the function you are searching.

[couldhaveseenit]

@kubuntuboy how do you do that?

[IMNODOCTOR]

the demo is fine... the music ruined it.

[kubuntuboy]

@IMNODOCTOR There is a little speaker symbol on the bottom left corner. It's epic! Try it!

[cmd2tuts]

@kubuntuboy Haha classic PWNage.

[crowne]

@IMNODOCTOR DnB > you

[mixa1996]

u understand nothing! why you do there breakpoint?? omg..

[kubuntuboy]

@mixa1996 I believe your mom is ghey.

[vbtutpro]

finaly (i hope it is working)

[burninghalls]

hello apon following this tut i dont know what adress you are looking at and i get a error Unable to read memory of debugger process in olly debugger

[kubuntuboy]

@burninghalls "Unable to read memory of debugged process" will occur usually if you have selected the wrong module. Press Alt+E and select the correct module. Then go on.

[Virtual2Evolution]

i have a great tutorial on this and my other reverse engineering techniques if your interested... just go to my channel...

[mixmasterxp]

tHa_imaX could have at least spoke and scrap the music.

[manattan342]

question, i like your video i was wondering if u can help me with a question i came up with an idea lets say there are two pc's ,in pc 1 there are three box's that are out putting letter from a-z box=f box=r box=w the next set of boxs box=h box=l box=x box 2 a-z box-3 a-z is it possible to see what pc 1 is out puting then take that info and manually in put it into pc 2 then could pc 2 know where pc 1 is going and what pc 1s next out put would be before it comes out

[manorhacker]

@stewitzo in fact you have to thank any program that gets an error now on hide my ip I believe the programer is smarter!!!!!

[manorhacker]

Stack backtracking isn't it??Well I am a hacker 2 we have to work together once

[Dishu1200]

Search -> All referenced text strings -> Error unable to read the memory of the debugged process. ??

[stewitzo]

I can't even get the registration error message anywhere. How do I get it? I'm trying your procedure on Hide My IP 2009. Does this program run a different process or thread for serial code verification?

[kubuntuboy]

@stewitzo Not every tool is the same. This video is not a generic instruction how to crack any tool. It should help you to learn how to read out more information out of the code (instead of just patching an app). You should set breakpoints on API functions instead of searching the text then... There are lots of ways to success. But also to fail. ;) Good luck.

[stewitzo]

At this juncture, I am not looking to implement a keygen or entirely comprehend every minute detail of the program. However, this particular application, and I assume many other more sophisticated ones, dives into a maze of API module calls (I can see so many Windows modules being loaded) that literally makes it impossible to track anything down. Many calls just go back and forth between these API's that stepping is impossible. I don't even know whether the data is packed or not.

[stewitzo]

I forgot to ask, is there a way to force Olly to stop at a particular module, given it's a Windows or some other module, most specifically by name? i.e. stop at USER32,MyModule, etc.. I'm asking to stop at this particular module before starting running the whole process because the modules load way to fast for me to F12 it and in other times, it terminates because it's in the middle of processing some thread.

[0121ryanh117]

Most programs arnt as simple as this, its very irritating.

[streetsmartdude]

@0121ryanh117 so how can i learn to do this for more complex programs. i mean i see hundreds of cracks and keygens by various teams on torrent sites. Where do they learn this shit???

[hardstyle905]

@streetsmartdude learn, learn, learn, trial and error, more learning. There is no "school" for crackers. There are 10 types of people: Those who understand binary and those who don't.

[Shinkajo]

@hardstyle905 huh!? nobody writes in binary

[gm3dgames]

@Shinkajo

You don't know binary...

[brainlicker1]

Whats the difference between HDasm and Olldebug?

[0121ryanh117]

@brainlicker1 OllyDbg is way better.

[brainlicker1]

Anyone can somethings way better. I'd like to know how its way better.What are the major differences?

[evilangel72]

i would buy it but i only need it once and its like 50 bucks to buy it for a year. and their customer service is crap and its gotten nothing but bad reviews. all i need it for is to make 1 dvd . sadly poor service, glitchy payments like you pay a year and 2 months later they tell you it expired, all doesnt seem worth the 50 bucks to use it one time for 15 minutes tops

[evilangel72]

can you do one for AVS4you software navigator?

[kubuntuboy]

Please buy it if you like it. Software developers deserve it.

[kubuntuboy]

Good job Mr. Noob. Next time if you see "Part 1/2" you should know that it's the first part of two pieces. Basic math you know? ;) So go and watch the second part and then come back and keep talking trash.

[albogangster44]

fjlj

Part 2 !!!!!!!

[fjlj]

@albogangster44 Zomg i know... go read my comment on it... lol

[israelo0o11]

by the way thanks for the tutorial.. hmmm whos the owner of this?

[kubuntuboy]

tha_imax is the maker and owner of this vid. He allowed me to upload it here.

[israelo0o11]

yup, but the thing is, i don't know whats the bit of the program,, and i think placing break points is necessary, and very hard.. i wondering if i, go to the GETDLGITEMTEXT is tough too, is there any hand book or tutorial for serial fishing and too? or methods? because thers a program created hidden.

[kubuntuboy]

If you are not sure where to place breakpoints you can do hardcore method: Set no breakpoints at all. Start the program until you have to enter your serial -> Go to olly and place a breakpoint on EVERY API call. Then click on "register" or whatever the button is called. It's very time consuming but you will find something there for sure.

[israelo0o11]

kubuntuboy, can i ask something? how to find the right breakpoint? before i press f2?

[sparkytycoon]

What if serial keys are your name but in an encrypted form 0.0

[kubuntuboy]

What? :) In this vid the serial *is* your name in an encrypted form.

[sparkytycoon]

Like when you register. You put your name, age, card number and stuff. The serial is your name. But encrypted into a bunch of jumbled letters :D

[ddoodm]

Wow! :D This is a VERY nice tutorial! I just want to thank you for subscribing and I want to congratulate you on making such an amazing tut!!

[BLkMan2TaLk2]

Wow, very nice work ... I noticed you didn't fuck with the target application's (Key Logger) algorithm at all. But isn't this need to code a KeyGen for the target app?? Nice work on cracking that app.

[kubuntuboy]

I think you didn't "fuck" with the second part of the video eh? :)

[BLkMan2TaLk2]

LOL, no sir I didn't get as far as your 2nd video :-) But I'll do that in a bit. I'm trying to crack an app, but I got stuck somewhere in the process; hopefully your 2nd vid will break the barrier.

[gmk9726]

watch the second video... its a keygen gen

[TheMasterishome]

Cool tutorial.A bit hard for a newbe like me but for others it might be easyier.Can you help me with some links where i can learn a few techniques?????Thnx in advance.

[kubuntuboy]

TheMasterishome: Google for OpenRCE. Its a good site for noobies in RCE :) Good luck.

[TheMasterishome]

thnx.ill try it now.

[Nunumuuu]

it won't work if the codes in a program are encrypted.. is there a way around this?

I was already on the part of opening it with OllyDbg but there are no text string as they are encrypted

[coolglen201]

dw i found it out

[coolglen201]

hey i need help wen i try to open the aplication of the program it ses unable to open file.

(the file path) can u help?

[ncodrington]

Finally, a proper tutorial! Thanks man.

[Alptraum]

pretty good...

[andresweigmann]

Some help on it with Dirks Accordion Tuner Pro V2.2 Plz?

Thanks

[Shkvarka]

Great tut!! thanks alot!!!

I was looking for an introducing like that one!

[tommyaj200]

to much to do it might fuck up my software or registry.

[maxipoloko]

hmm tired it at luxor 3 but didnt get it :( but nice tutorial :-)

can u help me at luxor 3 pls? :-)

[kubuntuboy]

You should write your own little "crackmes" where you exactly know whats happening there. Then you should try to crack your own tool. Because you know exactly what your tool is doing you can learn very easily and quickly some techniques to reverse more advanced stuff.

try it ;)

[Thebest4mylv]

thanks it helped!

[LINYJumper]

Fooling around with this on another program, no matter what I do the damn string is NOT referenced to give the error. I looked everywhere, scanned through the code and all, I just can't find where the hell it is...Or if it even exists.

[flaco198111]

I have to say.....great video man, not like those idiots "cracking" the crackme programs.I wish I could be half as good as you.

[longtalker]

Great tutorial. Unfortunately, for the program I'm trying to crack, OllyDbg tells me that it seems to be encrypted, and indeed I cannot find the string from the error message (there are no strings visible whatsoever, as a matter of fact). I get the same result if using other decompilers. What do you recommend I do? Anticipated thanks

[kubuntuboy]

If Olly says that the Executable is encrypted, you should download PEiD and scan the Executable file. PEiD will tell you (in best case) which tool have encrypted the Executable. Then you can search for a Decrypter\Unpacker for the Tool. When everything went cool, you will have an uncrypted exe which you can continue to reverse engineer. Its also possible to unpack it by hand - but this is another story ;) Good luck.

[tigerseyecreations]

Can you crack thing's liike Bejewled 2 or Relm Cratfer With This thing.

[kubuntuboy]

Well... dunno. This tool here in the tutorial is a real commercial tool but with a really easy algo\implemention.

I would say try (to crack) befor buy ;)

Theoreticly you can crack every tool with enough asm knowledge.

[pranksterkyuubi]

yea agree...good video...however how do you know the exact location on where to put the breakpoints???

[kubuntuboy]

There is no "exact" position. Please look the video very carefully. You will see that he is searching for a string which appears if you enter a wrong register code. Then you can search for the string in your debugger/disassambler and here you go. But not every tool have "hard coded" strings. In other tools which are able to switch languages you *can't* find the right position like this ;) Other good spots are API-Calls like MessageBoxA/StrCmpA and so on....

[pranksterkyuubi]

sorry for the spam...but i m new to the world of programming and tts y i do not understand where to put the break points at first. but nw i roughly understand what u r trying to mean. thanks alot for your help :D

[stupidgaylogincrap]

That was Pro ;D Keep up the gr8 work.

[bensprinkle]

What's the song names. :p

[kubuntuboy]

Beanfield - Code of Confidence

Beanfield - Elektro-Kraut-Streetbeat

[rudxai]

:O

Really good tutorial!

5/5 man.