IDA Pro 9.0.240925 (9.0 RC1)

liammtop

DA Pro 9.0 RC1论坛内好像没有佬发:thinking:，那我先发一个（
安全提醒：逆向软件建议放在虚拟机内运行

反编译器：x86，x64，arm，arm64，mips，ppc，ppc64

适用平台：windows，Intel mac，arm mac，linux

下载链接：https://drive.google.com/drive/f ... aTPPFOOvtJYBqU95qKO


激活脚本：

1. import json
   
2. import hashlib
   
3. import os
   
4. 
   
5. license = {
   
6.     "header": {"version": 1},
   
7.     "payload": {
   
8.         "name": "elf",
   
9.         "email": "elv@ven",
   
10.         "licenses": [
    
11.             {
    
12.                 "description": "license",
    
13.                 "edition_id": "ida-pro",
    
14.                 "id": "48-2137-ACAB-99",
    
15.                 "license_type": "named",
    
16.                 "product": "IDA",
    
17.                 "seats": 1,
    
18.                 "start_date": "2024-08-10 00:00:00",
    
19.                 "end_date": "2033-12-31 23:59:59",  # This can't be more than 10 years!
    
20.                 "issued_on": "2024-08-10 00:00:00",
    
21.                 "owner": "",
    
22.                 "product_id": "IDAPRO",
    
23.                 "add_ons": [
    
24.                     # {
    
25.                     #     "id": "48-1337-DEAD-01",
    
26.                     #     "code": "HEXX86L",
    
27.                     #     "owner": "48-0000-0000-00",
    
28.                     #     "start_date": "2024-08-10 00:00:00",
    
29.                     #     "end_date": "2033-12-31 23:59:59",
    
30.                     # },
    
31.                     # {
    
32.                     #     "id": "48-1337-DEAD-02",
    
33.                     #     "code": "HEXX64L",
    
34.                     #     "owner": "48-0000-0000-00",
    
35.                     #     "start_date": "2024-08-10 00:00:00",
    
36.                     #     "end_date": "2033-12-31 23:59:59",
    
37.                     # },
    
38.                 ],
    
39.                 "features": [],
    
40.             }
    
41.         ],
    
42.     },
    
43. }
    
44. 
    
45. 
    
46. def add_every_addon(license):
    
47.     platforms = [
    
48.         "W",  # Windows
    
49.         "L",  # Linux
    
50.         "M",  # macOS
    
51.     ]
    
52.     addons = [
    
53.         "HEXX86",
    
54.         "HEXX64",
    
55.         "HEXARM",
    
56.         "HEXARM64",
    
57.         "HEXMIPS",
    
58.         "HEXMIPS64",
    
59.         "HEXPPC",
    
60.         "HEXPPC64",
    
61.         "HEXRV64",
    
62.         "HEXARC",
    
63.         "HEXARC64",
    
64.         # Probably cloud?
    
65.         # "HEXCX86",
    
66.         # "HEXCX64",
    
67.         # "HEXCARM",
    
68.         # "HEXCARM64",
    
69.         # "HEXCMIPS",
    
70.         # "HEXCMIPS64",
    
71.         # "HEXCPPC",
    
72.         # "HEXCPPC64",
    
73.         # "HEXCRV",
    
74.         # "HEXCRV64",
    
75.         # "HEXCARC",
    
76.         # "HEXCARC64",
    
77.     ]
    
78. 
    
79.     i = 0
    
80.     for addon in addons:
    
81.         i += 1
    
82.         license["payload"]["licenses"][0]["add_ons"].append(
    
83.             {
    
84.                 "id": f"48-1337-DEAD-{i:02}",
    
85.                 "code": addon,
    
86.                 "owner": license["payload"]["licenses"][0]["id"],
    
87.                 "start_date": "2024-08-10 00:00:00",
    
88.                 "end_date": "2033-12-31 23:59:59",
    
89.             }
    
90.         )
    
91.     # for addon in addons:
    
92.     #     for platform in platforms:
    
93.     #         i += 1
    
94.     #         license["payload"]["licenses"][0]["add_ons"].append(
    
95.     #             {
    
96.     #                 "id": f"48-1337-DEAD-{i:02}",
    
97.     #                 "code": addon + platform,
    
98.     #                 "owner": license["payload"]["licenses"][0]["id"],
    
99.     #                 "start_date": "2024-08-10 00:00:00",
    
100.     #                 "end_date": "2033-12-31 23:59:59",
     
101.     #             }
     
102.     #         )
     
103. 
     
104. 
     
105. add_every_addon(license)
     
106. 
     
107. 
     
108. def json_stringify_alphabetical(obj):
     
109.     return json.dumps(obj, sort_keys=True, separators=(",", ":"))
     
110. 
     
111. 
     
112. def buf_to_bigint(buf):
     
113.     return int.from_bytes(buf, byteorder="little")
     
114. 
     
115. 
     
116. def bigint_to_buf(i):
     
117.     return i.to_bytes((i.bit_length() + 7) // 8, byteorder="little")
     
118. 
     
119. 
     
120. # Yup, you only have to patch 5c -> cb in libida64.so
     
121. pub_modulus_hexrays = buf_to_bigint(
     
122.     bytes.fromhex(
     
123.         "edfd425cf978546e8911225884436c57140525650bcf6ebfe80edbc5fb1de68f4c66c29cb22eb668788afcb0abbb718044584b810f8970cddf227385f75d5dddd91d4f18937a08aa83b28c49d12dc92e7505bb38809e91bd0fbd2f2e6ab1d2e33c0c55d5bddd478ee8bf845fcef3c82b9d2929ecb71f4d1b3db96e3a8e7aaf93"
     
124.     )
     
125. )
     
126. pub_modulus_patched = buf_to_bigint(
     
127.     bytes.fromhex(
     
128.         "edfd42cbf978546e8911225884436c57140525650bcf6ebfe80edbc5fb1de68f4c66c29cb22eb668788afcb0abbb718044584b810f8970cddf227385f75d5dddd91d4f18937a08aa83b28c49d12dc92e7505bb38809e91bd0fbd2f2e6ab1d2e33c0c55d5bddd478ee8bf845fcef3c82b9d2929ecb71f4d1b3db96e3a8e7aaf93"
     
129.     )
     
130. )
     
131. 
     
132. private_key = buf_to_bigint(
     
133.     bytes.fromhex(
     
134.         "77c86abbb7f3bb134436797b68ff47beb1a5457816608dbfb72641814dd464dd640d711d5732d3017a1c4e63d835822f00a4eab619a2c4791cf33f9f57f9c2ae4d9eed9981e79ac9b8f8a411f68f25b9f0c05d04d11e22a3a0d8d4672b56a61f1532282ff4e4e74759e832b70e98b9d102d07e9fb9ba8d15810b144970029874"
     
135.     )
     
136. )
     
137. 
     
138. 
     
139. def decrypt(message):
     
140.     decrypted = pow(buf_to_bigint(message), exponent, pub_modulus_patched)
     
141.     decrypted = bigint_to_buf(decrypted)
     
142.     return decrypted[::-1]
     
143. 
     
144. 
     
145. def encrypt(message):
     
146.     encrypted = pow(buf_to_bigint(message[::-1]), private_key, pub_modulus_patched)
     
147.     encrypted = bigint_to_buf(encrypted)
     
148.     return encrypted
     
149. 
     
150. 
     
151. exponent = 0x13
     
152. 
     
153. 
     
154. def sign_hexlic(payload: dict) -> str:
     
155.     data = {"payload": payload}
     
156.     data_str = json_stringify_alphabetical(data)
     
157. 
     
158.     buffer = bytearray(128)
     
159.     # first 33 bytes are random
     
160.     for i in range(33):
     
161.         buffer[i] = 0x42
     
162. 
     
163.     # compute sha256 of the data
     
164.     sha256 = hashlib.sha256()
     
165.     sha256.update(data_str.encode())
     
166.     digest = sha256.digest()
     
167. 
     
168.     # copy the sha256 digest to the buffer
     
169.     for i in range(32):
     
170.         buffer[33 + i] = digest[i]
     
171. 
     
172.     # encrypt the buffer
     
173.     encrypted = encrypt(buffer)
     
174. 
     
175.     return encrypted.hex().upper()
     
176. 
     
177. 
     
178. def generate_patched_dll(filename):
     
179.     if not os.path.exists(filename):
     
180.         print(f"Didn't find {filename}, skipping patch generation")
     
181.         return
     
182. 
     
183.     with open(filename, "rb") as f:
     
184.         data = f.read()
     
185. 
     
186.         if data.find(bytes.fromhex("EDFD42CBF978")) != -1:
     
187.             print(f"{filename} looks to be already patched :)")
     
188.             return
     
189.         
     
190.         if data.find(bytes.fromhex("EDFD425CF978")) == -1:
     
191.             print(f"{filename} doesn't contain the original modulus.")
     
192.             return
     
193. 
     
194.         data = data.replace(
     
195.             bytes.fromhex("EDFD425CF978"), bytes.fromhex("EDFD42CBF978")
     
196.         )
     
197. 
     
198.         patched_filename = f"{filename}.patched"
     
199.         with open(patched_filename, "wb") as f:
     
200.             f.write(data)
     
201. 
     
202.         print(f"Generated modulus patch to {patched_filename}! To apply the patch, replace the original file with the patched file")
     
203. 
     
204. 
     
205. # message = bytes.fromhex(license["signature"])
     
206. # print(decrypt(message).hex())
     
207. # print(encrypt(decrypt(message)).hex())
     
208. 
     
209. license["signature"] = sign_hexlic(license["payload"])
     
210. 
     
211. serialized = json_stringify_alphabetical(license)
     
212. 
     
213. # write to ida.hexlic
     
214. filename = "idapro.hexlic"
     
215. 
     
216. with open(filename, "w") as f:
     
217.     f.write(serialized)
     
218. 
     
219. print(f"Saved new license to {filename}!")
     
220. 
     
221. generate_patched_dll("ida32.dll")
     
222. generate_patched_dll("ida.dll")
     
223. generate_patched_dll("libida32.so")
     
224. generate_patched_dll("libida.so")
     
225. generate_patched_dll("libida32.dylib")
     
226. generate_patched_dll("libida.dylib")

复制代码

nyarime

帮顶，我记得这个版本我搬过？

liammtop

nyarime 发表于 2024-10-3 19:54
帮顶，我记得这个版本我搬过？

是在 dl.naixi.net 上吗，我这边打不开

nyarime

liammtop 发表于 2024-10-4 10:09
是在 dl.naixi.net 上吗，我这边打不开

是啊，py版的注册机都在上面
https://dl.naixi.net/tools/ida/9.0/