+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Social Engineering (https://sinister.li/Forum-Social-Engineering)
+--- Thread: Point-of-Sale Activation (/Thread-Point-of-Sale-Activation)
RE: Point-of-Sale Activation - tayl551 - 04-16-2018
I’m having the same problem with a Garmin Drive 5 gps. Bought it at Dirt Cheap and they don’t do codes. Have contacted Garmin, getyourcode.com. No help at all. Anybody know how to get the code for it? Thanks for any help
RE: Point-of-Sale Activation - Tightwad1981 - 04-18-2018
I have a LeapPad Epic, and there is no TestDiSa file in android/data for me to look in. any advice?
Update: actually it seems that i was mistaken. When I plug the LeapPad Epic into my computer with a USB cable, it shows up under "this computer" as a storage device, and when i click to open it, it only shows "USB Storage device" and will not let me access the tablets Internal storage. I have tried every thing that i could imagine to be able to access the internal storage, but i cant seem to figure out how to get into the files to view the TestDiSa file. Any help would be much appreciated.
RE: Point-of-Sale Activation - rutrustfool - 04-21-2018
(10-18-2017, 03:58 AM)Ecks Wrote:(10-17-2017, 10:53 PM)str8JnPBurgh Wrote: Ok everyone, just like all of you I have had this Nextbook 10 with the bullshit activation for a few months, I also have been searching for anything that would help me crack or decipher the 6 digit code, along the way on nearly every forum was the JOHNTV guy, I finally emailed him and he told me what to send him, at which time I tried one more time and searched for the DISA file crack which let me here, well long story short I grabbed a prepaid debitcard, he emailed me the paypal invoice, paid it and within 20 minutes he emailed me the 6 digit code, and the code worked lol I very rarely comment on any forum unless it will be completely useful and not a waste of time, therefore heres that comment, I understand if this is a site where people share the answers but at the same time this dude got the golden goose and he doesn't give his eggs away for free, well worth the 15 bucks the Nextbook 10 is a great tablet, worth far more in my opinion than the 60 dollar price tag. He has my absolute recommendation. Nice work bud. POS activation my ass! Now go get your codes hehehe
Signed up just to vouch for someone selling a service, fine, but don't expect people here to jump on the bandwagon, with a new account with no reputation vouching for another somewhat new account with no reputation. I again will say that this is not a sales thread, anyone posting should either be joining in to help the rest or saying that they too have this issue.
So I have A nextbook model NX16A10132S and i am stuck in boot lock idk how because i was at the activation screen and wanted to try ur steps to bypass help???
RE: Point-of-Sale Activation - DigitalConcepts - 04-23-2018
reading all through the posts, I do have a few of the M20 mini projectors and a friend and I at a store find that the UPC has a lot to do with getting the correct activation code cause we took anther similar product and its UPC code, the M20 disa code and ran it through but the activation code was wrong, (didnt work on either product) I would think there is a mathematical formula to retrieve the codes using only the UPC (or part of it as the UPC is broken up into different section that tell you what model plus other info) and the disa code that would produce the activation code. Possible that between the UPC and the disa a hash of sorts can be gotten then from that output the activation code, using one of the sites mentioned here to use the hash calculator ?
RE: Point-of-Sale Activation - Fayt - 04-23-2018
It's been a bit since I last posted so I thought I would give an update to where im at on these. I've only been working with the nextbook ares 10a, but I have made some progress that will hopefully benefit some people.
I have had a few people send me their TestDiSa files or their salted bcrypt hashes and I've managed to use Hashcat to pretty easily decrypt the hashes in a matter of about 10 minutes or less using an intel core i7 processor, but even with slower machines it shouldn't take long to decrypt the hash for your code. I've managed to send some people activation codes who gave me their hashes to decrypt, but I haven't heard back from anyone on if they were successful or not. Feel free to message me if you have your TestDiSa file or your hash and ill gladly get your code when I have the time. Ill also try to post up a tutorial on using hashcat to get the codes soon too if anyone is interested. It's fairly easy and quick to do.
So one big thing that keeps becoming a problem is the devices that don't have TestDiSa files or an interface to retrieve them if they are there somewhere. The best way I can think of combatting this issue is by finding out how to recreate the hashes or codes using the Disa Number, Model number, serial number, and possibly the UPC. I'm not sure what they use to create them so it could just be some of those things or it could be something I didnt mention. I haven't done much work on this yet and it's been just something I have been pondering as I have been working on this project. If we can find out how they are making the codes, or even the hashes, then this whole thing will abrubtly become the down fall of these activation codes. This is probably where I'm going to be taking my research next on this project. If anyone has any data gathered on people's disa numbers, hashes, serial numbers, activation codes, etc.; Please send me everything you have. The more data I have to examine then the better chance I can find a relationship between everything and hopefully see how they are creating the codes or hashes. Ill gladly send anyone that wants to help on this all the data I have as well.
The last thing that I wanted to bring up is a problem I'm currently dealing with on the more recently released batches of the nextbook ares 10a. It seems they have been keeping an eye on our work and patching up all the vulnerabilities we have been discovering. This latest ares 10a I acquired just a week ago from someone shows that they are very actively trying to patch up anything we are discovering. I actually ended up buying this one off the person just because it's been a lot more difficult then before and I really wanted to continue work on this project so this was a perfect opportunity to do that.
So with the newer batches, from what I have seen so far, is that you can't retrieve the TestDiSa file as you could before by hooking it up to a computer. It just shows an empty drive on a windows PC. I also wasn't able to enter the BIOS like before by using a OTG adapter and USB keyboard. I wasn't able to test that out as much as I'd like though, because I ran into a problem that I have been seeing many others talk about, and that is the tablet no longer boots to the activation screen And hangs at the boot logo screen. I believe this has happened due to trying to unlock the bootloader and boot into TWRP and resolve our problem by removing files or flashing something new. I don't know which part caused it, but it's most likely attempting to unlock the bootloader. I stupidly forgot to try and get into the settings to enable OEM lock before I tried and that could have done it. I can't say for sure though. Now I can only enter recovery mode and some sort of fastboot/bootloader mode (I haven't had much luck in this mode with any commands, but im currently researching it more). Factory restore in recovery mode does nothing and device hangs at the boot logo screen still. We may need a stock firmware image to flash to be able to recover it, but I haven't had any luck locating one online yet. I'm going to keep trying to find a way to either enter the BIOS if possible or discover how to make something happen in the bootloader mode I get it in to.
I want to note that I never tried entering the BIOS before I found out I had basically bricked it so it's possible it can be entered on these newer devices yet. That would really make things much easier if it were an option. If anyone has had any luck recovering from this problem please let me know and ill surely post any updates I discovere on this boot issue and on discovering how the codes or hashes are created. I recommend anyone with the newer nextbook ares 10a avoid trying the method involving unlocking the bootloader and booting TWRP, until we can figure out more on it.
That's about all I have as far as updates and I apologize for them being more on the negative side this time. Personally, I love the challenge and the knowledge I've been gaining from working on this so far. It's taken me into some areas I'm somewhat new on and I've learned a great deal. I've had to take knowledge from a variety of fields and bring them together to find solutions to this activation lock and It's really been fun. Ill take that knowledge over money any day so ill be sticking this out until the end. Thank you to all who have been contributing and the way I see it is we are basically helping this Disa company fix vulnerabilities in their product. They should be paying us and thanking us for our work.
RE: Point-of-Sale Activation - DigitalConcepts - 04-23-2018
due to the getyourcode place hat only asks for the DiSa number is making me think there isn't any math to it and perhaps all they use a random number generator to assign a code and attach it to that disa number and all the merchant does is grab that code from their personal storage (merchant is given all the disa and activation codes on delivery) not having to go online to the disa server to decode anything, would make more sense and also stop any disa generators from being built to defeat them , we have a "sort of" workaround but requires a bit of more time and these projectors are not worth the time, the quality is not all that good but for the convenience of having a portable projector suites its purpose
RE: Point-of-Sale Activation - Newbie69 - 04-24-2018
Have got my hands on a new Nextbook A8. Cannot find the TestDisa file too. I think they must have patched this workaround also.
RE: Point-of-Sale Activation - DigitalConcepts - 04-24-2018
(04-24-2018, 04:13 AM)Newbie69 Wrote: Have got my hands on a new Nextbook A8. Cannot find the TestDisa file too. I think they must have patched this workaround also.
out of curiosity, could it be a hidden file?
RE: Point-of-Sale Activation - Fayt - 04-25-2018
(04-23-2018, 04:14 PM)DigitalConcepts Wrote: due to the getyourcode place hat only asks for the DiSa number is making me think there isn't any math to it and perhaps all they use a random number generator to assign a code and attach it to that disa number and all the merchant does is grab that code from their personal storage (merchant is given all the disa and activation codes on delivery) not having to go online to the disa server to decode anything, would make more sense and also stop any disa generators from being built to defeat them , we have a "sort of" workaround but requires a bit of more time and these projectors are not worth the time, the quality is not all that good but for the convenience of having a portable projector suites its purpose
You make a good point about this and like you said, it really would make more sense to have the codes available offline. It will be tough to say until I can get some data gathered of peoples Disa numbers, successful activation codes, and other information so I can see if there is any patterns. I thought I remember seeing that some people were originally having some of the same codes with some of the first nextbooks that came out with this activation lock. I could be wrong on that so ill have to do some digging. Even if they were it could have been changed since then considering the major changes they have made to stop this.
RE: Point-of-Sale Activation - InfectedMachine - 04-25-2018
(04-23-2018, 04:14 PM)DigitalConcepts Wrote: due to the getyourcode place hat only asks for the DiSa number is making me think there isn't any math to it and perhaps all they use a random number generator to assign a code and attach it to that disa number and all the merchant does is grab that code from their personal storage (merchant is given all the disa and activation codes on delivery) not having to go online to the disa server to decode anything, would make more sense and also stop any disa generators from being built to defeat them , we have a "sort of" workaround but requires a bit of more time and these projectors are not worth the time, the quality is not all that good but for the convenience of having a portable projector suites its purpose
It is unlikely that these DiSa numbers are anything but what DigitalConcepts described. Random unique identifiers used by the merchant to provide the proper activation code, and they are also stored by the manufacturer to provide the activation code via website or telephone. The activation code is mathematically computed, being that it uses an encryption algorithm. Having worked in a Data Encryption environment for 2 years, I can vouch that we used several randomly generated numbers we called "unique identifiers" as a label for private keys. In this, the individual requesting the key because they forgot it or lost it provided us the random unique identifier and we could provide them the proper key. We didn't store or have access to any hashes that I know of. This situation is a bit unique, but not unexpected. Blowfish encryption algorithm was specifically designed for embedded systems, because embedded system are performance constrained and blowfish encryption requires few system resources to implement and use. All of these tablets probably use it, and because it requires as little as 5KB to implement, it is likely the "TestDiSa" file has either been hidden or is being protected by the system to prevent unauthorized access. After all, this is like leaving a safe with someone who wants to crack it, and giving them all the time in the world to do it. It makes sense from a security standpoint to remove this open vulnerability.
To the individual who has a tablet that doesn't show the TestDisa file when plugged into a computer. If you type an activation code in, does the tablet stop at 6 digits or does it let you enter more than 6?