Help to Null [DataSymbol Barcode Scanner] WP Plugin

dgomesbr said:

Can you try this one? I don't have a barcode scanner, so let me know if that works

Click to expand...

starliner said:

Try this

Leave blank license key option

Spoiler: download

298.5 KB file on MEGA

mega.nz

Click to expand...

dgomesbr said:

Translating the minified code it's something akin to:

Code:

function vCarve() {
    var result = {
        licenseInfo : _0x685a[11],
        edition : _0x685a[11],
        decoders : _0x685a[11],
        expDate : _0x685a[11]
    };
    const len = 800;
    var path = Module._malloc(len);
    if (path && file && filename) {
        var x = 99; //_getLicenseData(filename, path, len);
        if (x > 0) {
   ....

but any minification of this one doesn't work, so I worked back to the minified instructions.

Click to expand...

dgomesbr said:

Here's the activation key function

Code:

var sActivationKey = '';
if (sActivationKey["match"](/^\d{3,3}-\d{8,8}-\d{8,8}$/)) {
    var today = new Date();
    var dd = today["getDate"]();
    var mm = today["getMonth"]() + 1;
    var yyyy = today["getFullYear"]();
    if (dd < 10) {
        dd = '0' + dd
    }
    ;if (mm < 10) {
        mm = '0' + mm
    }
    ;sActivationKey += '|' + yyyy + mm + dd;
    var iv = '48107e68479875f6';
    var key = CryptoJS["enc"]["Hex"]["parse"]('a474d808979ccce1bd4087dd9b3e61c99fc429226c4c9690666030dadaa29517');
    var encTid = CryptoJS["AES"]["encrypt"](sActivationKey, key, {
        iv: CryptoJS["enc"]["Utf8"]["parse"](iv)
    });
    sActivationKey = encTid["ciphertext"].toString(CryptoJS["enc"].Base64);
    var xhr = new XMLHttpRequest();
    xhr["open"]('GET', 'https://rkdsoft.com/getdaykey1.php?tid=' + encodeURIComponent(sActivationKey), true);
    xhr["timeout"] = 4000;
    xhr["send"]();
    xhr["onreadystatechange"] = function() {
        if (xhr["readyState"] != 4) {
            return
        }
        ;if (xhr["status"] != 200) {
            console["log"]('cannot get key|' + xhr["status"])
        } else {
            window["dsLLK"] = xhr["responseText"];
            var _0xdfecx9 = window["dsLLK"]["match"](/^Error-(\d{4,4})\n.+$/);
            if (_0xdfecx9 && _0xdfecx9["length"] > 0) {
                window["onerror"](_0xdfecx9[0])
            }
        }
    }
} else {
    console["log"]('|Error. Wrong Activation Key.|')
}

TOO SOON, I oversaw this running on a remote server, you can't tell your server (not localhost) to intercept that 443 call, which will return error for self signed certificate. Guess we're done here until further ideas.



Since this is buried inside the .wasm file, the easiest way to null this is if you have control over your hosting server.

Install brew (https://brew.sh/) //necessary as we going to mock the certificate for the remote server
Linux? https://docs.brew.sh/Homebrew-on-Linux

Code:

/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install.sh)"

Now create an entry on the /ect/host or windows/system32/drivers/etc/hosts

Code:

127.0.0.1 rkdsoft.com

Create a file with OK on the root of your htdocs called getdaykey1.php

Code:

echo "OK" > getdaykey1.php

Install the local ssl certificate mocking the locahost

Code:

brew install mkcert
mkcert install
mkcert rkdsoft.com

Done

Click to expand...