plc.myforum.ro

Hexados · Member junior Joined: 22 Sep 2017 Posts: 52

Hello all,

I've been reading around quite a bit about this, and it seems like there is a way to not only crack RSLogix 500 Pro (as most of you may already have done), but also a way to bypass the password check so that one can download the program from any SLC 5, 500, Micrologix series, etc. In other words, the uploader is no longer prompted with the password during the upload EVEN IF THE PROGRAM IS PASSWORD PROTECTED ON THE PLC!

This is done by changing hex values to a certain "jmp" (jump) instruction defined by the values 74 14 near the Allen-Bradley master password function to 90 90 (the "nop" operation), all in the "rs500.exe" in the installation file. With that said, it is different with every version, and I'm honestly looking for this bypass, but I'm unable to really find it, and I'm certainly not going to change every "jmp" instruction out there even when I do open it up with a dedicated tool to access all the instructions (no, it's not Notepad++, nor is it HxD).

So, I'm wondering in which address is this password check located in v11 and v12 of RSLogix. Please let me know, and thank you all in advance!!