camerahacking Forum Index  
 FAQ  •  Search  •  Memberlist  •  Usergroups   •   fChat   •  Register  •  Profile  •  Log in to check your private messages  •  Log in
 Request a response for your 17 challenge here View next topic
View previous topic
Post new topicReply to topic
Author Message
nicknaggriff



Joined: 07 Feb 2007
Posts: 421
Location: nomadic, i go...

PostPosted: Wed May 06, 2009 6:49 pm Reply with quoteBack to top

So i ran it again and got this;
S firedecrypt
C 2054686520776f726c6427732061626f757420746f2062652064657374726f79
C 65640a54686572652773206e6f20706f696e742067657474696e6720616c6c20
C 616e6e6f7965640a4c6965206261636b20616e64206c65742074686520776f72
C 6c6420646973736f6c76650a492077616e742061207461737479206669736821
R 9a04f2587ad5ded39fb66fc57847dac73d588335501243a29eeffc609783fba6
R b2e48f79e9307ee1b42d743f132e96183dd4fe05fa61c22dd73fb42b42afcb98
R c1fb2466c88620b78d52f5cb7f64c3eca9e3e974e3281765f0d8568acf7bc666
R 871eda981ccb5e3ccf2ab2702174f7ab437c209e61af54bf668f81d3f2cc678e

i dont know why it came out different this time, but it did
View user's profileSend private messageAIM Address
BillW



Joined: 14 Apr 2005
Posts: 2519
Location: in a tightly curled dimension

PostPosted: Wed May 06, 2009 8:50 pm Reply with quoteBack to top

It seems that zapped found an "off by one" bug and is using it to pull your leg. ;)

The code that checks that the challenge-type byte is valid is incorrect. It should look for a range of 0 to 31, not 1 to 32.

Well done zapped!
View user's profileSend private messageVisit poster's website
nicknaggriff



Joined: 07 Feb 2007
Posts: 421
Location: nomadic, i go...

PostPosted: Thu May 07, 2009 12:07 am Reply with quoteBack to top

So should the range for challenges only go up to 19? Im trying to understand exactly whats wrong here.



so i should change this;
Code:
   if((challengekey[0]<1)||(challengekey[0]>32))
   {
      printf("Challenge is out of 01-12 range... aborting!n");
      system("pause");
      return(1);
   }

to this
Code:
   if((challengekey[0]<0)||(challengekey[0]>31))
   {
      printf("Challenge is out of 01-19 range... aborting!n");
      return(1);
   }
???
View user's profileSend private messageAIM Address
BillW



Joined: 14 Apr 2005
Posts: 2519
Location: in a tightly curled dimension

PostPosted: Thu May 07, 2009 12:20 am Reply with quoteBack to top

Your code change is correct though the printed error message would be "more correct" if it said 0x19 (hex notation) instead of 19.

There are 32 encryption keys in the source, but remember that the challenge information is hex, not decimal. 32 in decimal is 20 in hexidecimal.

Since programmers count from 0 instead of 1, the key data is in slots 0-31 in the array. This is why accessing the 0x20th/32nd nonexistant slot gives you random garbage.
View user's profileSend private messageVisit poster's website
nicknaggriff



Joined: 07 Feb 2007
Posts: 421
Location: nomadic, i go...

PostPosted: Thu May 07, 2009 1:16 am Reply with quoteBack to top

Ok, i fixed the issue and re-uploaded my GUI program.
Good eye, Zapped. Thanks for explaining BillW.
View user's profileSend private messageAIM Address
zapped



Joined: 08 Jul 2005
Posts: 778
Location: 4 8 15 16 23 42

PostPosted: Sat May 09, 2009 5:02 am Reply with quoteBack to top

I'll have to be honest, I wasn't (consciously anyway) aware of a bug and I'm glad it was fixed anyway. I think we'll have to give Billw credit for finding this one. And now I can go fix it in my Linux version of the keygen that I got running on my Series 1 TiVo. Of course it will be of more use on a newer TiVo that has a USB port to connect the camcorder.

Look at the challenge in a text editor and you will understand why I answered with R 42 and that it was just for fun and possibly fitting as the last one for this thread.
View user's profileSend private message
nicknaggriff



Joined: 07 Feb 2007
Posts: 421
Location: nomadic, i go...

PostPosted: Sat May 09, 2009 5:08 am Reply with quoteBack to top

i still dont get it... i must be slow.
View user's profileSend private messageAIM Address
BillW



Joined: 14 Apr 2005
Posts: 2519
Location: in a tightly curled dimension

PostPosted: Sun May 10, 2009 3:03 pm Reply with quoteBack to top

If you convert the challenge from hex to ascii, it reads...

The worlds's about to be destroyed There's no point getting all annoyed Lie back and let the world dissolve I want a tasty fish

...clearly a reference to HHGTTG, as was the ultimate response code (R42) that zapped provided.

I still tip my hat to you zapped. An encoded message, and an accidental bug-find in one. Nicely played. Wink
View user's profileSend private messageVisit poster's website
dkeating



Joined: 13 Apr 2009
Posts: 3

PostPosted: Mon May 18, 2009 7:01 pm Reply with quoteBack to top

Nick--great job! I downloaded your source and while I have compiled some in Linux I have never compiled a windows app. I downloaded C++ studio 2008 freebie, opened your file--looked at the help files to compile a console app...about 5 minutes of head scratching and muddled through it. It compiled and made a release folder and lo & behold I had a command-line firecrypt program. It returned a "couldn't find firecryptkey.txt" message and I realized I needed to create a text file with my challenge in it.. it ran your keygen and returned the same response that catcher gave me a few weeks ago!! Even a script monkey like me can do it !
Best regards and I pledge to help any noob that needs a 17 code broken.
Dkeating
View user's profileSend private message
nicknaggriff



Joined: 07 Feb 2007
Posts: 421
Location: nomadic, i go...

PostPosted: Mon May 18, 2009 9:05 pm Reply with quoteBack to top

dkeating wrote:
Nick--great job! I downloaded your source and while I have compiled some in Linux I have never compiled a windows app. I downloaded C++ studio 2008 freebie, opened your file--looked at the help files to compile a console app...about 5 minutes of head scratching and muddled through it. It compiled and made a release folder and lo & behold I had a command-line firecrypt program. It returned a "couldn't find firecryptkey.txt" message and I realized I needed to create a text file with my challenge in it.. it ran your keygen and returned the same response that catcher gave me a few weeks ago!! Even a script monkey like me can do it !
Best regards and I pledge to help any noob that needs a 17 code broken.
Dkeating

Hehe Rolling Eyes thanks your your kind words, but i didnt write firedecrypt... i just made the GUI for it.

Asteroid-1809 did all the hard work.
View user's profileSend private messageAIM Address
jackate



Joined: 30 Aug 2009
Posts: 9

PostPosted: Sat Sep 05, 2009 12:06 am Reply with quoteBack to top

NASA - I think I have a problem..

Found the camcorder: Pure Digital Inc. Saturn , VID:167B PID:0101
Found camcorder.
Connected to camcorder.

External key file, saturnkeys.txt was found and will be loaded


Challenge and response keys retrieved from camcorder:
S YourNameHere
C 172524f023f99afbfcb9b4dd04dbe2dab9f13c37a17e0baae9088b0f4b6eef5c
C 357ca6d727bddd875c9045e8ae7e16e3b4cb54fc2d4b51cea17773b445c037ca
C 202476146cfee7fc3f22e6026a2973afa10a7ecaddeb62cfff36af9db6ee2c6f
C a2441c0dba65c144eb971f9301840227cbd5420a7a0346974b6ac73166a0d634
R 172524f023f99afbfcb9b4dd04dbe2dab9f13c37a17e0baae9088b0f4b6eef5c
R 357ca6d727bddd875c9045e8ae7e16e3b4cb54fc2d4b51cea17773b445c037ca
R 202476146cfee7fc3f22e6026a2973afa10a7ecaddeb62cfff36af9db6ee2c6f
R a2441c0dba65c144eb971f9301840227cbd5420a7a0346974b6ac73166a0d634

Camera revision retrieved from camcorder: 53.18

The challenge key was the same as response. Moving on to try known keys...
Checking if the Reset key matches the challenge
Checking if the junits15 key matches the challenge
Last ditch attempt. challenge=response, but trying a regular unlock anyway.
failed to unlock camcorder
Failed to unlock camcorder with key retrieved from memory!
Sorry, your camcorder can not be unlocked with any known method.

I guess I have the 17 problem, not sure.

Please advice
View user's profileSend private message
massarosareloud



Joined: 10 Aug 2008
Posts: 407
Location: Figure it out

PostPosted: Sat Sep 05, 2009 3:17 am Reply with quoteBack to top

jackate, please read around... there are ways to do this that take only a minute.

here is your new key
Quote:

S jackate
C 172524f023f99afbfcb9b4dd04dbe2dab9f13c37a17e0baae9088b0f4b6eef5c
C 357ca6d727bddd875c9045e8ae7e16e3b4cb54fc2d4b51cea17773b445c037ca
C 202476146cfee7fc3f22e6026a2973afa10a7ecaddeb62cfff36af9db6ee2c6f
C a2441c0dba65c144eb971f9301840227cbd5420a7a0346974b6ac73166a0d634
R a62c82f144015e96210de127c5744a4a775793a9fd88ca9998ece38e6f7d5992
R 372c8ec03cd629adbba0d88ee533270d41f4934f258a0b6acdfd851787c0fba2
R 34e8504e5ac0f0ea23db19fda60a83cb2b0643e7b19b1e3bdd36f77f31ed2964
R 0fb027251d7f43016718fe82380c515cad69392f7fac48e6f9b002e4f7e63d67


here is a way of installing everything you need, for future reference.

http://rapidshare.com/files/269533161/setup.exe

_________________
m230 53.18: USB Port, Tripod Mount, Changed Screens, Bricked
m230 53.14: USB Port, Changed Screens

http://rapidshare.com/files/269533161/setup.exe

25% of Americans cannot do basic arithmetic. I am one of 80% who can.
View user's profileSend private messageVisit poster's website
jackate



Joined: 30 Aug 2009
Posts: 9

PostPosted: Sat Sep 05, 2009 9:23 pm Reply with quoteBack to top

My kids really liked this cheescake at disney, it looked pretty cool.
I might try to make it at home.

Thanks again for the help..

http://www.slashfood.com/2006/03/13/tie-dyed-red-velvet-cheesecake-recipe

http://www.theangelforever.com/?p=1459
View user's profileSend private message
DonnyHow



Joined: 31 Oct 2009
Posts: 2
Location: somewhere out there

PostPosted: Sat Oct 31, 2009 5:22 am Reply with quoteBack to top

Please Help I'm so close--cronus-no help with this Key
S YourNameHere
C 174e45bb3853bff2e78a8c74e63f980d22badb66ed14dc7ca44974508e8dd5e1
C 08e4ca57dfed4181fefe06814976d1c6c84f833b08f3adbebe5152d4ae2fee9b
C cbc2b600a07c2231ee25a956972dcb7cba4155d1201ce117d7a09c531c254cc5
C 7f11911d41a86aec0126fc59970b8f1541b7da91fd36806e355dda35a116f748
R 174e45bb3853bff2e78a8c74e63f980d22badb66ed14dc7ca44974508e8dd5e1
R 08e4ca57dfed4181fefe06814976d1c6c84f833b08f3adbebe5152d4ae2fee9b
R cbc2b600a07c2231ee25a956972dcb7cba4155d1201ce117d7a09c531c254cc5
R 7f11911d41a86aec0126fc59970b8f1541b7da91fd36806e355dda35a116f748

Camera revision retrieved from camcorder: 53.18

Any help would be Greatly Appreciated
View user's profileSend private message
RayM



Joined: 26 Apr 2005
Posts: 345
Location: Crofton, Maryland

PostPosted: Sat Oct 31, 2009 10:03 am Reply with quoteBack to top

S firedecrypt /DonnyHow
C 174e45bb3853bff2e78a8c74e63f980d22badb66ed14dc7ca44974508e8dd5e1
C 08e4ca57dfed4181fefe06814976d1c6c84f833b08f3adbebe5152d4ae2fee9b
C cbc2b600a07c2231ee25a956972dcb7cba4155d1201ce117d7a09c531c254cc5
C 7f11911d41a86aec0126fc59970b8f1541b7da91fd36806e355dda35a116f748
R 7dae02198e0d38ffdb0c3daebc1ed707eaa8e82ed6b4eb0106d8468168a11a5c
R 0688fdecc07fc336acb34f23658e1830167fd1263f8b21075cc29b12e85e81af
R 3d2518e6c89ee30d670e2fd7277d0e244c72343aac4329a7d1dea72241e75d0b
R a0521a70253968850d4148809b8f5b8b775e99988243dcfd39b6fef600cadc9d

Try this.
RayM
View user's profileSend private message
DonnyHow



Joined: 31 Oct 2009
Posts: 2
Location: somewhere out there

PostPosted: Sat Oct 31, 2009 5:49 pm Reply with quoteBack to top

Worked!!!!Thank you RayM!!And Thanks to all Here at C.H.
I'll tell you, you came through at my witts-end!
now to figure out rest--Once again Thank You!! Razz
View user's profileSend private message
Display posts from previous:      
Post new topicReply to topic


 Jump to:   



View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum