▄ ▄▄▄
▄▀▀ ▀ ▀▀▄
▐▌ ▐█
_ ▀█▄▄▄▄ ___ __________ _ ▄ __________ _ ▄ ______ _ ▄▄█▀ _
▀▀▀▀█████▄▄▄▄ ░ ▄▄▄▄▄█▄ ██▄▄▄ ▄▄█▌ ▄ ▄███▓░
▄▄████▄▄▄ ▀▀█████▓▄ ▄▄▄███▀▀▀▀██████▐██████▄ ▄██████▄██████▄ ░▓████▌
▐██████ ▀████▄█████▄ ▐█████▀████████▄███████▓▐████████▄ ▐████▓░
▐██████ ▐███▌█████▓░ ▄▄▄██████▌██████ ▀█▀ ██████▌██████ ▀██▄▐████▌
▐██████ ▄████░▓██████▀▀▀▀██████▌▓█████ ██████▌▓█████ ▀██████▓░
▄▄▄▐█████▓ ▄▄ ▄▓████▌▐██████ ▄▄▄ █████▓▐█████▓ ▄▄▄ ▒█████▐██████ ▄▄▄▐██████▌▄▄▄
██████▌▓▓▐█████▓░▐██████ ▓▓▓░▓█████▐██████▌▓▓▓ ▐████▓▐█████▒ ▓▓▓ █████▓░
██████▌▒ ▓██████▌░▓████▓░▒▒▒ ▐████▌░▓█████▌▒▒▒ ▐████▌ ██████▌ ▒▒ █████▌
░▓█████▌░ ▐██████▒ ░▓████▌░░░ ▐███▒ ░▓████▌░░░ ▐███▓░ ▒█████▌ ░░ ▓████▌
▀▀▀█▀▀████▄███████▌ ░▀███▌ ░ ▄██▀▀ ░▀███▌░ ▄██▀▀░ ▀▀▀█▀▀▀▀▀░ ▐████▓░
_ ________ ▀▀▀▀▓███▓░ _ ▀▀█▄ ▀ _sRT!CRo_ ▀▀█▄ ▀ ___________ _ ▄▄██▓▀▀░ _
░ ░▀██▌ ▀ ▀ ▄█▀ ░
░ ▐█ ░ ░ ▐▌ ░
░ ▀▄ ░ ░ ▀ ░
░ ░
░ ░ ░
░ PRESENTS
░ ░ ░
░
Check Point FireWall-1 v4.1 SP4 *Incl.Keymaker.and.Patch*
▄▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄▄▄
╒══════════════════╕ ╓─ ──── ─ ──══── ─ ────── ─ ────── ─ ──══── ─ ──── ─┐
┌─┤▌ RELEASE INFO ▐├─╜ ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ └┐
█ ╘══════════════════╛ █
█ █
█ [ Program ......................... Check Point FireWall-1 v4.1 SP4 ] █
█ [ Type .............. Industry-leading Enterprise Security Solution ] █
█ [ OS ...................................................... WinNT2k ] █
█ [ Protection ...... Screwed up Schnorr signature scheme (142 bit Q) ] █
█ [ By ...................... Check Point Software Technologies, Inc. ] █
█ [ Homepage .............................. http://www.checkpoint.com ] █
█ █
█ [ Cracked by ................................ Ivanopulo ] █
█ [ Release type ................ Incl.Keymaker.and.Patch ] █
█ [ Release date ........................... Jul 05, 2001 ] █
█ █
└┐ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ ┌┘
│╒══════════════════╕ ╓─ ──── ─ ──══── ─ ────── ─ ────── ─ ──══── ─ ──── ─┤
┌┴┤▌ DESCRIPTION ▐├─╜ ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ └┐
█ ╘══════════════════╛ █
█ █
█ FireWall-1 enables enterprises to define and enforce a single, █
█ comprehensive Security Policy that protects all network resources. █
█ Its innovative three-tier architecture, patented Stateful Inspection █
█ Technology and the Open Platform for Security (OPSEC) deliver a █
█ highly scalable solution that is able to integrate and centrally █
█ manage all aspects of network security. A family of add-on modules █
█ extends FireWall-1s capabilities to all levels of security and █
█ management. █
█ █
█ Changes in SP4: look in the PDFs included in this release. █
█ █
█ I'd like you to note that some feature names have been changed in SP4 █
█ (i.e. encryption-related ones). I've been told that the default list █
█ of features provided with the keymaker isn't affected, though. █
█ Anyway, keep this in mind. (And also, keep in mind that you can █
█ modify the list of features you need - just dig into your cp.macro █
█ and edit the corresponding field in the keymaker). █
█ █
█ List of files included in this release follows: █
█ █
█ fw-1_41862_2_sp4_win32_des.tgz FireWall-1 v4.1 SP4 █
█ fwgui_41862_1_sp4_win32.tgz FireWall-1 v4.1 GUI SP4 █
█ release_notes_41_sp4.pdf FireWall-1 v4.1 SP4 Rel.Notes █
█ TrafficControl_41404_1_sp4_win32.tgz FloodGate-1 v4.1 SP4 █
█ fg1_release_notes_41_sp4.pdf FloodGate-1 v4.1 SP4 Rel.Notes █
█ █
█ Changes in the keymaker/patch: █
█ - handles executables from SP4, SP3 and original v4.1 release █
█ - improved log output █
█ █
└┐ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ ┌┘
│╒══════════════════╕ ╓─ ──── ─ ──══── ─ ────── ─ ────── ─ ──══── ─ ──── ─┤
┌┴┤▌ INSTRUCTIONS ▐├─╜ ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ └┐
█ ╘══════════════════╛ █
█ █
█ Please read the information below carefully. █
█ █
█ First of all you need to patch the files. █
█ █
█ - Start the keymaker █
█ - It's supposed to detect yout FireWall-1 binaries directory (bin) █
█ automatically, but if it fails to do it for whatever reason, just █
█ enter the path manually. █
█ - Hit 'Patch it'. The directory you specified will be scanned for █
█ .exe and .dll files containing protection routines that require █
█ patching. Wait. Wait some more. BTW, backups of all to-be-modified █
█ files will be created, so can always get back to unpatched files █
█ later. █
█ - When patching is over, you'll see the detailed log of what's █
█ happened (unless your FireWall-1 bin directory is read-only... now █
█ guess if you should make it read only or not). █
█ - Now you MUST sign your cp.macro with the new key. To do it, just █
█ hit 'Sign it' button and point to cp.macro location. My advise is █
█ to backup your cp.macro before signing it, though (just in case). █
█ █
█ Please note that you can add ANY FEATURES you want to cp.macro, but █
█ you'll need to sign each time after you edited it. █
█ █
█ Now the most easy part - license generation. █
█ █
█ - Use the default feature list provided by the keymaker (I tried to █
█ include the best features) or edit it to your own taste and needs █
█ (you can find feature macro names in cp.macro). █
█ - Enter your host IP and press 'Generate it'. █
█ - Use the generated key to license FireWall-1. █
█ █
█ Enjoy =) █
█ █
█ P.S. For those who're interested in the protection scheme used in █
█ FireWall-1 (and for Check Point staff lurking around), here're the █
█ details: █
█ █
█ FireWall-1 uses screwed-up 1024/142 Schnorr signature scheme. Why █
█ screwed-up? Because some people can't keep themselves from thinking █
█ they're smarter than others. They changed the algorithm, probably █
█ trying to make it harder to break. In fact they just dramatically █
█ DECREASED security of this strong public key signature scheme with █
█ their poor attempt (from DLP in 142-bit prime order subgroup to █
█ bruteforcing just 2^64 variants, which is possible to do). The █
█ problem is that bruteforcing must be performed for each IP you want █
█ to license. My goal was a bit different, so some patching code was █
█ added ;) █
█ █
█ In SP3 (and now in SP4) Check Point people don't keep public keys █
█ (wonder why they need 8 when 1 would be enough) in the executables in █
█ plaintext anymore. Instead they use *VERY* long function that's █
█ supposed to "generate" the keys (my bet is that it's also supposed to █
█ be pretty confusing). Of course it generate the same 8 keys each time █
█ it's called. Not too wise solution, to say the least, because this █
█ function is gone for good =P. Oh, and they now calculate checksum of █
█ first public key to check if it's not modified. Unfortunatelly, █
█ public keys are modified... but correct checksum is modified as well █
█ =P. █
█ █
└┐ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ ┌┘
│╒══════════════════╕ ╓─ ──── ─ ──══── ─ ────── ─ ────── ─ ──══── ─ ──── ─┤
┌┴┤▌ VERIFICATION ▐├─╜ ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ └┐
█ ╘══════════════════╛ █
█ █
█ Due to the every day increasing amount of lamers who fake DAMN █
█ releases ALL DAMN releases starting from July 1, 2000 are digitally █
█ signed. █
█ █
█ Download DAMN Release Signature Verifier from http://www.damn.to █
█ (about 100K only) if you want to be sure that release you got was █
█ really made by DAMN. █
█ █
█ Don't use any stuff claiming to be made by DAMN if it's released █
█ after July 1, 2000 and doesn't pass verification. Using it can be █
█ dangerous. █
█ █
└┐ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ ┌┘
│╒══════════════════╕ ╓─ ──── ─ ──══── ─ ────── ─ ────── ─ ──══── ─ ──── ─┤
┌┴┤▌ GREETINGS ▐├─╜ ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ └┐
█ ╘══════════════════╛ █
█ █
█ Our greetings fly to all groups and crackers who work hard to keep █
█ the Scene alive. █
█ █
█ Personal greetings to: Dimedrol, Duelist, egis, Jovi, Quantico, █
█ Recca, russ97, tE!. █
█ █
└┐ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ ┌┘
│╒══════════════════╕ ╓─ ──── ─ ──══── ─ ────── ─ ────── ─ ──══── ─ ──── ─┤
┌┴┤▌ CONTACT ▐├─╜ ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ └┐
█ ╘══════════════════╛ █
█ █
█ Visit our www site at [ http://www.damn.to ] █
█ Backup page [ http://damn.da.ru ] █
█ █
█ Email address for contacts [ [email protected] ] █
█ █
└┐ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ ┌┘
└─ ────── ─ ──══── ─ ────── ┬ ────── ─ ────── ┬ ────── ─ ──══── ─ ────── ─┘
│▌ (c) 2001 DAMN ▐│
└ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ ┘
Release ID: 3B3850102A2F8BA2
Zip names [4]:
dm_cf4wa.zip dm_cf4wb.zip dm_cf4wc.zip dm_cf4wd.zip
----------------------- DAMN RELEASE SIGNATURE START ------------------------
damn_cpfw41sp4w.exe 1 q1+AGW66kBd+ESfF0xBhTuwKEi8 97UvJrUapoyXz4uQpfEUMK7QvdU
damn.nfo 0 OXfN+DmySwH4kpSCOwEcLMtm5hY cQv9WZWqIk7aFvhMRCH1S/RyLMM
------------------------ DAMN RELEASE SIGNATURE END -------------------------