What's new
RevTeam.Re - Reverse Engineering Team

Welcome Guest! Register a free account today to become a member! Once signed in, you'll be able to participate on this site by adding your own topics and posts, as well as connect with other members through your own private inbox! Register and wait for our approve!

Passware Kit Mobile 2025

JCap

Well-known member
Joined
Jan 21, 2022
Messages
49
Reaction score
49
Program Adı ve Versiyonu :
Code:
Passware Kit Mobile 2025



Program Linki ( Çalışan ) :
Code:
Please, Log in to view URLs content!



Dosya Boyutu ( MB ) :
Code:
559.252 KB



Açıklama (Program hakkında kısa bilgi) :
Code:
Forensic tool that extracts and decrypts user data from mobile devices.
 
Last edited:
D

devilsnake88

Guest
As far as I know (from another source) some parts are encrypted and can't be decrypted without a valid license key, a bit like UFS Explorer (data recovery tool).
I wonder if it's not possible to dump the instructions looking for this key and build a brute-forcer for it.
I would be able to help with this kind of tasks and I can also provide Passware Kit Forensic 20231025.091405 + agent 20231025.151401 but I can't help with a valid license key.
 

rvarbean

Member
Joined
Feb 6, 2022
Messages
5
Reaction score
4
I actually tried dumping the positron.node dll file from the application as it is protected with VMProtect. However it just gives a C0000005 error (access violation) when trying to use dumped file. Anyone know why this is?
 

rvarbean

Member
Joined
Feb 6, 2022
Messages
5
Reaction score
4
If anyone knows how to make a working dump of the positron.node file from Passware Kit Mobile please send it in pm as I think I may know how to crack it.
 

rvarbean

Member
Joined
Feb 6, 2022
Messages
5
Reaction score
4
Anyone have the 2021/beta version of passware kit mobile? it seems to have been posted on decompile.us at one point but download link is dead. I have found that 2021 and older versions of passware products aren't protected with vmprotect unlike newer versions. I cannot register on decompile forum since registrations are closed. Please let me know if anyone has an early version of pkm! thanks
 

bob

Member
Joined
Dec 17, 2023
Messages
16
Reaction score
5
bonjour moi j'ai une erreur de stack avec plusieur adresse
Internal error
1A5
Stack dump:
Module: positron.node
Version: 2023.1.1.4579 (FW230203-1846)
PDB: passware-kit-mobile-engine-full-win-final-win32-pe-x64.pdb;A6EC167E6E4A4326AD8877137333F9E7;1
Base: 7FFD66020000
7FFD66143856
919E7FF270
7FFD6612346A
7FFD660CFACC
7FFD660D12CB
7FFD660D54E1
7FFD6614A64D
7FFD6612E5B6
7FFD6628FE1B
7FFD66285DA4
7FFD66285913
7FFD66296D99
7FFD662957F3
7FFD662858A4
7FFD662970F4
7FFD662957F3
7FFD662893D4
7FFD6622B1AE
7FF6C63223B8
7FF6C5C9E928
7FF6C7BE1EC0
7FFE389A7344
7FFE38AE26B1
je sais pas si ça peut etre utile
 

bob

Member
Joined
Dec 17, 2023
Messages
16
Reaction score
5
j'ai modifié le fichier config pour voir ce que sa fessai et j'ai eu sa
 

bob

Member
Joined
Dec 17, 2023
Messages
16
Reaction score
5
le programme se lance normalement il a juste une femettre avec l'erreur simon le programme fonctionne il extrait l'image du telephone et a la fin quand il demande de l'activer sa tourne en boucle
 

krsk

Member
Joined
Jun 18, 2024
Messages
10
Reaction score
15
this is a 100% VBA32 virus
BScope.Trojan PSW.RedLine
 
Top