Go Back   Access World Forums > Microsoft Access Reference > Sample Databases

 
Reply
 
Thread Tools Rate Thread Display Modes
Old 08-12-2018, 02:30 AM   #1
ridders
Part time moderator
 
ridders's Avatar
 
Join Date: Jan 2017
Location: Somerset, UK
Posts: 5,805
Thanks: 79
Thanked 1,428 Times in 1,333 Posts
ridders is just really nice ridders is just really nice ridders is just really nice ridders is just really nice
Security Challenge #3 (Activation)

This sample database is the third in a series of security challenges that are being posted on several forums
See the links in my signature line below if you want to try the earlier challenges

All are designed to show ways of making Access apps reasonably secure as well as (hopefully) being a 'fun' challenge to solve.

As with the previous challenges:
1. The application is an ACCDE file so all VBA code has been removed.
The file has been renamed as a runtime file (ACCDR). It will not run if the file type is changed.

2. Startup properties have been modified e.g. shift bypass disabled. It will not run if this is re-enabled
There is no access to the navigation pane, ribbon or the rest of the application window
The taskbar and all desktop items are also removed. These are restored automatically when the application is closed using the Quit button

3. Mouse movement is confined within the active form

4. The app is password protected and the password is NoDBG. It will not run if this is altered or removed

5. No changes are made to your computer by running this app. There are no restrictions on the number of times it can be run

Solving this will require some different methods to those used in the previous challenges
Once again the app includes 'special tables' - both read only and deep hidden

The app contains 3 forms - this is the first form



At first the Click Me button will be disabled, locked and hidden.

The other 2 forms CANNOT be opened directly

The main parts of the challenge are to:
a) find out how to show/enable/unlock the Click Me button on the main form
b) change the properties of a read only table and modify its contents
c) use VBA functions to obtain various info and use this to generate an ActivationID specific to your workstation

The challenge is intended to be solvable without hacking.
Indeed trying to hack it will probably make it harder to solve.
Follow the clues provided in this thread and the challenge itself

You may need to search online for solutions to certain parts of the challenge


I hope you enjoy puzzling out this challenge

If you succeed, please send me a private message or email me using the link in my signature line.
Please include the answers to a, b & c together with how you solved the challenge and the approximate time taken.

Please do NOT post your solution in this thread or it will spoil the challenge for others

NOTE: Access databases, including this one, can NEVER be made 100% secure
A capable and determined hacker can break any Access database given time


Both 32-bit and 64-bit versions have been provided

UPDATE 16/08/2018
Apologies to those who have already downloaded this
The attached zip files both contain a bug which prevents them being solved
Instead, please use the updated versions in post #2
Attached Images
File Type: png Form1B.PNG (79.6 KB, 37 views)
Attached Files
File Type: zip ActivationChallenge32.zip (1.02 MB, 33 views)
File Type: zip ActivationChallenge64.zip (1.20 MB, 16 views)

__________________
If this answer has helped, please click the Thanks button and/or click the 'reputation scales' symbol on the left.

New example databases:

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


Colin
Access 2010 32-bit, Access 2016 32-bit & 64-bit, SQL Server Express 2014, Windows 10,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

-----------------------------------------------------------------------------------
nil illegitimi carborundum est

Last edited by ridders; 08-16-2018 at 02:10 PM. Reason: Removed links & added comment
ridders is offline   Reply With Quote
Old 08-16-2018, 02:04 PM   #2
ridders
Part time moderator
 
ridders's Avatar
 
Join Date: Jan 2017
Location: Somerset, UK
Posts: 5,805
Thanks: 79
Thanked 1,428 Times in 1,333 Posts
ridders is just really nice ridders is just really nice ridders is just really nice ridders is just really nice
Re: Security Challenge #3 (Activation)

Apologies to anyone who has been trying this challenge

Unfortunately there was a bug in the initial release of the activation challenge which prevented it being solved.
The bug affected both 32-bit & 64-bit versions
This was due to me forgetting to add error handling to a specific routine.

Many thanks to insane_ai for alerting me to the issue

If you downloaded the first version, this should be deleted

Attached are UPDATED VERSIONS for 32-bit & 64-bit with the bugs fixed.
I’ve tested all the way through as an end user & it now seems to be error free! PHEW!

There are a few changes from the first version.
You will need slightly different conditions to click the button on form1.
I’ve also removed a couple of security loopholes that I overlooked.
For example, the privacy options menu has now been REMOVED.

The challenge is still solvable but certain steps have been made intentionally quite challenging to do.
As before, using skill, knowledge & common sense rather than hacking is your best bet!


Good luck & let me know via PM how you get on with this

NOTE: It may be useful to read this thread: Purpose of system tables
Attached Files
File Type: zip ActivationChallenge32_v2.zip (1.17 MB, 6 views)
File Type: zip ActivationChallenge64_v2.zip (1.27 MB, 8 views)
__________________
If this answer has helped, please click the Thanks button and/or click the 'reputation scales' symbol on the left.

New example databases:

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


Colin
Access 2010 32-bit, Access 2016 32-bit & 64-bit, SQL Server Express 2014, Windows 10,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

-----------------------------------------------------------------------------------
nil illegitimi carborundum est

Last edited by ridders; 08-16-2018 at 11:50 PM.
ridders is offline   Reply With Quote
Reply

Tags
activation , security challenge

Thread Tools
Display Modes Rate This Thread
Rate This Thread:

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Security Challenge #2 (Hidden Message) ridders Sample Databases 6 08-10-2018 12:34 PM
Security Challenge #1 (Show/Hide Tables) ridders Sample Databases 0 08-05-2018 08:40 AM
Activation Key .Justin, Modules & VBA 1 04-02-2013 10:31 AM
VBA Drop Down Box Activation peterengland Modules & VBA 5 04-19-2005 12:08 PM
Subform activation MrGPV Forms 5 01-05-2005 03:00 PM




All times are GMT -8. The time now is 04:57 PM.


Microsoft Access Help
General
Tables
Queries
Forms
Reports
Macros
Modules & VBA
Theory & Practice
Access FAQs
Code Repository
Sample Databases
Video Tutorials

Sponsored Links

How to advertise

Media Kit


Powered by vBulletin®
Copyright ©2000 - 2018, Jelsoft Enterprises Ltd.
(c) copyright 2017 Access World