参考了Hangle大佬发布帖子：https://www.52pojie.cn/forum.php?mod=viewthread&tid=1785147
需要工具
1. dnSpy
2. Listary（6.1.0.38）
dnspy反编译
找到 Listary.Core.Pro 命名空间下的 LicenseChecker类
看到 CheckLicense 里面的代码 一开始我想使用 直接让函数返回 true来进行爆破的 奈何编译不了 只能编写注册机
using System;
namespace Listary.Core.Pro
{
// Token: 0x020001BB RID: 443
public class LicenseChecker
{
// Token: 0x0600080D RID: 2061 RVA: 0x0001905C File Offset: 0x0001725C
public static bool CheckLicense(string email, string license)
{
if (email == null || license == null)
{
return false;
}
if (license.Length != 192) // license长度必须为192
{
return false;
}
email = email.ToLowerInvariant(); // 将email转换成小写
ulong num = ((ulong)LicenseChecker.\uE000(email) > 64 - (i + 1) * 5) & 31;
text += \uE185.\uE071(43381)[index].ToString(); // 取 "23456789ABCDEFGHJKLMNPQRSTUVWXYZ" 字符串的 第i位 拼接
}
return license.Substring(160, 12) == text;
// 判断 输入的license第160位到172位是不是等于text
// 这样说明 注册码的前160位和后18位都可以是随机数
}
// Token: 0x0600080E RID: 2062 RVA: 0x000190F4 File Offset: 0x000172F4
private static uint \uE000(string \uE000)
{
uint num = 0U;
foreach (char c in \uE000)
{
num = 43U * num + (uint)c;
}
return num;
}
// Token: 0x0600080F RID: 2063 RVA: 0x00019128 File Offset: 0x00017328
private static uint \uE001(string \uE000)
{
uint num = 0U;
foreach (char c in \uE000)
{
num = (num > 24;
num ^= num2;
}
}
return num;
}
// Token: 0x040004B7 RID: 1207
internal const int \uE000 = 192;
// Token: 0x040004B8 RID: 1208
private const string \uE001 = "23456789ABCDEFGHJKLMNPQRSTUVWXYZ";
}
}
编写注册机可在线运行
using System;
public class Program {
private static uint hash1(string a)
{
uint num = 0U;
foreach (char c in a)
{
num = 43U * num + (uint)c;
}
return num;
}
private static uint hash2(string a)
{
uint num = 0U;
foreach (char c in a)
{
num = (num > 24;
num ^= num2;
}
}
return num;
}
public static string getLicense(string email)
{
string ALPHA_NUMERIC = "23456789ABCDEFGHJKLMNPQRSTUVWXYZ";
ulong num = ((ulong)hash1(email) > 64 - (i + 1) * 5) & 31;
license += ALPHA_NUMERIC[index];
}
Random random = new Random();
string text = "";
for (int i = 0; i
Gui界面注册机
Listary.zip
(283.64 KB, 下载次数: 77)
2023-5-29 10:34 上传
点击文件名下载附件
下载积分: 吾爱币 -1 CB
