| View previous topic :: View next topic |
| Author |
Message |
mojo Senior

Joined: 01 Oct 2011 Posts: 2404
|
Posted: 21/03/2012 07:55 Post subject: Find your password in S7-300/400 |
|
|
| Quote: | Bornfree (copyright) made a little tool to find passwords in the PLC via bruteforce.
It is only for TCP and only for numbers now, because I don't need more. If you like it, I propably will include characters for searching the password.
It is a console application and tests about 6000 to 7000 passwords per minute. |
Download :
http://netload.in/dateiFfe2qYsnI6/S7GetPwd.rar.htm
Not tested with virusscanner.... |
|
| Back to top |
|
 |
cuongvcs Member 2

Joined: 09 Dec 2011 Posts: 263 Location: DaNang, Viet Nam
|
Posted: 02/04/2012 10:57 Post subject: |
|
|
Hi you
It only use for EtherNet Network or other network.
Thank this port. |
|
| Back to top |
|
 |
rajume06 Member junior

Joined: 06 Jun 2012 Posts: 82 Location: Bangladesh
|
Posted: 11/06/2012 12:30 Post subject: Re: Find your password in S7-300/400 |
|
|
hi mojo
I am trying to download from your link"http://netload.in/dateiFfe2qYsnI6/S7GetPwd.rar.htm" but it's not working.please, give me other link......... |
|
| Back to top |
|
 |
mojo Senior

Joined: 01 Oct 2011 Posts: 2404
|
Posted: 12/06/2012 06:59 Post subject: Re: Find your password in S7-300/400 |
|
|
| rajume06 wrote: | hi mojo
I am trying to download from your link"http://netload.in/dateiFfe2qYsnI6/S7GetPwd.rar.htm" but it's not working.please, give me other link......... |
This was an attempt but it has some serious drawbacks...
Try this for unpassword S7 projects:
https://rapidshare.com/files/2711215550/pss7.exe
Select the project folder and if the processors have a password it will appear in the right part of the program.
Projects supported by any version of STEP7 |
|
| Back to top |
|
 |
bornfree Junior

Joined: 22 Mar 2012 Posts: 6
|
Posted: 03/07/2012 11:21 Post subject: |
|
|
@mojo: This only works if you already have the project!
My new version for bruteforcing is here:
[url]http://www.filefactory.com/file/6843xoizvfr7/n/S7GetPwd.exe[/url]
Greetings! |
|
| Back to top |
|
 |
bornfree Junior

Joined: 22 Mar 2012 Posts: 6
|
Posted: 14/07/2012 18:27 Post subject: S7GetProjPwd |
|
|
Hello, I just finished my new little tool called S7GetProjPwd. It is nearly the same like pss7, and it does the same --> it is used to get the password from STEP7 project.
http://www.filefactory.com/file/67845qpehmhz/n/S7GetProjPwd.exe
https://www.virustotal.com/file/216f8d26f31f3c8e220b655c5dcac5936c3df8c10f4421ecd3b8be47bf8230e6/analysis/1342282174/
I hope it is useful for somebody. |
|
| Back to top |
|
 |
mojo Senior

Joined: 01 Oct 2011 Posts: 2404
|
Posted: 14/07/2012 19:36 Post subject: Re: S7GetProjPwd |
|
|
| bornfree wrote: | Hello, I just finished my new little tool called S7GetProjPwd. It is nearly the same like pss7, and it does the same --> it is used to get the password from STEP7 project.
http://www.filefactory.com/file/67845qpehmhz/n/S7GetProjPwd.exe
https://www.virustotal.com/file/216f8d26f31f3c8e220b655c5dcac5936c3df8c10f4421ecd3b8be47bf8230e6/analysis/1342282174/
I hope it is useful for somebody. |
Thank you bornfree, you are great...
With your permission I add new links for users..
https://www.rapidshare.com/files/700158253/S7GetProjPwd.exe
http://www.4shared.com/file/QusPtOiT/S7GetProjPwd.html
Thank you again. |
|
| Back to top |
|
 |
IlFincoITA Junior

Joined: 05 May 2012 Posts: 1
|
Posted: 05/11/2012 16:31 Post subject: |
|
|
Hi! Has anyone a new link for S7GetPwd.exe I want to try it on my systems.
Thanks a lot... |
|
| Back to top |
|
 |
messer Senior

Joined: 08 Mar 2012 Posts: 2059 Location: Europe
|
Posted: 05/11/2012 20:50 Post subject: |
|
|
| IlFincoITA wrote: | Hi! Has anyone a new link for S7GetPwd.exe I want to try it on my systems.
Thanks a lot... |
link is here:
https://rapidshare.com/files/2616108424/S7GetPwd.rar |
|
| Back to top |
|
 |
jangkibo Junior

Joined: 27 Nov 2012 Posts: 2
|
Posted: 09/12/2012 08:37 Post subject: Re: Find your password in S7-300/400 |
|
|
| mojo wrote: | | Quote: | Bornfree (copyright) made a little tool to find passwords in the PLC via bruteforce.
It is only for TCP and only for numbers now, because I don't need more. If you like it, I propably will conține characters for searching the password.
It is a console application and tests about 6000 to 7000 passwords per minute. |
Download :
http://netload.in/dateiFfe2qYsnI6/S7GetPwd.rar.htm
Not tested with virusscanner.... |
hi mojo, iam new here...:D
all that links above s dead, please re uload |
|
| Back to top |
|
 |
mojo Senior

Joined: 01 Oct 2011 Posts: 2404
|
Posted: 10/12/2012 21:31 Post subject: |
|
|
new link:
http://www.mediafire.com/?r18fgb1nsmr32vn |
|
| Back to top |
|
 |
messer Senior

Joined: 08 Mar 2012 Posts: 2059 Location: Europe
|
Posted: 11/12/2012 21:30 Post subject: unPassword CPU under star in STEP7-projects |
|
|
unPassword CPU under star in STEP7-projects
links:
http://depositfiles.com/files/54maglnxh
http://webfile.ru/6261696
http://upfile.su/5277
http://ge.tt/9bTRJKT/v/0?c
http://www.ziddu.com/download/21088609/pss7_v1.4.exe.html |
|
| Back to top |
|
 |
lizard911 Junior

Joined: 15 Feb 2013 Posts: 3
|
Posted: 15/02/2013 18:38 Post subject: |
|
|
hi,
has anybody a working link for S7GetPwd.exe ?
thanks |
|
| Back to top |
|
 |
messer Senior

Joined: 08 Mar 2012 Posts: 2059 Location: Europe
|
Posted: 15/02/2013 21:41 Post subject: |
|
|
| lizard911 wrote: | hi,
has anybody a working link for S7GetPwd.exe ?
thanks |
link:
http://www.mediafire.com/?kdp8lgdhwx78h1s |
|
| Back to top |
|
 |
ygor Member 3


Joined: 01 Jul 2013 Posts: 548
|
Posted: 24/10/2013 20:19 Post subject: UnPassword Simatic S7300/S7400 v1.5.1 |
|
|
UnPassword Simatic S7300/S7400 v1.5.1
link:
http://www.multiupload.nl/NDBLQ324A7 |
|
| Back to top |
|
 |
ygor Member 3


Joined: 01 Jul 2013 Posts: 548
|
Posted: 30/06/2014 19:30 Post subject: |
|
|
UnPassword Simatic S7300/S7400 v1.6.1
http://www.datafilehost.com/d/5c5236f9 |
|
| Back to top |
|
 |
Acros Junior

Joined: 08 Jan 2019 Posts: 1
|
Posted: 08/01/2019 16:31 Post subject: |
|
|
| Is there any working tools for the S7-300 CPU password? |
|
| Back to top |
|
 |
tripot Member

Joined: 08 Feb 2012 Posts: 185
|
Posted: 08/01/2019 19:11 Post subject: |
|
|
| ygor wrote: | UnPassword Simatic S7300/S7400 v1.6.1
http://www.datafilehost.com/d/5c5236f9 |
Please relink? |
|
| Back to top |
|
 |
ygor Member 3


Joined: 01 Jul 2013 Posts: 548
|
Posted: 08/01/2019 20:20 Post subject: |
|
|
https://megaupload.nz/M3oec1q5b6/Emul_key_for_Progea_Movicon_zip
https://megaupload.nz/N9occ1q8b5/FlexPwl1_rar
https://megaupload.nz/O5o7c2qebb/HELIUM_S7_Tool_rar
https://megaupload.nz/P0ofc9qcbc/FlexRT_rar
https://megaupload.nz/Qdo1cfqbbb/pss7_v1.82_rar
https://megaupload.nz/R8o6caq9b0/S7GetProjPwd_rar
https://megaupload.nz/Sbo4c8qbb1/S7CanOpener_rar
https://megaupload.nz/Teobc8qdb3/PWLAnalyzer_2017_01_16_zip
https://megaupload.nz/U0occ9qdbe/Unlock_and_converter_MMC_Image_S7_v501_rar
https://megaupload.nz/V0o9c7q6b8/Unlocks7200and300_V2.10_rar
https://megaupload.nz/W5oac9qdbc/KeyS7.314_rar
https://megaupload.nz/Ycocc4qdba/H.a.l.1.2_rar |
|
| Back to top |
|
 |
Zer0G Junior

Joined: 05 Jan 2015 Posts: 8
|
Posted: 11/01/2019 14:58 Post subject: |
|
|
| Is it possible do to a image of an S7 400 MC Flash (6ES7952-1KL00-0AA0) with a PG Station or do I need an external prommer from Siemens? |
|
| Back to top |
|
 |
uwett Junior

Joined: 12 May 2018 Posts: 9
|
Posted: 11/01/2019 20:36 Post subject: |
|
|
| Zer0G wrote: | | Is it possible do to a image of an S7 400 MC Flash (6ES7952-1KL00-0AA0) with a PG Station or do I need an external prommer from Siemens? |
Read on
http://plc.myforum.ro/mmc-siemens-vt10662.html
and on
https://cache.industry.siemens.com/dl/files/390/43246390/att_84137/v1/FieldPGM3_Operating_Instructions_EN_en-US.pdf
https://support.industry.siemens.com/cs/document/15399111/how-can-you-also-store-other-files-that-belong-to-the-project-or-plant-on-the-mc-mmc
https://anonfile.com/9c54sdqfb2/Unlock_and_converter_MMC_Image_S7_rar
What PG do you use? |
|
| Back to top |
|
 |
Zer0G Junior

Joined: 05 Jan 2015 Posts: 8
|
Posted: 12/01/2019 09:10 Post subject: |
|
|
Dear uwett,
Thank you for your replay.
The idea is that if I insert the card in the card reader of the PG station this is not seen by the OS, like a generic card reader. This can be accessed only from Simatic manager. I want to access the content of the card directly from Windows.
| Quote: | | What PG do you use? |
[url]https://cache.industry.siemens.com/dl/files/273/27002273/att_106824/v1/BA_FieldPGM2_enu_en-US.pdf[/url] |
|
| Back to top |
|
 |
maersk Member 3


Joined: 17 Aug 2014 Posts: 891
|
Posted: 14/01/2019 16:02 Post subject: |
|
|
PG2 is too old.
Try a Laptop with Card Reader |
|
| Back to top |
|
 |
Zer0G Junior

Joined: 05 Jan 2015 Posts: 8
|
Posted: 14/01/2019 16:13 Post subject: |
|
|
I guess I need a laptop with PCMCIA slot for this kind of card, right?
[url]https://imgur.com/a/M4OUokA[/url] |
|
| Back to top |
|
 |
Zer0G Junior

Joined: 05 Jan 2015 Posts: 8
|
Posted: 21/01/2019 17:08 Post subject: |
|
|
| So...I managed to make a clone after the s7 400 MC but non of the above software works. Any thoughts on how I can retrieve the password from a S7 400 Flash MC? |
|
| Back to top |
|
 |
gutpa43 Junior

Joined: 06 Apr 2019 Posts: 1
|
Posted: 15/05/2019 08:37 Post subject: |
|
|
| Zer0G wrote: | | So...I managed to make a clone after the s7 400 MC but non of the above software works. Any thoughts on how I can retrieve the password from a S7 400 Flash MC? |
https://anonfile.com/nc38F5r5ne/Unlock_and_converter_MMC_Image_S7_rar
https://anonfile.com/o43cFbr6n5/Unlocks7200and300_V2.10_rar
https://anonfile.com/p833F3r8n7/Unlock_and_converter_MMC_Image_S7_v501_rar |
|
| Back to top |
|
 |
MikeC Junior

Joined: 25 Jul 2017 Posts: 6
|
Posted: 20/07/2020 23:08 Post subject: re-upload |
|
|
Hi,
could you re-upload the tools, please?
Megaupload is not available anymore.
BTW. I am interested in the tool to unlock the Step7 v5.5 project password for some of the functions (I cannot see some function blocks).
Thanks,
| ygor wrote: | https://megaupload.nz/M3oec1q5b6/Emul_key_for_Progea_Movicon_zip
https://megaupload.nz/N9occ1q8b5/FlexPwl1_rar
https://megaupload.nz/O5o7c2qebb/HELIUM_S7_Tool_rar
https://megaupload.nz/P0ofc9qcbc/FlexRT_rar
https://megaupload.nz/Qdo1cfqbbb/pss7_v1.82_rar
https://megaupload.nz/R8o6caq9b0/S7GetProjPwd_rar
https://megaupload.nz/Sbo4c8qbb1/S7CanOpener_rar
https://megaupload.nz/Teobc8qdb3/PWLAnalyzer_2017_01_16_zip
https://megaupload.nz/U0occ9qdbe/Unlock_and_converter_MMC_Image_S7_v501_rar
https://megaupload.nz/V0o9c7q6b8/Unlocks7200and300_V2.10_rar
https://megaupload.nz/W5oac9qdbc/KeyS7.314_rar
https://megaupload.nz/Ycocc4qdba/H.a.l.1.2_rar |
|
|
| Back to top |
|
 |
cugpscue Junior

Joined: 02 Jun 2019 Posts: 2
|
Posted: 21/07/2020 17:18 Post subject: |
|
|
use canopen
https://anonfiles.com/dbx5u7Haoc/S7CanOpener_rar |
|
| Back to top |
|
 |
kidsolo1412 Junior 2


Joined: 29 Sep 2012 Posts: 25 Location: Viet Nam
|
Posted: 22/07/2020 06:31 Post subject: UNLOCK S7-300 TOOL 100% WORK AND SAFE |
|
|
I HAVE SAFE TOOL WHICH CAN UNLOCK S7-300/400 UPLOAD PASSWORD
MY WHATSAPP:
+8490603372
MAIL: info@autechvn.com
www.autechvn.com _________________ www.autechvn.com |
|
| Back to top |
|
 |
MikeC Junior

Joined: 25 Jul 2017 Posts: 6
|
Posted: 22/07/2020 07:08 Post subject: |
|
|
Thanks,
canopener did the job of unlocking a few FBs in a step7 project.
| cugpscue wrote: | use canopen
https://anonfiles.com/dbx5u7Haoc/S7CanOpener_rar |
|
|
| Back to top |
|
 |
|