Skip to content

Integrity protection#15

Open
adynplt wants to merge 5 commits into
XenocodeRCE:masterfrom
adynplt:Integrity-Protection
Open

Integrity protection#15
adynplt wants to merge 5 commits into
XenocodeRCE:masterfrom
adynplt:Integrity-Protection

Conversation

@adynplt

@adynplt adynplt commented Aug 21, 2018

Copy link
Copy Markdown

No description provided.

@adynplt

adynplt commented Aug 21, 2018

Copy link
Copy Markdown
Author

@developer-variety Thanks, will glad to see your fork :D

file.BaseStream.Position = file.BaseStream.Length - 32;
string b = Encoding.ASCII.GetString(file.ReadBytes(32));

if (a != b)

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I still haven't pushed this PR because there is a huge security flaw here : what prevents me from decompiling the protected file and NOP this if statement ? @rexyrexy


internal static string Hash(byte[] metin)
{
MD5CryptoServiceProvider md5 = new MD5CryptoServiceProvider();

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

MD5 is extremely obsolete, even something as old as SHA-1 is faster and more secure.

@NotoriousRebel

Copy link
Copy Markdown

Any updates on this?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants