[Fishing ?]: RSLogix 5000 - Removing source protection

RSLinx, RSLogix, RSView, LogixPro ...
skdatmonster2

[Fishing ?]: RSLogix 5000 - Removing source protection

Post by skdatmonster2 » Thu Jun 13, 2013 6:27 am

Hello everyone,
I have made a tool which can remove the source protection from RSLogix 5000 files.
It works on routines, programs, add-on-instructions, and rungs that have been exported as .L5X files.
You can run it in your browser, because it is written in JavaScript.
The directions and program are here ******
You just have to export to XML, put the XML into the webpage, and get the keys or decrypted XML out of the webpage.

Hope you like this!

CoMod
Site Admin
Posts: 3561
Joined: Thu Feb 16, 2006 3:25 pm
Location: Russia
Contact:

Re: [???]: RSLogix 5000 - Removing source protection

Post by CoMod » Thu Jun 13, 2013 9:51 am

Be careful, the user skdatmonster* IP is in the BlackVirusedList (att)
Image http://www.stopforumspam.com/search/31.172.30.3
Russian wrote:будьте осторожны - пользователь находится в чёрном списке вирусных IP
и ХЗ что он может подсунуть
Use free virtual PC https://www.virtualbox.org/
or
http://www.vmware.com/go/downloadplayer/
for testing tools

skdatmonster3
Posts: 12
Joined: Fri Jun 14, 2013 1:36 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by skdatmonster3 » Fri Jun 14, 2013 1:58 am

Well I am using Tor for browsing to keep anonymity. Sorry but I do not want employers to know of this. So because I am using Tor proxies, the IP addresses come up on the lists, since many people use these proxies. Anyway, I guess all I can say is to read the source code of the page, it is open source on github. (https://github.com/skdatmonster/Decrypt ... index.html) It is straightforward, just parse XML, do base64 decode, do AES decrypt, and put XML back together. No fishing or virus, you can read for yourself. Anyway if you have any questions I can answer them.
http://vms.drweb.com/online result http://online3.drweb.com/cache/?i=68afc ... e7e388e49b
(nuser)

prateeklath
Posts: 1
Joined: Wed Aug 18, 2010 10:01 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by prateeklath » Mon Jun 24, 2013 6:10 am

Hi i ran the script but i am getting error
"Warning: An unsupported EncryptionConfig value was found. Decryption may not work
Unpacked encoded data".
can you please help me out.
Program is on revision 18.

Dropkick
Posts: 1
Joined: Sat Jun 29, 2013 5:40 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by Dropkick » Sat Jun 29, 2013 5:43 am

I attempted this at first by pasting the entire XML file contents and again with just the encrypted routine content and both resulted in the following error:
Exception caught: TypeError: Object doesn't support property or method 'evaluate'
Please help. Thanks!

tepisjrf
Posts: 23
Joined: Mon May 17, 2010 8:56 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by tepisjrf » Thu Aug 08, 2013 10:49 am

Hello.

I have tested with a file saved in rslogix 20, but I got a message.

An unsupported EncryptionConfig value was found. Decryption may not work


Do you know, how can I try to solve it.

greetings

zjkaikai
Posts: 3
Joined: Fri Aug 09, 2013 6:57 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by zjkaikai » Fri Aug 09, 2013 10:25 am

If you share your *.ACD file,I can tell you sk.dat password

prushmere
Posts: 40
Joined: Fri May 07, 2010 8:44 am
Location: UK

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by prushmere » Fri Aug 09, 2013 9:58 pm

How about you actually share the information on how you extract the password instead?

skdatmonster3
Posts: 12
Joined: Fri Jun 14, 2013 1:36 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by skdatmonster3 » Wed Aug 14, 2013 2:31 am

I have put up a new version of the tool, it is at the same urls. This can handle EncryptionConfig of 2 in addition to 3. See https://www.github.com/skdatmonster/Dec ... /README.md and http://skdatmonster.github.io/DecryptSo ... index.html

Prateeklath and Tepisjrf, this should be compatible with your files.
Dropkick, your browser is too old for this, it doesn't support XPath. Try with Chrome or Firefox.

Look forward to your feedback!

zjkaikai
Posts: 3
Joined: Fri Aug 09, 2013 6:57 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by zjkaikai » Wed Aug 14, 2013 3:09 am

I tested with V19 and V20,but just get the message:

Code: Select all

<html xmlns="http://www.w3.org/1999/xhtml">
<body><parsererror style="display: block; white-space: pre; border: 2px solid #c77; padding: 0 1em 0 1em; margin: 1em; background-color: #fdd; color: black">
<h3>This page contains the following errors:</h3>
<div style="font-family:monospace;font-size:12px">error on line 2 at column 6: XML declaration allowed only at the start of the document
</div>
<h3>Below is a rendering of the page up to the first error.</h3></parsererror></body></html>
Drag a .L5X file onto this page, or open it in Notepad and paste its contents into the text box
Warning: An unsupported EncryptionConfig value was found. Decryption may not work
Unpacked encoded data
Warning: An unsupported EncryptionConfig value was found. Decryption may not work
Unpacked encoded data
Warning: An unsupported EncryptionConfig value was found. Decryption may not work
Unpacked encoded data
:(

skdatmonster3
Posts: 12
Joined: Fri Jun 14, 2013 1:36 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by skdatmonster3 » Fri Aug 16, 2013 5:24 am

Zjkaikai, try reloading the page, i think you have the old version. In the updated version the error message is a little different and it tells you wat the EncryptionConfig is.

zjkaikai
Posts: 3
Joined: Fri Aug 09, 2013 6:57 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by zjkaikai » Fri Aug 16, 2013 6:29 am

Warning: An unsupported EncryptionConfig value was found. Decryption may not work
Exception caught: ReferenceError: CryptoJS is not defined

prushmere
Posts: 40
Joined: Fri May 07, 2010 8:44 am
Location: UK

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by prushmere » Sun Aug 18, 2013 11:58 am

skdatmonster3 wrote:I have put up a new version of the tool, it is at the same urls. This can handle EncryptionConfig of 2 in addition to 3. See https://www.github.com/skdatmonster/Dec ... /README.md and http://skdatmonster.github.io/DecryptSo ... index.html

Prateeklath and Tepisjrf, this should be compatible with your files.
Dropkick, your browser is too old for this, it doesn't support XPath. Try with Chrome or Firefox.

Look forward to your feedback!
It looks like your page is still running the old code, so I copied the new html to my own server - works fine for me for both v19 and v20, thanks for your good work sk!

(pgood)

yasirkhi
Posts: 2
Joined: Sat Jul 27, 2013 8:20 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by yasirkhi » Mon Aug 19, 2013 7:57 am

Please help me how to do it. It doesn't decrypt and show anything in other part of the windows. I have saved the file as a XML .L5X as mentioned.

skdatmonster3
Posts: 12
Joined: Fri Jun 14, 2013 1:36 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by skdatmonster3 » Fri Aug 23, 2013 5:14 am

yasirkhi wrote:Please explain how you did it. It is giving me error at the bottom all the time.
What is the error?

Ratheeshvb
Posts: 1
Joined: Fri Jun 01, 2012 12:41 pm

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by Ratheeshvb » Thu Nov 07, 2013 11:19 am

I also have error message as "Warning: An unsupported EncryptionConfig value was found. Decryption may not work".
My project is in V13.04 and i converted it to V19.0 to get export routine option. Please help me.

skdatmonster3
Posts: 12
Joined: Fri Jun 14, 2013 1:36 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by skdatmonster3 » Tue Jan 28, 2014 1:13 am

I have updated the program to support the latest EncryptionConfig. It now supports two three and five. It is once again at http://skdatmonster.github.io/DecryptSourceProtection/ Enjoy!

PhredPhlintston
Posts: 2
Joined: Tue Mar 25, 2014 10:30 pm

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by PhredPhlintston » Tue Mar 25, 2014 11:09 pm

has anyone been successful with unlocking a plc? I have a piece of equipment that is now down and it is locked. No vendor no support.
Please either repost or contact me if you can help


skdatmonster3
Posts: 12
Joined: Fri Jun 14, 2013 1:36 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by skdatmonster3 » Sat Apr 19, 2014 8:21 pm

PhredPhlintston wrote:has anyone been successful with unlocking a plc? I have a piece of equipment that is now down and it is locked. No vendor no support.
Please either repost or contact me if you can help
Is it possible to upload the program on your computer? If so, then you could export to an .L5X file and use the tool from above in this thread. I havent tried with a real live PLC that is locked, so it depends on how it was locked.
shrddr wrote:Vulnerability fixed? http://rockwellautomation.custhelp.com/ ... _id/582544
No, not well. What happened was they made a new EncryptionConfig 5, which used the same algorithms as the old one, but there was a new key and a two byte header. Plus they changed which libraries they were using. My decrypting tool can do the latest version now, so nice try A-B.

prushmere
Posts: 40
Joined: Fri May 07, 2010 8:44 am
Location: UK

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by prushmere » Sun Apr 20, 2014 7:44 am

skdatmonster3 wrote: Is it possible to upload the program on your computer? If so, then you could export to an .L5X file and use the tool from above in this thread. I havent tried with a real live PLC that is locked, so it depends on how it was locked.
The PLC lock is something completely different, it is not possible to extract the password from the .ACD file as it only exists in the processor.
skdatmonster3 wrote: No, not well. What happened was they made a new EncryptionConfig 5, which used the same algorithms as the old one, but there was a new key and a two byte header. Plus they changed which libraries they were using. My decrypting tool can do the latest version now, so nice try A-B.
Your existing decrypt algorithms will only work for versions lower than V20.03 and V21.03, AB have completely changed the security in the newer versions.

skdatmonster3
Posts: 12
Joined: Fri Jun 14, 2013 1:36 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by skdatmonster3 » Tue Apr 22, 2014 7:21 pm

Prushmere, thanks for info on controller lock. Yes, that is something the tool cannot do.

Actually, v20.03 and v21.03 were released late last year, and they use the EncryptionConfig="5" I wrote about. It was different, but not that different. The tool can decode these versions.

nquocviet2004
Posts: 1
Joined: Mon Sep 06, 2010 3:21 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by nquocviet2004 » Mon Jun 16, 2014 5:12 am

Perfect tools. I like it. Thanks (gpost)

hebel
Posts: 5
Joined: Sat Aug 15, 2009 2:35 am
Location: America

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by hebel » Tue Jun 24, 2014 2:28 pm

Hi, i have this file:

http://rapidshare.com/share/E8DB5407B16 ... FBAD191327


i tried to decrypt but i just get this error message:

Error: An unsupported EncryptionConfig value was found. (null) Decryption of this file is not yet supported.

can anybody help to decrypt the file?

Blue Dog
Posts: 13
Joined: Fri Jun 13, 2014 7:45 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by Blue Dog » Tue Jun 24, 2014 4:39 pm

Add the following keys to your sk.dat file:

Code: Select all

demistify_rollover
npwu1688mikimouse
lion

hebel
Posts: 5
Joined: Sat Aug 15, 2009 2:35 am
Location: America

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by hebel » Wed Jun 25, 2014 5:21 pm

thank you very much
it works!!

PhredPhlintston
Posts: 2
Joined: Tue Mar 25, 2014 10:30 pm

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by PhredPhlintston » Thu Jul 10, 2014 12:54 pm

Who can i send the file to to decode this protection?

NowanH
Posts: 81
Joined: Wed Apr 30, 2014 6:16 pm

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by NowanH » Fri Jul 11, 2014 10:37 pm

The information you are looking for is in the previous posts. Please read from the first post.

yeosh99
Posts: 59
Joined: Thu Jul 14, 2011 4:40 pm

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by yeosh99 » Sun Jul 13, 2014 8:08 am

Source key: zengyang
lipvn15 wrote:help me....
Hi, i have this file:

http://up.4share.vn/f/291a1d10101b1a1b/GPJ.ACD


i tried to decrypt but i just get this error message:

Error: An unsupported EncryptionConfig value was found. (null) Decryption of this file is not yet supported.

can anybody help to decrypt the file?

lipvn15
Posts: 2
Joined: Sat Aug 11, 2012 3:42 pm

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by lipvn15 » Sun Jul 13, 2014 12:24 pm

thank yeosh99
thankyou somuch....

skdatmonster3
Posts: 12
Joined: Fri Jun 14, 2013 1:36 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by skdatmonster3 » Tue Jul 15, 2014 11:50 pm

Thanks to yeosh99 and Blue Dog for helping out! It is good to see the community helping each other out.

I had to change email addresses a while ago, but I cant change my form email address because it keeps saying "spam from this ip." So I have not been getting emails, but i will try to check in here sometimes. Thanks once again to all you.

gunjs
Posts: 1
Joined: Tue Aug 12, 2014 7:45 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by gunjs » Tue Aug 12, 2014 6:25 pm

I am having .acd file , can anyone help me on this forum .

please help (h) (h)

technitin29
Posts: 3
Joined: Fri Jul 27, 2012 8:07 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by technitin29 » Tue Nov 18, 2014 12:42 pm

I am getting this error : Your browser does not support XPath, please try again with a modern browser
And even if try to decrypt, the error is : Exception caught: ReferenceError: 'XPathResult' is undefined

Please help to resolve this.

Thanks
Nitin

technitin29
Posts: 3
Joined: Fri Jul 27, 2012 8:07 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by technitin29 » Tue Nov 18, 2014 12:53 pm

nquocviet2004 wrote:Perfect tools. I like it. Thanks (gpost)
I am getting this error "Your browser does not support XPath, please try again with a modern browser". I am using IE 11.0.9600. I can-not install other browser on my working notebook.
Please help me to fix it.

technitin29
Posts: 3
Joined: Fri Jul 27, 2012 8:07 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by technitin29 » Tue Nov 18, 2014 1:00 pm

skdatmonster3 wrote:I have updated the program to support the latest EncryptionConfig. It now supports two three and five. It is once again at http://skdatmonster.github.io/DecryptSourceProtection/ Enjoy!
I am getting two error:
1: Before dropping .L5X file >> Your browser does not support XPath, please try again with a modern browser.
2: After dropping .L5X file >> Exception caught: ReferenceError: 'XPathResult' is undefined.

Please help to fix these error.

Thanks
Nitin

skdatmonster3
Posts: 12
Joined: Fri Jun 14, 2013 1:36 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by skdatmonster3 » Mon Dec 01, 2014 3:54 am

I have put up a new version of the tool again. It is at the same urls, see https://www.github.com/skdatmonster/Dec ... /README.md and http://skdatmonster.github.io/DecryptSo ... index.html

This version can now also handle EncryptionConfig="6" which is for newer versions of RSLogix 5000. However, in the new version, they have changed how source keys are stored, so it can't recover source keys when EncryptionConfig="6". I haven't finished looking at that, maybe I can fix it, maybe it would need rainbow tables. Even though, if a file is EncryptionConfig="6", you can still copy the decrypted XML out of the right box, save that in a new .L5X file, and import that into a project to get your logic back.

For those having trouble with XPath in browsers, you need to try with a different browser. I have tested the program in Firefox and Chrome and it is working. If your browser doesn't have XPath or XPathResult, then it won't work and you have to try with a different browser. If you cannot install another browser, maybe copy the file to a different computer and install it there?

engr27
Posts: 1
Joined: Tue Dec 23, 2014 7:31 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by engr27 » Sun Dec 28, 2014 12:32 pm

Thanks a lot for this great tool. Highly appreciated

skdatmonster3
Posts: 12
Joined: Fri Jun 14, 2013 1:36 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by skdatmonster3 » Tue Feb 03, 2015 2:44 am

I have a quick update to the tool, EncryptionConfig="7" is now supported. This is used in the latest version.

el_pollo
Posts: 11
Joined: Wed May 08, 2013 11:23 pm

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by el_pollo » Fri Feb 20, 2015 7:47 pm

Excellent it work just fine! congratulations (gpost) (tyou)

el_pollo
Posts: 11
Joined: Wed May 08, 2013 11:23 pm

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by el_pollo » Fri Feb 20, 2015 11:12 pm

hi everybody i try to use this method with a 15 version program but i can´t do it because this version do not have the import/export option, does any body know how to do it in 15 version program?
thanks in advance (boom)

BLD1205
Posts: 1
Joined: Sun Nov 13, 2011 1:55 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by BLD1205 » Thu Mar 05, 2015 3:30 pm

Why not to convert project to ver. 16 or 20 and use export function?

igordn1
Posts: 3
Joined: Wed Feb 19, 2014 5:40 pm

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by igordn1 » Wed Jun 17, 2015 3:16 am

Is there a way to Unlock safety controller? If you open the controller properties there is Safety folder and in there:
- Safety Application: Locked and across there is a button Safety Lock/Unlock and if you push the button is ask for the password
All the subroutines in the safety program are open but they are not editable and there is no way to change the controller.

skdatmonster3
Posts: 12
Joined: Fri Jun 14, 2013 1:36 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by skdatmonster3 » Sun Jun 28, 2015 7:03 pm

It is probably possible, since there is also a key for safety encryption, but I am hesitant to do, because that is there for life safety and not just DRM.

However, if you want to reuse part of the program, and you do not have the safety lock key, it is already possible to export the whole thing without special tool. If you export/save as the entire project as L5K or L5X, and then import it into new project, I think that will be safety unlocked. You can't go online with controller unless you do a stop and download, and create new safety relationships, but it should work. See this form thread. http://plctalk.com/qanda/showthread.php?t=76593

igordn1
Posts: 3
Joined: Wed Feb 19, 2014 5:40 pm

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by igordn1 » Fri Jul 03, 2015 2:58 am

It is just a curiosity. Right now it doesn't really matter. But it would be a good tool to unlock the program just to be able to replace faulty processor or add some i/o cards. Sincerely.

mam_engineer
Posts: 3
Joined: Tue Dec 15, 2015 3:52 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by mam_engineer » Tue Dec 15, 2015 3:58 am

it sometimes works and sometimes not .
i got error message " An XML parser error occurred, decryption may have been unsuccessful"
please help

skdatmonster3
Posts: 12
Joined: Fri Jun 14, 2013 1:36 am

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by skdatmonster3 » Fri Jan 08, 2016 12:40 am

What is the software version of RSLogix 5000 you are using, and what is the browser? Can you give a sample file that does not decrypt?

panda
Posts: 7
Joined: Fri Mar 25, 2016 4:05 pm

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by panda » Wed Aug 09, 2017 4:38 pm

skdatmonster3 wrote:What is the software version of RSLogix 5000 you are using, and what is the browser? Can you give a sample file that does not decrypt?
How about rslogix 5000 v30 program?

jamrobe
Posts: 34
Joined: Sun Dec 02, 2007 2:29 pm
Location: America

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by jamrobe » Wed Jan 24, 2018 5:02 pm

Thanks skdatmonster3,
used your tool and worked perfect.
You are a real genius to get to the bottom of this :))

Now for all other user who are saying cannot use/export .l5x files.

If there is not an option to export the routine into a .l5x file this worked for me.
Saved the project as .l5K file.
Opened the .l5K file and choose to import to a different version.
On this new version also cannot see the routines but have the export option when click right.
After that used the decrypt tool, bingo !!!

all the best to everyone
jam

shrddr
Posts: 7
Joined: Thu Aug 16, 2012 2:43 pm

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by shrddr » Fri Apr 06, 2018 2:30 pm

There is now also EncryptionConfig="8" in Studio V28 and "9" in V30... Think you can figure it out?

hebel
Posts: 5
Joined: Sat Aug 15, 2009 2:35 am
Location: America

Re: [Fishing ?]: RSLogix 5000 - Removing source protection

Post by hebel » Tue Sep 25, 2018 1:30 am

is there any progress what about EncryptionConfig="9" ?

Post Reply