Flash cracking and encryption

Encryption | crack

On flash cracking and anti-cracking

In some of the noble forum, talking about the operation of the crack is expressly prohibited or even attract endless contempt. I've always had a strange feeling about this point. It is true that respect for originality is a virtue. But for a tool that cannot speak, does it have a good or bad point in itself? Those who use these tools are the ones who have good and evil points.

Because it is impossible to control the scale, we have to reject it, which is a customary style of Chinese officials and even international officials. Freedom of speech has become a cloak for everyone to advocate but always be the victim of it. Freedom, also has degrees.

Cracking and anti-cracking are the opposite bodies that will exist at the same time. Just like making viruses and protecting against viruses. Because the speech that makes the virus will not appear openly in some noble occasions, so whenever the virus attacks, the side of prevention is always less than defense. This is of course, how several hackers in the world will introduced herself?

Fortunately, Flash cracking is an open technology. Unfortunately, however, this public technology has been despised as a dirty tactic. To be fair, there are some decent men in this, but there are some people who have the last set of people. This reminds me of a sentence: "Better to do really careful, not to be a hypocrite." ”

That being the case, why can't we discuss it in an upright manner for this magical technology? What we would like to see is not the sneaking, but the lessons from the break, from the precautions.

First, crack the article

The cracking discussed here includes extracting SWF, cracking encrypted and unencrypted SWF, commonly referred to as "SWF to Fla".

to get the SWF tool :

• Flash Saver-Save SWF in Web page
• Flash file Format Converter (Flashchanger)-Convert an EXE with no shell to SwF
• Flash vampires-use them when they have to.
  A wide range of extraction, as long as you can see the Flash window, including shell and shell of the EXE, Web pages and so on. In the use of Flash vampire extraction SWF is not recommended to do other operations, or speed will become extremely slow, poorly configured machines may panic. This is also the current version of the software (v2.2) One of the biggest deficiencies. If you want to abort the program, you can end it in Task Manager.

Use temporary Internet Files (ie cache) to download resources such as MV, SWF, etc.

Occasionally some netizens asked me about how to download the online MV, in fact, the method is very simple, as long as the Temporary Internet Files folder can find most of the network resources to find.

Temporary Internet Files is a temporary folder for IE. Directories generally in C:\Documents and Settings\ your username \local Settings\Temporary Internet Files

Tips for using Temporary Internet files to find resources: first clear Temporary Internet files, and then use IE to open or refresh the Web page where you are looking for resources, such as MV. Then refresh temporary Internet Files can be seen, if the resources are relatively large, need a while, such as downloading after the refresh to see.

Sometimes, some resources are hidden. View the properties of the temporary Internet files to determine that there are files inside, but the contents are not visible. At this point, with WinRAR compressed temporary Internet Files can be seen. In order not to waste time, compression, compression, select "Storage." In order to facilitate search, you can extract the compressed temporary Internet Files to another directory, which is now at a glance, distributed in the Content.ie5 folder under the four subfolders.

You can move temporary Internet Files to other partitions, reducing the burden on the system partition and making it easier to find. The Move method is as follows :
Internet Options → general tab → in the Internet temporary files area click settings → move folders → Select a partition, for example, select D to move temporary Internet files to the root of D disk. Finally, you will be prompted to reboot, which is not a reboot, but a logoff. Remember to save the rest of your current work and press OK to log off.

Extract Flash from Word
Test environment: windowsxp/office2003

1. Requires a 16-in-edit tool Winhex
2. Open a Word document that contains flash, click the design mode button in the Control Toolbox to enter design mode, select Flash in Word, copy and paste to any folder, and you will see a "fragment" file.
3. Open Winhex, pull the fragment file into Winhex, click the Drop-down menu "search" → "find 16", search "465753", right-click the "4" position in the search to "465753" and select "Start of block".
4. Continue "search" → "find 16", search "3a5c", and then press and hold F3 until "3a5c not found", click "Yes", in the last search "3a5c" in "C" position on the right click, select "End of Block". (Note: A few cases may not search for "3a5c", then search for "3 a" or "5C", the same method).
5. Click on any place in the selection of the right button → edit → copy select block → Enter a new file → input file name (such as test.swf) → save.

Common cracking tools

When it comes to cracking, many friends will think of the popular flash-elves. The following are commonly used cracking tools, according to the frequency of my use, respectively:

• Shuo Sothink (SWF decompiler)
• Action Script Viewer (ASV)
• Imperator FLA (with user translated as "Roman Ruler")
  (This is my first known tool to restore SWF, unfortunately has been concerned about not found more than 2.0 of the cracked version, only 1.6.9.8 of the cracked version, which is already 3 years ago version, only for Flash6.0 below valid.) )
• The hammer of the Shining Guest (Sothink SWF quicker)

The above four paragraphs, to decompiler most commonly used. ASV Although strong, but in the practical aspect is inferior to decompiler, this should also be why for several years Decompiler can be popular for a long time. and ASV deal with Flashincrypt encrypted SWF is easy, this greatly make up for the lack of decompiler. Many netizens know to use ASV to view SWF, but do not know how to use it to restore SWF to FLA, take 5.01 version as example, just two steps:

1. Open the SWF file waiting to be cracked (support for drag-and-drop open), Output rebuild data (File→export Rebuild (JSFL) ...) To a directory, for example: Desktop \ Create a new folder.
2. Double-click "REBUILDCOMMAND.JSFL" under the directory and the system will start the Flash rebuild FLA file. Depending on the complexity of the original SWF file, the time required to rebuild the FLA will vary.

Crack PostScript

Cracked SWF, relying mainly on off-the-shelf tools, a variety of tools to use, a not to try another, if the author is intentionally encrypted, depending on the level of the cracker, in the acquisition of SwF will encounter scale can be small difficulties, in the crack will inevitably spend a little bit of thought. If you encounter the SWF Encrypt encrypted works, only to the as helpless. A few days ago heard Flash guest interconnection of the Hunter brother to the SWF Encrypt have cracked the law, but it seems to sell off suspicion, did not see actually.

Second, encrypted article

There are a lot of ways to encrypt this, but here's a more practical approach that I know about:

Change suffix, avoid Flash Saver and other download tools

This method can effectively avoid the Flash Saver and other download tools. So that the extractor has to find files from the cache, to some extent, increase the difficulty of extraction. Suffixes can be changed to gif, JPG, TXT, and so on. Although you can change the suffix, you still need to insert it as a SWF when you insert it into a Web page, and use this SWF to load the movie that was changed.

Limited flash in the designated domain name/URL play (Flash anti-theft chain)

url = "http://www.zhugao.cn";

/*
The following determines the first 20 characters of the URL (the number of characters is modified according to your URL), and playback fails if it is inconsistent with the URL. Note: SWF can be placed in any directory, as long as the first 20 characters of the URL are correct.
*/

if (_url.substring (0) <>url) {
gotoAndStop (2);

/*
There are a few things you can do here, for example, set local playback security in your publishing settings to access only the network, and then do countless windows here.
Onenterframe = function () {
GetURL ("http://www.zhugao.cn", "_blank");
}
*/

}else{
gotoAndPlay (3); Skip to normal playback
}

For readability, the following code is not commented:

url = "http://www.zhugao.cn";
if (_url.substring (0) <>url) {
gotoAndStop (2);
}else{
gotoAndPlay (3);
}

If you want to allow multiple domain names, you can write this:
url = "http://www.zhugao.cn";
URL2 = "http://zhugao.cn";
if ((_url.substring (0) ==url) | | (_url.substring (0) ==url2)) {
gotoAndPlay (3);
}else{
gotoAndStop (2);
}

Note : Use this method to export the tips in the design process:
Open with IE to open the specified destination URL to avoid frequent pop-up windows in the export, if not valid, please set the default browser to IE, close the export of the player window to continue editing. Sometimes flash software will be forced to end this error, please save the document before exporting, remember!

Common encryption Tools

• SWF Encrypt
  Can effectively prevent the current popular almost all cracked tools to its encrypted works as viewed. Updated in October 2006 to 3.0.12, although the encrypted file still has a significant increase (depending on the complexity of the original SWF, the increase varies), however, it is heartening that radial gradients have been supported to support Flash8.0. Encryption tip: Decompose SWF by encryption to try to avoid the problem of bulky individual files after encryption.
• Flashincrypt
  It is easy to prevent the current version of the Flash sprite as viewed from its encrypted works, and the encrypted file almost keeps the original file size. Unfortunately, the Action Script Viewer can not be prevented from more than 5.0 versions.

Appropriate application combined with JavaScript

Encrypt JS, so as to achieve the indirect encryption SWF. Related tools and examples:

• T4nk JS Obfuscation Tool
  Obfuscation encryption for JavaScript.
• Encrypt HTML
  Encrypt web script, including HTML source code, JavaScript, VBScript, text, links and graphics.
• Communication from Flash to JavaScript, from JavaScript to Flash
• List of JavaScript methods that control Flash Player:
  • Playing animation: Play ()
  Example: (The Flash ID in a Web page). Play ();
  • Stop animation: Stopplay ()
  • Whether the animation is playing: IsPlaying ()
  • Jump to A frame: Gotoframe (frame_number)
  • Get the total number of frames of animation: Totalframes ()
  • Number of frames in the current animation: Currentframe ()
  • Return animation to the first frame: rewind ()
  • Enlarge the specified area: Setzoomrect (Left,top,right,buttom)
  • Change animation size: Zoom (percent)
  • Translate the animation in x,y direction: Pan (X_position,y_position,unit)
  • Returns the percentage of animation that is loaded: percentloaded ()
  • Load Animation: Loadmovie (Level_number,path)
  Example: (The Flash ID in a Web page). Loadmovie (0, "***/***.swf");
  Movie_clip jump to a specified number of frames: Tgotoframe (Movie_clip,frame_number)
  Example: (The Flash ID in a Web page). Tgotoframe ("_root. Instance name", number of frames);
  Movie_clip jumps to the specified label: Tgotolabel (Movie_clip,label_name)
  Example: (The Flash ID in a Web page). Tgotolabel ("_root. Instance name", "label name");
  • Postback Movie_clip Current frame: tcurrentframe (movie_clip)
  • Return Movie_clip current tag: Tcurrentlabel (Movie_clip)
  • Play Movie_clip:tplay (Movie_clip)
  • Stop Movie_clip playback: Tstopplay (movie_clip)
  • Get variable: getvariable (variable_name)
  • Variable assignment: setvariable (variable_name,value)
  Call the Action:tcallframe (Movie_clip,frame_number) on the specified frame
  call the Action:tcalllabel on the specified label (Movie_clip,label)
  • Get Movie_clip's specified properties: Tgetproperty (Movie_clip,property)
  • Set the specified properties for Movie_clip: Tsetproperty (Movie_clip,property,number)

Insert Flash in Word
Test environment: windowsxp/office2003

Can be used in the independent file to the customer, although the previous method to extract the SWF from Word, but this method still has some preventive effect.

1. Create a new Word document and save it.
2. In Word, click the drop-down menu view → toolbars → Control toolbox.
3. Click More controls in the Control Toolbox and select Shockwave Flash Object in the list.
4. Right-click the Flash playback control that you inserted in and select Properties.
5. In the "Movie" column of the Properties window, enter the path and filename of the Flash animation, using an absolute path that can be used in the following two ways:
   file:///C:/test/test.swf
   http://www.zhugao.cn/test.swf
6. Set the "Embedmovie" item to "True" so that flash is embedded in Word. "Height" and "width" are the Flash's high and wide respectively. "Scale" defaults to ShowAll, for scaling mode, always displays all of the content in Flash, if changed to Noscale will always be 1:1 proportions, will not scale the contents of Flash.
7. Click the exit Design mode button on the Control Toolbox to play flash in Word. Press the button again to pause playback and enter design mode. If Flash is not displayed at the time, save your exit word, open the Word document, and click the "Exit Design mode" button to see Flash.

Packaged into a shell exe

With the default program of Flash packaged EXE is very easy to turn into Swf,swfkit is a very good packers packaged software, not easy to be restored.

Third, PostScript

Cracking requires a variety of methods or tools for the integrated use of encryption, the need to be integrated according to the use of encryption.

recommended encryption scheme for SWF for network :
Change the suffix, restrict playback in the specified domain name, decompose into multiple SWF and encrypt with SWF encrypt.
This scheme mainly relies on the SWF Encrypt, the protection of the works as, once the SWF Encrypt is cracked software effective attack, this scheme is declared bankrupt.