ManagerAuth.dll source code problem, this was written by the little scum administrator

chz2008 · Posted on 2/5/2018 9:40:12 AM

Little scum administrator, after reading the network verification you shared, I think it's very good, and I want to learn it. ManagerAuth.dll can you share this source code?
ManagerAuth.dll this does .NET Reflector 4.9 obfuscation, but it can still be decompiled.
However, it gets SoftReg.GetHDid(); The RSA algorithm is actually published in your section.
I just want to get the source code and learn something.

Little scum · Posted on 2/5/2018 10:34:47 AM

Login is visible.

If a USB flash drive or a mobile hard disk is inserted, the unique identity of the computer will change.

There is still a problem with the code, after that, I removed the code to obtain the hardware, and it is also problematic to obtain the network card information!

Little scum · Posted on 2/5/2018 4:27:20 PM

chz2008 posted on 2018-2-5 16:21
After reading the source code (in fact, it can also be obtained by decompiling), directly enter http in the URL and return the following information:
http://192.168.44.233:909 ...

Yes, the website only does simple injection prevention measures that you can refine a bit

Login is visible.

chz2008 · Posted on 2/7/2018 8:31:04 AM

Xiao Zhao posted on 2018-2-5 16:27
Yes, the website only does simple injection prevention measures that you can refine a bit

@小渣渣
There is a question that needs to be asked, that is, the client has passed through:
http://192.168.44.233:9090/api/User?email=chz&password=e10adc3949ba59abbe56e057f20f883e&device=a6442f9e872da18ce45e5a8fb516d8c8

But why does the server receive this Get method? rather than other functions defined on the server side.
I don't know much about httphelper.
Please advise.

Little scum · Posted on 2/5/2018 9:47:13 AM

Wait a moment I'll look for the source code and send it out

chz2008 · Posted on 2/5/2018 10:39:43 AM

Published on 2018-2-5 10:34
If a USB flash drive or a mobile hard disk is inserted, the unique identity of the computer will change.

The code is also ...

There is more than so much source code. Can you share project files? Is it convenient to communicate with QQ: 2793335990

Little scum · Posted on 2/5/2018 10:40:26 AM

chz2008 posted on 2018-2-5 10:39
There is more than so much source code. Can you share project files? Is it convenient to communicate with QQ: 2793335990

I'm already sorting out the source code and I'll send it out later

chz2008 · Posted on 2/5/2018 10:44:07 AM

Xiao Zhazha Posted on 2018-2-5 10:40
I'm already sorting out the source code and I'll send it out later

Thank you for your spirit of sharing. I suggest that instead of automatically generating RSA key pairs, the public key is directly defined in the code, and then the private key is kept. This is a little more secure, or the key is added to a layer of AES encryption and decryption.

Little scum · Posted on 2/5/2018 1:45:01 PM

.NET/C# Software Licensing Platform [Source Code]
http://www.itsvse.com/thread-4491-1-1.html

chz2008 · Posted on 2/5/2018 2:40:24 PM

Xiao Zhazha Posted on 2018-2-5 13:45
.NET/C# Software Licensing Platform [Source Code]
http://www.itsvse.com/thread-4491-1-1.html

Thanks to the moderator for sharing.

chz2008 · Posted on 2/5/2018 4:21:27 PM

Xiao Zhazha Posted on 2018-2-5 13:45
.NET/C# Software Licensing Platform [Source Code]
http://www.itsvse.com/thread-4491-1-1.html

After reading the source code (in fact, it can also be obtained by decompiling), directly enter http in the URL and return the following information:
http://192.168.44.233:9090/api/User?email=chz&password=e10adc3949ba59abbe56e057f20f883e&device=a6442f9e872da18ce45e5a8fb516d8c8
I didn't continue researching, I felt that there was an injection loophole.

[WinForm] ManagerAuth.dll source code problem, this was written by the little scum administrator

Related Posts

Sections viewed