What's new
RevTeam.Re - Reverse Engineering Team

Welcome Guest! Register a free account today to become a member! Once signed in, you'll be able to participate on this site by adding your own topics and posts, as well as connect with other members through your own private inbox! Register and wait for our approve!

Passware Kit Mobile 2025

eviltrikz

Member
Joined
Jul 21, 2024
Messages
7
Reaction score
49
For the ones who wants to take a look, here are some informations about how Passware (2025) works.

Passware is a
Please, Log in to view URLs content!
(
Please, Log in to view URLs content!
)
This means you'll have to deal with the ASAR file "resources/app.asar" you can unpack using this command:
npx asar extract "%ProgramFiles%\Passware\Passware Kit Mobile 2025\resources\app.asar" "%ProgramFiles%\Passware\Passware Kit Mobile 2025\resources\app.asar.unpacked.work_in_progress"
repack using:
npx asar pack "%ProgramFiles%\Passware\Passware Kit Mobile 2025\resources\app.asar.unpacked.work_in_progress" "%ProgramFiles%\Passware\Passware Kit Mobile 2025\resources\app.asar"
The main interesting file is "resources/app.asar.unpacked.work_in_progress/bundle.js"

bundle_js.jpg

Logs are located at %appdata%\Passware\Passware Kit Mobile\pw-logs
You can also take a look at the web DevTools by running:
PasswareKitMobile.exe --enable-logging --inspect --remote-debugging-port=8315 --remote-allow-origins=*
It will return you a two lines with URLS starting by "ws://", copy the one looking like this:
DevTools listening on ws://127.0.0.1:8315/devtools/browser/8566935b-5a14-4cb9-bb66-81fa10a73a7c
Then open your browser to this URL
Please, Log in to view URLs content!
, click on the link named "Passware" and you'll see a page looking like this:
devtools.jpg


Here is all I have figured out for now.
At least you all know how to take a look by yourself.

*Notes*:
- There are two ".node" files "mobile.node" and "positron.node", I'm not sure if they are important but there are some cross references between bundle.js and the .node files but I don't know how to read/unpack them.
- To see the web traffic, use Fiddler (
Please, Log in to view URLs content!
)
 

bob

Member
Joined
Dec 17, 2023
Messages
16
Reaction score
5
If I remember correctly, the positron file and the file that checks the product version
 

JCap

Well-known member
Joined
Jan 21, 2022
Messages
49
Reaction score
49
Passware Kit Mobile 2025 (Windows / Mac) :
Please, Log in to view URLs content!
 
Top