Skip to content

pr701/ida_key_checker

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

19 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

IDA Key Checker

IDA Pro (6.x-7.x) key checker tool

Usage

A list of available options can be retrieved using:

ida_key_checker --help

Arguments:

Option Default Description
-h/--help A list of available command options
-i/--input ida.key Input file (key, bin, idb or hexrays binary)
-o/--output unused Output (encrypted signature or license block) filename

Sample

Sample with public leaked key

ida_key_checker -i "ida.key" -o sign

Key file: "ida.key"
Pirated Key:    0
MD5 is valid:   1

Key:
HexRays License 6.8

User            Giancarlo Russo, HT Srl
Email           g.russo@hackingteam.com
Issued On       2015-05-25 18:07:13
MD5             1A 7C 54 CF 96 02 83 23 F7 07 4C 05 5B B3 B5 05

Products
      LICENSE ID   #    SUPPORT    EXPIRES NAME
 48-3255-7514-28   1 2016-04-08      Never IDA Professional Named License (Windows)
 48-B055-7514-8E   1 2016-04-08      Never IDA Professional Named License (Mac)
 56-BC5F-5554-94   1 2016-04-08      Never ARM Decompiler (Mac)
 56-3E5F-5554-3E   1 2016-04-08      Never ARM Decompiler (Windows)
 55-BECD-8F84-AA   1 2016-04-08      Never x64 Decompiler (Mac)
 55-3CC9-8FA4-6E   1 2016-04-08      Never x64 Decompiler (Windows)
 57-3817-7E44-17   1 2016-04-08      Never x86 Decompiler (Mac)
 57-B813-7E44-DB   1 2016-04-08      Never x86 Decompiler (Windows)

Signature:
Key Number:
        25143
        37 62
Key Version:
        680
        A8 02
License Type:
        Named
        01 00
User Number:
        0
        00 00
Reserved0:
        -1
        FF FF FF FF
Reserved1:
        -1
        FF FF FF FF
Started:
        2015-05-25 19:07:13
        B1 48 63 55
Expires:
        Never
        00 00 00 00
Support Exp:
        Never
        00 00 00 00
License ID:
        48-3255-7514-28
Username:
        Giancarlo Russo, HT Srl
Version Flag:
        0x00000007
MD5:
        1A 7C 54 CF 96 02 83 23 F7 07 4C 05 5B B3 B5 05

Save signature to: "sign.bin"
Signature saved

Save decrypted signature to: "sign.decrypted"
Decrypted signature saved

Check signature from .idb

ida_key_checker -i GAME.idb

Database:       "GAME.idb"
Loader:         pe.dll - Portable executable for 80386 (PE)
CPU:            metapc
IDA Version:    700[7.00]
Time:           2021-03-10 22:49:45
CRC:            db68fa31
Binary MD5:     37 5F 8D 73 1F 74 AC A9 4B 28 4B 17 46 41 DF D2

Original User:
Pirated Key:    0
Key Number:
        6279
        87 18
Key Version:
        700
        BC 02
License Type:
        Named
        01 00
User Number:
        0
        00 00
Reserved0:
        -1
        FF FF FF FF
Reserved1:
        -1
        FF FF FF FF
Started:
        2017-09-21 10:18:24
        C0 67 C3 59
Expires:
        Never
        00 00 00 00
Support Exp:
        Never
        00 00 00 00
License ID:
        48-3FBD-7F04-2C
Username:
        Jiang Ying, Personal license
Version Flag:
        0x0000000f
MD5:
        D5 6B 3D 90 90 36 99 51 1D 71 D9 64 1C 2B 21 C9

User1:
License Type:
        Named
        01 00
User Number:
        1
        01 00
Reserved0:
        ffffffff
        FF FF FF FF
Reserved1:
        ffffffff
        FF FF FF FF
Started:
        2017-09-21 10:18:24
        C0 67 C3 59
Expires:
        Never
        00 00 00 00
Support Exp:
        2018-09-21 02:00:00
        70 26 A4 5B
License ID:
        48-3FBD-7F04-2C
Username:
        Jiang Ying, Personal license
Version Flag:
        0x0000000f
MD5:
        D5 6B 3D 90 90 36 99 51 1D 71 D9 64 1C 2B 21 C9

Get HexRays license from binary:

ida_key_checker.exe -i hexx64.dll
HEXRAYS_VERSION 7.0.0.170914

IDA ID:
        48-3FBD-7F04-2C
Plugin ID:
        55-BAE5-8A04-93 (x64)
Username:
        Jiang Ying, Personal license
Issued:
        2017-09-21 10:18:34
Support:
        2018-09-21 02:00:00
MD5:
        af4c3c64e8ba7d137cc75e1574ecbf56

About databases

To disable storage of private license details in database use this setting in config (cfg/ida.cfg)

STORE_USER_INFO = NO

Libs

bigint

md5

cpp-base64

idb3 (updated fork idb3)