| View previous topic :: View next topic |
| Author |
Message |
mayo Administrator

Joined: 14 Jun 2009 Posts: 700
|
Posted: 07/08/2011 17:16 Post subject: Remove Password Project S7-200 |
|
|
The program S7_Unlock was written for passwords up to 8 characters ... In the near future it will be updated.
http://www.2shared.com/file/9Miamk7I/Unlock_and_converter_MMC_Image.html
But Linkinx64 developped another way....
No service packs were installed.
1. Attach to microwin.exe with Ollydbg and set breakpoint at address 0x0052334E (Raw offset: 0x0012334E) in module microwin.exe (add esp,14)
2. When you trying to open protected project type any password and click OK. The program will be caught at the specified breakpoint (press SHIFT+F9 if Olly got exception before breakpoint).
3. Open Memory window (Alt+M in Olly). Memory search pattern (ASCII): R04.00
4. Look at 20-30 follow bytes after found pattern and you'll see it ..
Look at this image....
http://xmages.net/storage/10/1/0/8/5/upload/bea713e5.png
For another version of microwin the address (breakpoint) can be different. In this case you can search for all executive200.PRJ_Open* function calls and find needed peace of code.
Unpassword video:
http://www.wupload.com/file/74109910/s7-200_project_unpass_proc_with_ollydbg.avi
or....
http://depositfiles.com/files/p5v3sm00l
DigiVis500 crack ....
http://www.2shared.com/file/9Miamk7I/Un%20...%20Image.html
OllyDbg description
A 32-bit assembler level analysing debugger for Microsoft Windows.
The OllyDbg application was developed to be a 32-bit assembler level analysing debugger for Microsoft Windows. Emphasis on binary code analysis makes it particularly useful in cases where source is unavailable.
NOTE:
This software is a shareware. To use this program on a permanent basis or for commercial purposes, you should register it by sending filled registration form to Ollydbg@t-online.de. The registration is free of charge and assumes no financial or other obligations from either side - just be fair and let me know that you like this software. Even your personal data in the registration form is optional (use your nickname or pseudonym if you want).
Here are some key features of "OllyDbg":
· Intuitive user interface, no cryptical commands
· Code analysis - traces registers, recognizes procedures, loops, API calls, switches, tables, constants and strings
· Directly loads and debugs DLLs
· Object file scanning - locates routines from object files and libraries
· Allows for user-defined labels, comments and function descriptions
· Understands debugging information in Borland® format
· Saves patches between sessions, writes them back to executable file and updates fixups
· Open architecture - many third-party plugins are available
· No installation - no trash in registry or system directories
· Debugs multithread applications
· Attaches to running programs
· Configurable disassembler, supports both MASM and DESăVâRÈ™IT formats
· MMX, 3DNow! and SSE data types and instructions, including Athlon extensions
· Full UNICODE support
· Dynamically recognizes ASCII and UNICODE strings - also in Delphi format!
· Recognizes complex code constructs, like call to jump to procedure
· Decodes calls to more than 1900 standard API and 400 C functions
· Gives context-sensitive help on API functions from external help file
· Sets conditional, logging, memory and hardware breakpoints
· Traces program execution, logs arguments of known functions
· Shows fixups
· Dynamically traces stack frames
· Searches for imprecise commands and masked binary sequences
· Searches whole allocated memory
· Finds references to constant or address range
· Examines and modifies memory, sets breakpoints and pauses program on-the-fly
· Assembles commands into the shortest binary form
· Starts from the floppy disk
Requirements:
· 586/100 processor (586/300+ recommended)
· Microsoft Windows 95, Windows 98, Windows NT 4.0 (Service Pack 2 or higher), Windows 2000 or higher operational system
· 64 MB physical memory (128 MB recommended)
· At least 2 MB free disk space
· VGA display (SVGA with screen resolution at least 800x600 is strongly recommended)
· Mouse or compatible pointing device (required) |
|
| Back to top |
|
 |
protable Junior 2

Joined: 02 Feb 2011 Posts: 37
|
Posted: 28/06/2012 04:14 Post subject: |
|
|
relinks
[url]http://letitbit.net/download/97822.94fa1053a71c159b27609e5ed8ff/s7-200_project_unpass_procedure_with_ollydbg.avi.html[/url] |
|
| Back to top |
|
 |
romax Junior

Joined: 24 Mar 2012 Posts: 9
|
Posted: 22/01/2013 18:45 Post subject: |
|
|
little help please
i couldn't upload the file from a 222 cpu cause it asks for password as soon as i try to upload.. i'm using microwin v 4.0.9.25 and siemens pc adapter
6es7 972-0cb20-0xa0 .
so can i use the ollydebug method to interact with the password when it appears or ollydebug only works with files that i already have on my hard disk
if there is any way that i can upload the file to my computer then use regular ollydebug method it would be helpful thx |
|
| Back to top |
|
 |
messer Senior

Joined: 08 Mar 2012 Posts: 2059 Location: Europe
|
Posted: 26/01/2013 14:06 Post subject: |
|
|
| romax wrote: | little help please
i couldn't upload the file from a 222 cpu cause it asks for password as soon as i try to upload.. i'm using microwin v 4.0.9.25 and siemens pc adapter
6es7 972-0cb20-0xa0 .
so can i use the ollydebug method to interact with the password when it appears or ollydebug only works with files that i already have on my hard disk
if there is any way that i can upload the file to my computer then use regular ollydebug method it would be helpful thx |
ollydbg can be used if you have the project...in your case you have to use a USB/Serial sniffer...to catch the password from communication.. |
|
| Back to top |
|
 |
romax Junior

Joined: 24 Mar 2012 Posts: 9
|
Posted: 27/01/2013 13:21 Post subject: |
|
|
does this work as a sniffer or is there any better application
https://www.rapidshare.com/files/3527454295/unlockchiness7-200passsword.rar |
|
| Back to top |
|
 |
messer Senior

Joined: 08 Mar 2012 Posts: 2059 Location: Europe
|
Posted: 27/01/2013 17:37 Post subject: |
|
|
| romax wrote: | does this work as a sniffer or is there any better application
https://www.rapidshare.com/files/3527454295/unlockchiness7-200passsword.rar |
I'll put something there....
http://plc.myforum.ro/step-7-microwin-v40-updates-sp4-sp5-sp6-sp9-vt46.html |
|
| Back to top |
|
 |
romax Junior

Joined: 24 Mar 2012 Posts: 9
|
Posted: 28/01/2013 17:57 Post subject: |
|
|
| hey messer i couldn't find what u mean u will put in the other post ?? |
|
| Back to top |
|
 |
somkuany Junior

Joined: 15 Mar 2014 Posts: 1
|
Posted: 15/03/2014 07:28 Post subject: x |
|
|
xxxxx
Last edited by somkuany on 29/03/2014 00:41; edited 4 times in total |
|
| Back to top |
|
 |
rohit02988 Member

Joined: 24 Jun 2013 Posts: 175
|
Posted: 15/03/2014 08:32 Post subject: |
|
|
| how to remove password of level 4 in s7 200...?? |
|
| Back to top |
|
 |
ytangsuan Junior

Joined: 04 Sep 2013 Posts: 3
|
Posted: 22/03/2014 17:26 Post subject: Find S7-200, S7-300 & S7-400 Passwords |
|
|
I have solutions of
1. Find Level 3 password of S7-200, Online & Backup your application
2. Find Online-Protected password of S7-300 + S7-400, Online & Backup your application
Just private message me, I will answer asap. It is always not legitimate to unlock a password-protected application. Please whisper or do it underground. |
|
| Back to top |
|
 |
tauqeer Junior

Joined: 11 Apr 2014 Posts: 3
|
Posted: 11/04/2014 10:25 Post subject: Password remove |
|
|
sir
how can remov passworld siemens plc cpu 226
for up louding program .
REGARD
tauqeer . |
|
| Back to top |
|
 |
PSchlu Junior

Joined: 25 Oct 2013 Posts: 10
|
Posted: 26/08/2014 09:13 Post subject: Level 3 Online |
|
|
Is there actually a certain way to unlock Level 3-Password online ? _________________ Cu
Pschlu |
|
| Back to top |
|
 |
zeck Member 2

Joined: 08 Mar 2014 Posts: 308
|
Posted: 27/08/2014 18:27 Post subject: Re: Level 3 Online |
|
|
| PSchlu wrote: | | Is there actually a certain way to unlock Level 3-Password online ? |
try in this topic
http://plc.myforum.ro/4-vt46.html?postdays=0&postorder=asc&start=45 |
|
| Back to top |
|
 |
PSchlu Junior

Joined: 25 Oct 2013 Posts: 10
|
Posted: 28/08/2014 09:20 Post subject: Re: Level 3 Online |
|
|
| zeck wrote: | | PSchlu wrote: | | Is there actually a certain way to unlock Level 3-Password online ? |
try in this topic
http://plc.myforum.ro/4-vt46.html?postdays=0&postorder=asc&start=45 |
I found this already, but it doesn't help.. _________________ Cu
Pschlu |
|
| Back to top |
|
 |
controlsoft Junior

Joined: 17 Feb 2015 Posts: 1
|
Posted: 17/02/2015 22:42 Post subject: Upload project from password protected S7200CN PLC |
|
|
| messer wrote: | | romax wrote: | little help please
i couldn't upload the file from a 222 cpu cause it asks for password as soon as i try to upload.. i'm using microwin v 4.0.9.25 and siemens pc adapter
6es7 972-0cb20-0xa0 .
so can i use the ollydebug method to interact with the password when it appears or ollydebug only works with files that i already have on my hard disk
if there is any way that i can upload the file to my computer then use regular ollydebug method it would be helpful thx |
ollydbg can be used if you have the project...in your case you have to use a USB/Serial sniffer...to catch the password from communication.. |
Hi, Wondering if I can get a help with similar issue. I need to upload a project from a S7200CN PLC that asking for password.
Any help would be greatly appreciated.
Thanks, |
|
| Back to top |
|
 |
oleksa Member

Joined: 27 Dec 2013 Posts: 123
|
Posted: 22/02/2015 13:29 Post subject: Re: Upload project from password protected S7200CN PLC |
|
|
| controlsoft wrote: | | messer wrote: | | romax wrote: | little help please
i couldn't upload the file from a 222 cpu cause it asks for password as soon as i try to upload.. i'm using microwin v 4.0.9.25 and siemens pc adapter
6es7 972-0cb20-0xa0 .
so can i use the ollydebug method to interact with the password when it appears or ollydebug only works with files that i already have on my hard disk
if there is any way that i can upload the file to my computer then use regular ollydebug method it would be helpful thx |
ollydbg can be used if you have the project...in your case you have to use a USB/Serial sniffer...to catch the password from communication.. |
Hi, Wondering if I can get a help with similar issue. I need to upload a project from a S7200CN PLC that asking for password.
Any help would be greatly appreciated.
Thanks, |
did you use this unlock software
Siemens S7-200 + PLC + decrypt s7-200-OK
http://www.datafilehost.com/d/9664e412 |
|
| Back to top |
|
 |
kidsolo1412 Junior 2


Joined: 29 Sep 2012 Posts: 25 Location: Viet Nam
|
Posted: 25/02/2017 10:37 Post subject: |
|
|
+Unlock S7-200:
+Unlock CPU password
+Unlock Project
+Unlock POU
Anything about S7-200 Password:
http://www.ebay.com/itm/Unlock-Password-CPU-S7-200-Version-1-0x-and-2-0x-LV3-and-LV4-/152380760422?hash=item237a99e166:g:D24AAOSwnNBXVkhc |
|
| Back to top |
|
 |
|