Resource Hacker

[parkour86]

I downloaded resource hacker from http://www.angusj.com/resourcehacker and was wondering if anyone has played around with it. If you open magicJack.exe with it and click Dialogs you will see a bunch of drop down menus that are disabled to the user. Also there are ways to change the ring and such. If anyone can find a use for this stuff it would be great to know what can be changed.

[steroids]

I downloaded resource hacker from http://www.angusj.com/resourcehacker and was wondering if anyone has played around with it. If you open magicJack.exe with it and click Dialogs you will see a bunch of drop down menus that are disabled to the user. Also there are ways to change the ring and such. If anyone can find a use for this stuff it would be great to know what can be changed.

The really interesting stuff is encrypted. (You can tell the encrypted stuff because it starts with "SJEN".)

Once you figure out how to decrypt it, drop me an email.

[jongasse]

I am about to be a new MJ user and would like to kinda "clone" a MJ.

By cloning the MJ you never have to touch the hardware again.

In the guides available on this forum, you still need to plugin the dongle atleast while installing MJ for the first time.

I think I can bypass that as well (I need to write some custom drivers to emulate the MJ dongle though)

I need people to help me out in this though.

For example, I need someone to trust me and share the contents of a MJ dongle. I know it is risky trusting a stranger like me, but I think I can pull this off with your help.

For example, consider the string SJEN in this case - let's not forget SJPHONE is the software used, so every item has a SJ prefix.

In that case, the 'EN' suffix could very well stand for 'ENglish' or 'ENcrypted' - I can never say for sure unless I have the whole thing with me.

Also remember, we actually can dump the MJ process from memory where eveything is unencrypted.

But before I can guide others myself, I need to have one complete copy of the MJ software with me.

Here is what I want to do :

http://www.phoneservicesupport.com/mj-c ... t7693.html

[maine-iac]

I will give you the contents of my MJ dongle right after you buy the Brooklyn Bridge from me.

Get your own MJ and try to clone that. Then let us know how you did it.

[jongasse]

I bought my MJ. Unfortunately numbers were not available with my area code so I had to return it.

Currently I am waiting for a new set of numbers to be available.

A huge amount of effort will go into cloning a MJ. If that goes well, the convenience will be enormous.

I really don't think there is any reason to worry about security or me running off with your MJ login information - you can always reset the password if someone misuses your account.

If I had to do everything myself, does it make sense for me to tell anyone who I did it?

All I want is some support.

I think I have already figured out how to pass on the MJ serial number without having a MJ hardware plugged in, but I need to test it.

I did not register my MJ - just played with the hardware, so I can't test my understanding.

[jongasse]

The really interesting stuff is encrypted. (You can tell the encrypted stuff because it starts with "SJEN".)

Once you figure out how to decrypt it, drop me an email.

Andy, The uencoded email ID you posted is not really an email ID unless I am mistaken. I need you to verify this, as it was a nice puzzle you gave us to solve.

Code: Select all

Andy Rogers 
email me: U0pFTi16dxTvDdmlaK0+8bg2sZT+DlHLd6Jc7vG3M9ixlSKvrQgccJjf7tU=

This decodes to 88 characters (44 bytes):

Code: Select all

534A454E2D7A7714EF0DD9A568AD3EF1B836B194FE0E51CB77A25CEEF1B733D8B19522AFAD081C7098DFEED5

The above should decode to:

Code: Select all

53 4A 45 4E 2D 7A 77 14 EF 0F 5F A9 68 AD A1 80
F4 E7 C6 99 24 77 40 E2 C1 82 40 14 C7 11 A9 03
50 92 45 C0 B8 A5 76 F9 FB 66 E6 BD

534A454E2D7A7714EF0F5FA968ADA180F4E7C699247740E2C1824014C711A903509245C0B8A576F9FB66E6BD

This encodes in base64 to:

Code: Select all

U0pFTi16dxTvD1+paK2hgPTnxpkkd0DiwYJAFMcRqQNQkkXAuKV2+ftm5r0=

Let us assume ‘steroids’ did not munge/tamper with the data, we have two such values:

Code: Select all

U0pFTi16dxTvDdmlaK0+8bg2sZT+DlHLd6Jc7vG3M9ixlSKvrQgccJjf7tU=
U0pFTi16dxTvD1+paK2hgPTnxpkkd0DiwYJAFMcRqQNQkkXAuKV2+ftm5r0=

The first 9 bytes seem to match (at least within these two pairs) and the first 4 bytes are printable (SJEN), and the later 2D7A7714EF block is common to both.

Printable string A-Z (0x41 – 0x5A), a-z (0x61 – 0x7A)

From the layout of the data, unless parts of it are encrypted, I can bet this is a byte by byte encoding instead of encryption. I can also bet that these strings are not email IDs.