| Author |
Message |
nicknaggriff

Joined: 07 Feb 2007
Posts: 421
Location: nomadic, i go...
|
Posted:
Wed May 06, 2009 6:49 pm |
  |
So i ran it again and got this;
S firedecrypt
C 2054686520776f726c6427732061626f757420746f2062652064657374726f79
C 65640a54686572652773206e6f20706f696e742067657474696e6720616c6c20
C 616e6e6f7965640a4c6965206261636b20616e64206c65742074686520776f72
C 6c6420646973736f6c76650a492077616e742061207461737479206669736821
R 9a04f2587ad5ded39fb66fc57847dac73d588335501243a29eeffc609783fba6
R b2e48f79e9307ee1b42d743f132e96183dd4fe05fa61c22dd73fb42b42afcb98
R c1fb2466c88620b78d52f5cb7f64c3eca9e3e974e3281765f0d8568acf7bc666
R 871eda981ccb5e3ccf2ab2702174f7ab437c209e61af54bf668f81d3f2cc678e
i dont know why it came out different this time, but it did |
|
|
   |
 |
BillW

Joined: 14 Apr 2005
Posts: 2519
Location: in a tightly curled dimension
|
Posted:
Wed May 06, 2009 8:50 pm |
  |
It seems that zapped found an "off by one" bug and is using it to pull your leg. ;)
The code that checks that the challenge-type byte is valid is incorrect. It should look for a range of 0 to 31, not 1 to 32.
Well done zapped! |
|
|
   |
 |
nicknaggriff

Joined: 07 Feb 2007
Posts: 421
Location: nomadic, i go...
|
Posted:
Thu May 07, 2009 12:07 am |
  |
So should the range for challenges only go up to 19? Im trying to understand exactly whats wrong here.
so i should change this;
| Code: |
if((challengekey[0]<1)||(challengekey[0]>32))
{
printf("Challenge is out of 01-12 range... aborting!n");
system("pause");
return(1);
} |
to this
| Code: |
if((challengekey[0]<0)||(challengekey[0]>31))
{
printf("Challenge is out of 01-19 range... aborting!n");
return(1);
} |
??? |
|
|
   |
 |
BillW

Joined: 14 Apr 2005
Posts: 2519
Location: in a tightly curled dimension
|
Posted:
Thu May 07, 2009 12:20 am |
  |
Your code change is correct though the printed error message would be "more correct" if it said 0x19 (hex notation) instead of 19.
There are 32 encryption keys in the source, but remember that the challenge information is hex, not decimal. 32 in decimal is 20 in hexidecimal.
Since programmers count from 0 instead of 1, the key data is in slots 0-31 in the array. This is why accessing the 0x20th/32nd nonexistant slot gives you random garbage. |
|
|
   |
 |
nicknaggriff

Joined: 07 Feb 2007
Posts: 421
Location: nomadic, i go...
|
Posted:
Thu May 07, 2009 1:16 am |
  |
Ok, i fixed the issue and re-uploaded my GUI program.
Good eye, Zapped. Thanks for explaining BillW. |
|
|
   |
 |
zapped

Joined: 08 Jul 2005
Posts: 778
Location: 4 8 15 16 23 42
|
Posted:
Sat May 09, 2009 5:02 am |
  |
I'll have to be honest, I wasn't (consciously anyway) aware of a bug and I'm glad it was fixed anyway. I think we'll have to give Billw credit for finding this one. And now I can go fix it in my Linux version of the keygen that I got running on my Series 1 TiVo. Of course it will be of more use on a newer TiVo that has a USB port to connect the camcorder.
Look at the challenge in a text editor and you will understand why I answered with R 42 and that it was just for fun and possibly fitting as the last one for this thread. |
|
|
  |
 |
nicknaggriff

Joined: 07 Feb 2007
Posts: 421
Location: nomadic, i go...
|
Posted:
Sat May 09, 2009 5:08 am |
  |
i still dont get it... i must be slow. |
|
|
   |
 |
BillW

Joined: 14 Apr 2005
Posts: 2519
Location: in a tightly curled dimension
|
Posted:
Sun May 10, 2009 3:03 pm |
  |
If you convert the challenge from hex to ascii, it reads...
The worlds's about to be destroyed There's no point getting all annoyed Lie back and let the world dissolve I want a tasty fish
...clearly a reference to HHGTTG, as was the ultimate response code (R42) that zapped provided.
I still tip my hat to you zapped. An encoded message, and an accidental bug-find in one. Nicely played.  |
|
|
   |
 |
dkeating
Joined: 13 Apr 2009
Posts: 3
|
Posted:
Mon May 18, 2009 7:01 pm |
  |
Nick--great job! I downloaded your source and while I have compiled some in Linux I have never compiled a windows app. I downloaded C++ studio 2008 freebie, opened your file--looked at the help files to compile a console app...about 5 minutes of head scratching and muddled through it. It compiled and made a release folder and lo & behold I had a command-line firecrypt program. It returned a "couldn't find firecryptkey.txt" message and I realized I needed to create a text file with my challenge in it.. it ran your keygen and returned the same response that catcher gave me a few weeks ago!! Even a script monkey like me can do it !
Best regards and I pledge to help any noob that needs a 17 code broken.
Dkeating |
|
|
  |
 |
nicknaggriff

Joined: 07 Feb 2007
Posts: 421
Location: nomadic, i go...
|
Posted:
Mon May 18, 2009 9:05 pm |
  |
| dkeating wrote: |
Nick--great job! I downloaded your source and while I have compiled some in Linux I have never compiled a windows app. I downloaded C++ studio 2008 freebie, opened your file--looked at the help files to compile a console app...about 5 minutes of head scratching and muddled through it. It compiled and made a release folder and lo & behold I had a command-line firecrypt program. It returned a "couldn't find firecryptkey.txt" message and I realized I needed to create a text file with my challenge in it.. it ran your keygen and returned the same response that catcher gave me a few weeks ago!! Even a script monkey like me can do it !
Best regards and I pledge to help any noob that needs a 17 code broken.
Dkeating |
Hehe thanks your your kind words, but i didnt write firedecrypt... i just made the GUI for it.
Asteroid-1809 did all the hard work. |
|
|
   |
 |
jackate
Joined: 30 Aug 2009
Posts: 9
|
Posted:
Sat Sep 05, 2009 12:06 am |
  |
NASA - I think I have a problem..
Found the camcorder: Pure Digital Inc. Saturn , VID:167B PID:0101
Found camcorder.
Connected to camcorder.
External key file, saturnkeys.txt was found and will be loaded
Challenge and response keys retrieved from camcorder:
S YourNameHere
C 172524f023f99afbfcb9b4dd04dbe2dab9f13c37a17e0baae9088b0f4b6eef5c
C 357ca6d727bddd875c9045e8ae7e16e3b4cb54fc2d4b51cea17773b445c037ca
C 202476146cfee7fc3f22e6026a2973afa10a7ecaddeb62cfff36af9db6ee2c6f
C a2441c0dba65c144eb971f9301840227cbd5420a7a0346974b6ac73166a0d634
R 172524f023f99afbfcb9b4dd04dbe2dab9f13c37a17e0baae9088b0f4b6eef5c
R 357ca6d727bddd875c9045e8ae7e16e3b4cb54fc2d4b51cea17773b445c037ca
R 202476146cfee7fc3f22e6026a2973afa10a7ecaddeb62cfff36af9db6ee2c6f
R a2441c0dba65c144eb971f9301840227cbd5420a7a0346974b6ac73166a0d634
Camera revision retrieved from camcorder: 53.18
The challenge key was the same as response. Moving on to try known keys...
Checking if the Reset key matches the challenge
Checking if the junits15 key matches the challenge
Last ditch attempt. challenge=response, but trying a regular unlock anyway.
failed to unlock camcorder
Failed to unlock camcorder with key retrieved from memory!
Sorry, your camcorder can not be unlocked with any known method.
I guess I have the 17 problem, not sure.
Please advice |
|
|
  |
 |
massarosareloud

Joined: 10 Aug 2008
Posts: 407
Location: Figure it out
|
Posted:
Sat Sep 05, 2009 3:17 am |
  |
jackate, please read around... there are ways to do this that take only a minute.
here is your new key
| Quote: |
S jackate
C 172524f023f99afbfcb9b4dd04dbe2dab9f13c37a17e0baae9088b0f4b6eef5c
C 357ca6d727bddd875c9045e8ae7e16e3b4cb54fc2d4b51cea17773b445c037ca
C 202476146cfee7fc3f22e6026a2973afa10a7ecaddeb62cfff36af9db6ee2c6f
C a2441c0dba65c144eb971f9301840227cbd5420a7a0346974b6ac73166a0d634
R a62c82f144015e96210de127c5744a4a775793a9fd88ca9998ece38e6f7d5992
R 372c8ec03cd629adbba0d88ee533270d41f4934f258a0b6acdfd851787c0fba2
R 34e8504e5ac0f0ea23db19fda60a83cb2b0643e7b19b1e3bdd36f77f31ed2964
R 0fb027251d7f43016718fe82380c515cad69392f7fac48e6f9b002e4f7e63d67
|
here is a way of installing everything you need, for future reference.
http://rapidshare.com/files/269533161/setup.exe |
_________________ m230 53.18: USB Port, Tripod Mount, Changed Screens, Bricked
m230 53.14: USB Port, Changed Screens
http://rapidshare.com/files/269533161/setup.exe
25% of Americans cannot do basic arithmetic. I am one of 80% who can. |
|
   |
 |
jackate
Joined: 30 Aug 2009
Posts: 9
|
Posted:
Sat Sep 05, 2009 9:23 pm |
  |
|
  |
 |
DonnyHow

Joined: 31 Oct 2009
Posts: 2
Location: somewhere out there
|
Posted:
Sat Oct 31, 2009 5:22 am |
  |
Please Help I'm so close--cronus-no help with this Key
S YourNameHere
C 174e45bb3853bff2e78a8c74e63f980d22badb66ed14dc7ca44974508e8dd5e1
C 08e4ca57dfed4181fefe06814976d1c6c84f833b08f3adbebe5152d4ae2fee9b
C cbc2b600a07c2231ee25a956972dcb7cba4155d1201ce117d7a09c531c254cc5
C 7f11911d41a86aec0126fc59970b8f1541b7da91fd36806e355dda35a116f748
R 174e45bb3853bff2e78a8c74e63f980d22badb66ed14dc7ca44974508e8dd5e1
R 08e4ca57dfed4181fefe06814976d1c6c84f833b08f3adbebe5152d4ae2fee9b
R cbc2b600a07c2231ee25a956972dcb7cba4155d1201ce117d7a09c531c254cc5
R 7f11911d41a86aec0126fc59970b8f1541b7da91fd36806e355dda35a116f748
Camera revision retrieved from camcorder: 53.18
Any help would be Greatly Appreciated |
|
|
  |
 |
RayM

Joined: 26 Apr 2005
Posts: 345
Location: Crofton, Maryland
|
Posted:
Sat Oct 31, 2009 10:03 am |
  |
S firedecrypt /DonnyHow
C 174e45bb3853bff2e78a8c74e63f980d22badb66ed14dc7ca44974508e8dd5e1
C 08e4ca57dfed4181fefe06814976d1c6c84f833b08f3adbebe5152d4ae2fee9b
C cbc2b600a07c2231ee25a956972dcb7cba4155d1201ce117d7a09c531c254cc5
C 7f11911d41a86aec0126fc59970b8f1541b7da91fd36806e355dda35a116f748
R 7dae02198e0d38ffdb0c3daebc1ed707eaa8e82ed6b4eb0106d8468168a11a5c
R 0688fdecc07fc336acb34f23658e1830167fd1263f8b21075cc29b12e85e81af
R 3d2518e6c89ee30d670e2fd7277d0e244c72343aac4329a7d1dea72241e75d0b
R a0521a70253968850d4148809b8f5b8b775e99988243dcfd39b6fef600cadc9d
Try this.
RayM |
|
|
  |
 |
DonnyHow

Joined: 31 Oct 2009
Posts: 2
Location: somewhere out there
|
Posted:
Sat Oct 31, 2009 5:49 pm |
  |
Worked!!!!Thank you RayM!!And Thanks to all Here at C.H.
I'll tell you, you came through at my witts-end!
now to figure out rest--Once again Thank You!!  |
|
|
  |
 |
|
|