ICC VIN2PIN can be used without dongle?

[mit]

Almost everyone is convinced that the algorithms of ICC are stored in the sense lock dongle :laugh: we are now in the year 2013, the old ICC dongle can't handle too much data so they are putting it in the software. on the ICC website I found "Nissan and Infiniti 2009 models, KEY codes by VIN (more than 80000 of codes added)." That means ICC uses a kind of Rainbow tables for the VIN2KEY, VIN2PIN's. They don't calculate it with the algo's! If you download AD600 (it is based on ICC) software you will see CHV_KEY.dat, CHV_PIN.dat and other files. I think the data is stored in a kind of hashlib, binascii . Offcouse they have crypted it but the code can be figured out. :laugh:

[paul_12345]

what happens when they encrypt the data with a encryption key stored in the dongle, then send the encryted data into the dongle and have the dongle calculate the real data then display it? Good look working that out.

[mit]

what happens when they encrypt the data with a encryption key stored in the dongle, then send the encryted data into the dongle and have the dongle calculate the real data then display it? Good look working that out.

The key could be intercept it by hooking the (api) calls. I don't have a dongle to test.:laugh:

[Meat-Head]

Is this the same idea as AD dongle

br intresting experiment

[paul_12345]

The key could be intercept it by hooking the (api) calls. I don't have a dongle to test.:laugh:

if the data is encrypted and the dongle itself decrypts it then what do you hope to achieve?? you mean dumping all the combinations using the dongle?? you could always do this even if the data was stored in the dongle, but when your only allowed 20 ish calcs a day its going to take a while!

[mit]

AD600 uses ICC dongle

"Advanced Diagnostics have teamed up with Sigmabit to develop the new Code Wizard Pro software program, which is based on the popular and innovative ICC platform."
"A limitation of 25 codes per day is set, which is enough for the majority of"
"Software will be automatically blocked if number of calculated codes is more than 25 per day.
Calculation of codes for 'test purposes', analysis of algorithms, etc count towards this 25 count."

Source http://www.advanced-diagnostics.co.uk/pdf/AD600_manual.pdf


"not allowed to calculate more than 25 codes per day"

Source ICC - Welcome to Immo Code Calculator Project (http://immo-code.com/overview.html)

"You can use ICC dongle in such projects as web/wap/sms server for PIN code calculations"

"Also we can offer ICC as dynamic library (dll) for using all of ICC features in your own projects. Just write your own GUI (Graphical User Interface) and simple call ICC's code calculation algorithms using provided API."

Source ICC - Ready for Integration with Your Own Projects (http://immo-code.com/overview_integration.html)



Even there software icon is the same. If someone got ICC please try: AD100Pro Truck Key Programming, Truck Immobiliser Systems: Advanced Diagnostics (http://www.advanced-diagnostics.co.uk/htm/Product-Downloads-AD600-107.php)
It could work.

[mit]

if the data is encrypted and the dongle itself decrypts it then what do you hope to achieve?? you mean dumping all the combinations using the dongle?? you could always do this even if the data was stored in the dongle, but when your only allowed 20 ish calcs a day its going to take a while!

You think it on the hard way. With api hooking you can read/modify all the traffic between dongle and software

Here more info: http://en.wikipedia.org/wiki/Hooking
http://www.codeproject.com/Articles/2082/API-hooking-revealed

[paul_12345]

You think it on the hard way. With api hooking you can read/modify all the traffic between dongle and software

Here more info: Hooking - Wikipedia, the free encyclopedia (http://en.wikipedia.org/wiki/Hooking)
API hooking revealed - CodeProject (http://www.codeproject.com/Articles/2082/API-hooking-revealed)

I know what a hook is.. you think to simple, if the data is encrypted which is more than likely is you can hook all you want but the dongle will still have to be used to decrypt the data which still limits you to 25 calcs a day.

You would never see any of the decrypt function as it would be all in the dongle, so please feel free to explain how exactly is hooking going to help??

[912secured]

It cannot be done simply. The sigmabit files without the dongle thought we could log and code be same (nope) for key and passwords. He released the file to decrypt mvp and pro every 6 or 5th line in the file is clear (made cracking MD5 easy to pop) and another mvp decoding software 8 byte code (thanks,he only released after found out new system was hitting the streat). If someone has the first soft hdd died it was on could use????