Ida Pro Password After They

Ida Pro Password After They

What is installation password Generally, customers receive a custom installer and installation password after they purchase IDA Pro.

The installation password is required during installation process.

However, if someday we find a leaked IDA Pro installer, is it still possible to install without an installation password This is an interesting topic.

With a Windows version installer, we only need 10 minutes to calculate the password.

The installer is built with an installer creation tool called InstallBuilder.

We found the plaintext installation password directly in the program memory of the running IDA Pro installer.

BitRock released InstallBuilder 19.2.0 with the protection of installation password on 20190211.

Therefore, we cannot get the password simply with static or dynamic analyzing the installer, and brute force is apparently not an effective way.

But the situation is different if we can grasp the methodology of password generation, which lets us enumerate the password more effectively.

We collected all leaked installation passwords, such as hacking teams password, which is leaked by WikiLeaks.

Then we examined whether the collected passwords appears in the combinations.

Generally, we can compute the password of one installer in 10 minutes.

In the end, we found plaintext password in the program memory of Linux and MacOS version.

On the other hand, we determined the password generation methodology of Windows version.

Therefore, we can build a dictionary to accelerate brute force attack.

It can broaden our experience no matter the result is correct or not.

This is why we took a whole month to verify such a difficult surmise.

Although this issue is not included in Security Bug Bounty Program, they still generously awarded us IDA Pro Linux and MAC version, and upgraded the Windows version for us.

Ida Pro Free