ghacks Technology News

Got no Vista key ? Bruteforce one !


As if it would not be easy enough to circumvent the activation of Windows Vista some clever guys managed to bruteforce working Windows Vista keys. Bruteforcing simply means that the script is testing about 20000 keys per hour changing the product key to a possible working one if one is found. I’m not sure why Microsoft has no protection against this kind of attack but they surely will add some sort of protection soon – something in the like of banning IPs that check more than x keys per minute.

It seems that the process requires to replace the Software License Manager for Windows Vista – slmgr.vbs – with an altered version that makes the process possible. It is currently not possible to download the needed files from the website that published the method first. The forum does not accept new registrations at this point and the main page contains only a summary of the process without a download link.

I personally think that it is interesting that this method is working at all but would advise everyone to be very cautious about it.

source: keznews.com

Update:

Adrian corrected my assumption that the bruteforce attack would hammer Microsoft servers to check the keys. This is apparently not the case. Keys are generated on the local pc and the user has to try the activation with the key manually. This is the only time the Microsoft server is contacted.




Tags: , , , , , ,
Categories: Hacking, Operating Systems, Windows


Read Related Posts


6 Responses to “Got no Vista key ? Bruteforce one !”

  1. Martin says:

    If you are really looking for these files you can find them at the piratebay org

  2. Allie says:

    Hey Martin

    Thanks for posting this. Real interesting. It seems like Microsoft is having a hard time of late. (I mean, I would say Vista’s response has been a little less than steller.

    I read somewhere else that there’s a chance the cracked keys could overlap with legit ones — and that legit purchasers of Vista could see their licenses canceled. I can’t imagine that this will improve things in Redmond.

    - Allie

  3. Some clarification …

    This technique does not in any way hammer Microsoft’s activation servers, the checking of the keys is done client side by the Vista installation using slmgr.vbs. There is no back and forth with the servers. Activation is done once a key that fits the bill is found.

    More info here:

    http://blogs.zdnet.com/hardware/?p=296

  4. Martin says:

    Adrian thanks for the clarification.

    So, the only difference between a “normal” keygen and this method would be that this method tests the compatibility of the current Vista installation with every generated key ?

  5. irish says:

    Looks like the key generator is fake and is admitted as ‘not working’ by its author.

    http://keznews.com/2442_Windows_Vista_Keygen_a_Hoax_

  6. Martin says:

    Now that is mighty interesting, is not it ?

Leave a Reply   Follow Ghacks   Subscribe To Comment Rss

© 2005-2009 Ghacks.net. All Rights Reserved. Privacy Policy - About Us