MS Genuine Advantage Hack ?

[GhostShip]

I did read this a while back but with no details I thought it wasnt worth posting about , but this is more like the technical stuff I like to read.

http://arstechnica.com/journals/microsoft.ars/2005/6/23/558

According to researcher Debasis Mohanty, the Windows Genuine Advantage validation check can be tricked by using another Microsoft validation tool—"GenuineCheck.exe"—and a second PC. The application can be used to generate a key that will validate an unlicensed copy of Windows XP and gain access to the Download Center.

GenuineCheck.exe is actually supposed to be a secondary means of validation, apparently targeted towards those who do not use Internet Explorer, as the Windows Genuine Advantage mechanism requires a browser with full ActiveX support in order to function.

Hmm well its not much but interesting all the same.
I suppose bill has fallen into the trap a lot of big companies do, rather than sell at a lower price and market add-ons as and when folks want them, he wants the pie now , and all to himself..lol

[GhostShip]

Another word on this in an article from Slycks

http://www.slyck.com/news.php?story=866

With WGA 1.0, individuals will connect with Microsoft's server, which will communicate whether the operating system (OS) in question is legitimate. If the OS checks out, the individual will be able to take advantage of the "benefits of genuine software", such as Windows Media Player updates.

Another enhancement to the software is the elimination of the 25 character key entry - a definite security weakness. When Microsoft Vista is released in 20XX, hackers will have a new set of challenges to hurdle in their efforts to circumvent this protection. However this type of server/client verification has been defeated before, as witnessed by Half Life 2. This first person shooter required the home PC to verify the authenticity of the game through the Valve Software servers. Although creative, the effort was annulled.

Hmm it seems the deeper I look the more the cracks are showing in the usual "invincible" microsoft way

[GhostShip]

Hmm I was just following up on a link and this idea was found..lol

http://www.xillioncomputers.com/modules.php?name=News&file=article&sid=336

The technology used to verify a genuine copy of Windows was designed mostly at Internet Explorer users in the form of an embedded ActiveX control. Microsoft also released another version for non-IE users which requires a program to be downloaded and run to generate a validation key.
This is where the exploit actually happens, (NOTE: in order to do this you must have a "Genuine" copy of Windows or know someone who has and is willing to give out their code) simply copy the code the program generates from a Genuine copy of Windows and use that code on any non-Genuine machine.
This exploit is only for Mozilla Firefox or any other non-ActiveX compliant browser, if you try it on Internet Explorer it will fail.

I,m watching for the next one already..lol

[GhostShip]

This one involves some form of Java hack to the browser to defeat the MS check.

http://www.extended64.com/blogs/rafael/archive/2005/07/27/1026.aspx

For Internet Explorer users:

You'll need to download trixie and the relevant user script [Thanks Mark S., MacMonkey]. Simply download the .js file and drop it into trixie's scripts\ folder.

Fire up Internet Explorer (32-bit) and click Tools > Trixie Options. You should see WGA Workaround. If it's not already checked, check it. Uncheck the others if you don't want to use them (recommended).

Visit Microsoft Downloads or Microsoft Update to test it out!

// ==UserScript==
// @name WGA Workaround
// @namespace d09733c0-fe4c-11d9-8cd6-0800200c9a66
// @description Windows Genuine Advantage Workaround (IE)
// @include http*/*.microsoft.com/*
// ==/UserScript==

(function ()
{
var js = document.createElement("script");
js.setAttribute("language", "JavaScript");
js.setAttribute("type", "text/javascript");
js.text = 'document.cookie="WinGenCookie=validation=0";';
document.getElementsByTagName('head').item(0).appe ndChild(js);
window.g_sDisableWGACheck='all';
}
)();  

OH AND ALSO if you want to install IE7 but can't because of WGA, this works:

1. Extract IE7-WindowsXP-x86-enu.exe with WinRAR.
2. Open update\iecustom.dll in a hex editor.
3. Navigate to hexadecimal offset 0x1034h(4148 decimal) and change 0F 95 to 0F 94.

Boy, MS sucks at this "security" thing, huh?

Hmm, doesnt sound like Mr Gates will be happy with this sort of thing.

[GhostShip]

I read this here

http://forums.murc.ws/showthread.php?s=90af6229ffa503382e0580856e4b7718&p=548804#post548804

There's another trick. Go to Windows Update, and BEFORE you hit "custom" or "express", paste THIS into your browser's address window and hit "go" (or enter):

javascript:void(window.g_sDisableWGACheck='all')

Hmm when will all theses hacks stop its a new one each time I look  

[GhostShip]

For those who might be fed up downloading all the different packs and updates many are available from here all precompiled and ready to go if you havent got time to waste on waiting for authentication checks.

http://www.softpedia.com/get/Tweak/System-Tweak/AutoPatcher-XP.shtml

A very sensible idea

[GhostShip]

Heres another one   :shock:

http://home.mchsi.com/%7Edigitaltopia/Archives/story002.htm

For an even more simple work around for users with Windows Service Pack 2 installed is to goto Internet Explorers tools > manage add-ons > then disable Windows Genuine Advantage validation tool.

And another ..

Still yet another hack is to Open LegitCheckControl.dll (it's in windows\system32) with a Hex editor and at 0002BE98h change 8B45D8 to 33C090
Genuine Windows Validation will now pass whatever key you're using.

I,m scared to look for more ways as this seems to be something everyone and his dad are shooting holes in  


I wonder if there are any more...