plc.myforum.ro Forum Index plc.myforum.ro
PLCs users www.plc.myforum.ro!
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Remove Password Project S7-200

 
Post new topic   Reply to topic    plc.myforum.ro Forum Index -> Siemens Hardware & Software
View previous topic :: View next topic  
Author Message
mayo
Administrator
Administrator


Joined: 14 Jun 2009
Posts: 700

PostPosted: 07/08/2011 17:16    Post subject: Remove Password Project S7-200 Reply with quote

The program S7_Unlock was written for passwords up to 8 characters ... In the near future it will be updated.
http://www.2shared.com/file/9Miamk7I/Unlock_and_converter_MMC_Image.html

But Linkinx64 developped another way....
No service packs were installed.
1. Attach to microwin.exe with Ollydbg and set breakpoint at address 0x0052334E (Raw offset: 0x0012334E) in module microwin.exe (add esp,14)
2. When you trying to open protected project type any password and click OK. The program will be caught at the specified breakpoint (press SHIFT+F9 if Olly got exception before breakpoint).
3. Open Memory window (Alt+M in Olly). Memory search pattern (ASCII): R04.00



4. Look at 20-30 follow bytes after found pattern and you'll see it ..

Look at this image....
http://xmages.net/storage/10/1/0/8/5/upload/bea713e5.png

For another version of microwin the address (breakpoint) can be different. In this case you can search for all executive200.PRJ_Open* function calls and find needed peace of code.

Unpassword video:
http://www.wupload.com/file/74109910/s7-200_project_unpass_proc_with_ollydbg.avi
or....
http://depositfiles.com/files/p5v3sm00l

DigiVis500 crack ....
http://www.2shared.com/file/9Miamk7I/Un%20...%20Image.html


OllyDbg description



A 32-bit assembler level analysing debugger for Microsoft Windows.
The OllyDbg application was developed to be a 32-bit assembler level analysing debugger for Microsoft Windows. Emphasis on binary code analysis makes it particularly useful in cases where source is unavailable.

NOTE:
This software is a shareware. To use this program on a permanent basis or for commercial purposes, you should register it by sending filled registration form to Ollydbg@t-online.de. The registration is free of charge and assumes no financial or other obligations from either side - just be fair and let me know that you like this software. Even your personal data in the registration form is optional (use your nickname or pseudonym if you want).

Here are some key features of "OllyDbg":

· Intuitive user interface, no cryptical commands
· Code analysis - traces registers, recognizes procedures, loops, API calls, switches, tables, constants and strings
· Directly loads and debugs DLLs

· Object file scanning - locates routines from object files and libraries
· Allows for user-defined labels, comments and function descriptions
· Understands debugging information in Borland® format
· Saves patches between sessions, writes them back to executable file and updates fixups
· Open architecture - many third-party plugins are available
· No installation - no trash in registry or system directories
· Debugs multithread applications
· Attaches to running programs
· Configurable disassembler, supports both MASM and DESăVâRÈ™IT formats
· MMX, 3DNow! and SSE data types and instructions, including Athlon extensions
· Full UNICODE support
· Dynamically recognizes ASCII and UNICODE strings - also in Delphi format!
· Recognizes complex code constructs, like call to jump to procedure
· Decodes calls to more than 1900 standard API and 400 C functions
· Gives context-sensitive help on API functions from external help file
· Sets conditional, logging, memory and hardware breakpoints
· Traces program execution, logs arguments of known functions
· Shows fixups
· Dynamically traces stack frames
· Searches for imprecise commands and masked binary sequences
· Searches whole allocated memory
· Finds references to constant or address range
· Examines and modifies memory, sets breakpoints and pauses program on-the-fly
· Assembles commands into the shortest binary form
· Starts from the floppy disk


Requirements:

· 586/100 processor (586/300+ recommended)
· Microsoft Windows 95, Windows 98, Windows NT 4.0 (Service Pack 2 or higher), Windows 2000 or higher operational system
· 64 MB physical memory (128 MB recommended)
· At least 2 MB free disk space
· VGA display (SVGA with screen resolution at least 800x600 is strongly recommended)
· Mouse or compatible pointing device (required)
Back to top
View user's profile Send private message
protable
Junior 2
Junior 2


Joined: 02 Feb 2011
Posts: 37

PostPosted: 28/06/2012 04:14    Post subject: Reply with quote

relinks
[url]http://letitbit.net/download/97822.94fa1053a71c159b27609e5ed8ff/s7-200_project_unpass_procedure_with_ollydbg.avi.html[/url]
Back to top
View user's profile Send private message
romax
Junior
Junior


Joined: 24 Mar 2012
Posts: 9

PostPosted: 22/01/2013 18:45    Post subject: Reply with quote

little help please
i couldn't upload the file from a 222 cpu cause it asks for password as soon as i try to upload.. i'm using microwin v 4.0.9.25 and siemens pc adapter
6es7 972-0cb20-0xa0 .
so can i use the ollydebug method to interact with the password when it appears or ollydebug only works with files that i already have on my hard disk
if there is any way that i can upload the file to my computer then use regular ollydebug method it would be helpful thx
Back to top
View user's profile Send private message
messer
Senior
Senior


Joined: 08 Mar 2012
Posts: 2059
Location: Europe

PostPosted: 26/01/2013 14:06    Post subject: Reply with quote

romax wrote:
little help please
i couldn't upload the file from a 222 cpu cause it asks for password as soon as i try to upload.. i'm using microwin v 4.0.9.25 and siemens pc adapter
6es7 972-0cb20-0xa0 .
so can i use the ollydebug method to interact with the password when it appears or ollydebug only works with files that i already have on my hard disk
if there is any way that i can upload the file to my computer then use regular ollydebug method it would be helpful thx


ollydbg can be used if you have the project...in your case you have to use a USB/Serial sniffer...to catch the password from communication..
Back to top
View user's profile Send private message
romax
Junior
Junior


Joined: 24 Mar 2012
Posts: 9

PostPosted: 27/01/2013 13:21    Post subject: Reply with quote

does this work as a sniffer or is there any better application
https://www.rapidshare.com/files/3527454295/unlockchiness7-200passsword.rar
Back to top
View user's profile Send private message
messer
Senior
Senior


Joined: 08 Mar 2012
Posts: 2059
Location: Europe

PostPosted: 27/01/2013 17:37    Post subject: Reply with quote

romax wrote:
does this work as a sniffer or is there any better application
https://www.rapidshare.com/files/3527454295/unlockchiness7-200passsword.rar


I'll put something there....
http://plc.myforum.ro/step-7-microwin-v40-updates-sp4-sp5-sp6-sp9-vt46.html
Back to top
View user's profile Send private message
romax
Junior
Junior


Joined: 24 Mar 2012
Posts: 9

PostPosted: 28/01/2013 17:57    Post subject: Reply with quote

hey messer i couldn't find what u mean u will put in the other post ??
Back to top
View user's profile Send private message
somkuany
Junior
Junior


Joined: 15 Mar 2014
Posts: 1

PostPosted: 15/03/2014 07:28    Post subject: x Reply with quote

xxxxx

Last edited by somkuany on 29/03/2014 00:41; edited 4 times in total
Back to top
View user's profile Send private message
rohit02988
Member
Member


Joined: 24 Jun 2013
Posts: 175

PostPosted: 15/03/2014 08:32    Post subject: Reply with quote

how to remove password of level 4 in s7 200...??
Back to top
View user's profile Send private message
ytangsuan
Junior
Junior


Joined: 04 Sep 2013
Posts: 3

PostPosted: 22/03/2014 17:26    Post subject: Find S7-200, S7-300 & S7-400 Passwords Reply with quote

I have solutions of
1. Find Level 3 password of S7-200, Online & Backup your application
2. Find Online-Protected password of S7-300 + S7-400, Online & Backup your application
Just private message me, I will answer asap. It is always not legitimate to unlock a password-protected application. Please whisper or do it underground.
Back to top
View user's profile Send private message
tauqeer
Junior
Junior


Joined: 11 Apr 2014
Posts: 3

PostPosted: 11/04/2014 10:25    Post subject: Password remove Reply with quote

sir



how can remov passworld siemens plc cpu 226
for up louding program .





REGARD


tauqeer .
Back to top
View user's profile Send private message Send e-mail
PSchlu
Junior
Junior


Joined: 25 Oct 2013
Posts: 10

PostPosted: 26/08/2014 09:13    Post subject: Level 3 Online Reply with quote

Is there actually a certain way to unlock Level 3-Password online ?
_________________
Cu
Pschlu
Back to top
View user's profile Send private message
zeck
Member 2
Member 2


Joined: 08 Mar 2014
Posts: 308

PostPosted: 27/08/2014 18:27    Post subject: Re: Level 3 Online Reply with quote

PSchlu wrote:
Is there actually a certain way to unlock Level 3-Password online ?

try in this topic
http://plc.myforum.ro/4-vt46.html?postdays=0&postorder=asc&start=45
Back to top
View user's profile Send private message
PSchlu
Junior
Junior


Joined: 25 Oct 2013
Posts: 10

PostPosted: 28/08/2014 09:20    Post subject: Re: Level 3 Online Reply with quote

zeck wrote:
PSchlu wrote:
Is there actually a certain way to unlock Level 3-Password online ?

try in this topic
http://plc.myforum.ro/4-vt46.html?postdays=0&postorder=asc&start=45


I found this already, but it doesn't help..
_________________
Cu
Pschlu
Back to top
View user's profile Send private message
controlsoft
Junior
Junior


Joined: 17 Feb 2015
Posts: 1

PostPosted: 17/02/2015 22:42    Post subject: Upload project from password protected S7200CN PLC Reply with quote

messer wrote:
romax wrote:
little help please
i couldn't upload the file from a 222 cpu cause it asks for password as soon as i try to upload.. i'm using microwin v 4.0.9.25 and siemens pc adapter
6es7 972-0cb20-0xa0 .
so can i use the ollydebug method to interact with the password when it appears or ollydebug only works with files that i already have on my hard disk
if there is any way that i can upload the file to my computer then use regular ollydebug method it would be helpful thx


ollydbg can be used if you have the project...in your case you have to use a USB/Serial sniffer...to catch the password from communication..


Hi, Wondering if I can get a help with similar issue. I need to upload a project from a S7200CN PLC that asking for password.
Any help would be greatly appreciated.
Thanks,
Back to top
View user's profile Send private message
oleksa
Member
Member


Joined: 27 Dec 2013
Posts: 123

PostPosted: 22/02/2015 13:29    Post subject: Re: Upload project from password protected S7200CN PLC Reply with quote

controlsoft wrote:
messer wrote:
romax wrote:
little help please
i couldn't upload the file from a 222 cpu cause it asks for password as soon as i try to upload.. i'm using microwin v 4.0.9.25 and siemens pc adapter
6es7 972-0cb20-0xa0 .
so can i use the ollydebug method to interact with the password when it appears or ollydebug only works with files that i already have on my hard disk
if there is any way that i can upload the file to my computer then use regular ollydebug method it would be helpful thx


ollydbg can be used if you have the project...in your case you have to use a USB/Serial sniffer...to catch the password from communication..


Hi, Wondering if I can get a help with similar issue. I need to upload a project from a S7200CN PLC that asking for password.
Any help would be greatly appreciated.
Thanks,


did you use this unlock software
Siemens S7-200 + PLC + decrypt s7-200-OK
http://www.datafilehost.com/d/9664e412
Back to top
View user's profile Send private message
kidsolo1412
Junior 2
Junior 2
kidsolo1412

Joined: 29 Sep 2012
Posts: 25
Location: Viet Nam

PostPosted: 25/02/2017 10:37    Post subject: Reply with quote

+Unlock S7-200:
+Unlock CPU password
+Unlock Project
+Unlock POU
Anything about S7-200 Password:
http://www.ebay.com/itm/Unlock-Password-CPU-S7-200-Version-1-0x-and-2-0x-LV3-and-LV4-/152380760422?hash=item237a99e166:g:D24AAOSwnNBXVkhc
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    plc.myforum.ro Forum Index -> Siemens Hardware & Software All times are GMT + 2 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group
Fa-ti si tu propriul forum GRATUIT, pe www.myforum.ro