Captured Windows 8 KMS Activation Network Traffic

Discussion in 'Windows 8' started by Dhilip89, Aug 14, 2012.

  1. hack

    hack MDL Senior Member

    Sep 14, 2009
    293
    252
    10
    Haven't got that far yet still trying catch up on the last 3 years of KMS.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. jarod75

    jarod75 MDL Novice

    Oct 29, 2009
    27
    21
    0
    Function Lover, May i suggest you this one: sub_75B0EB :biggrin:
     
  3. hack

    hack MDL Senior Member

    Sep 14, 2009
    293
    252
    10
    #83 hack, Sep 5, 2012
    Last edited: Nov 17, 2012
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. meShell

    meShell MDL Novice

    Jan 27, 2009
    25
    9
    0
    #84 meShell, Sep 5, 2012
    Last edited by a moderator: Apr 20, 2017
    aaah first had to extract 32bit exe from install.wim

    for those who want to mount wims (where D: is cd drive with mounted iso):
    Code:
    dism /Mount-Wim /wimfile:D:\sources\install.wim /index:1 /MountDir:c:\img /ReadOnly
    unmount with:
    Code:
    dism /Unmount-Wim /MountDir:c:\img /discard

    58258D loooks funny zoomed out, and yes sub_75B0EB like many steps.

    Maybe you can tell me what they do as soon as you found out? :biggrin:
     
  5. jarod75

    jarod75 MDL Novice

    Oct 29, 2009
    27
    21
    0
    It"s not clear for the second one but the first one is clearly a very important function for the new KMS activation. Study & you will undertand ...

    LOVE is ALL ... :biggrin:
     
  6. hack

    hack MDL Senior Member

    Sep 14, 2009
    293
    252
    10
    #86 hack, Sep 6, 2012
    Last edited: Sep 6, 2012
    @FreeStyler

    Edit Not Working
    Your method may work if the snapshot of the Client VM is older than KMS-Host VM. Try exporting your KMS-Host VM and Import (create anew unique ID).
    Was just testing on the Base KMS_C_R2 that I just imported and my old Client VM snapshot works without re-arm. MS may have fixed this with SP1 or the Hotfix. Still testing but I can confirm the KMS Host is VM Client aware with Activation Count leeway @ least before SP1
    .

    Edit: what I was seeing was more than likely just a longer "Activation Count Grace Period" the client snapshot had reached 26 Days time remaining and was activating it has now stopped. Probably find with the hotfix for the KMS Host they just decreased this window. You would need to figure a rearm into your method.

    The other anomaly I found Pre SP1 is the current count increases by 1 but the total requests received by 2?

    Edit:
    If anyone is wondering why I seem to be posting off topic cr@p on this thread the fact is we need to know what relevant data is exchanged between the RPC client and host before we can emulate it. It would be useful to know what direction MS took in updating the KMS. Still a bit concerned that KB2691586 is a provisional Hotfix
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. lunar21

    lunar21 MDL Addicted

    Dec 14, 2008
    753
    270
    30
    Hey is the Hyper-V KMS that was leaked last month, does that VM fully work, or do we still have to have to install a server key to use it?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  8. hack

    hack MDL Senior Member

    Sep 14, 2009
    293
    252
    10
    You still require a Win8/Server2012 KMS Host Key. We have figured out to fake the 25 client minimum using another Win7/Server2008R2 VM.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  9. lunar21

    lunar21 MDL Addicted

    Dec 14, 2008
    753
    270
    30
    Where can I see how to do this faking thing? Does this mean we can activate 25 PC's, or is this just a start leading up to the finish once we get a KMs key?


     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  10. hack

    hack MDL Senior Member

    Sep 14, 2009
    293
    252
    10
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  11. lunar21

    lunar21 MDL Addicted

    Dec 14, 2008
    753
    270
    30
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  12. DarkStarXxX

    DarkStarXxX MDL Member

    Feb 14, 2010
    225
    70
    10
    A KMS Host Key is useless, because there are only 6 Activations.

    We Need a Image with a Activated Host Key.
     
  13. hack

    hack MDL Senior Member

    Sep 14, 2009
    293
    252
    10
    Let me define this: If you have access to a Win8/Server2012 host key

    Depending on your risk for criminal prosecution if you or your company has a Volume Licence Agreement with Software Assurance you would have access to a KMS Host Key. I would recommend you consult a legal representative before using it illegally. Yes you can only activate up to 6 KMS Host servers with each key. You could in fact activate a server core VM and post the VHD online but once again I would recommend you consult a legal representative..
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  14. FreeStyler

    FreeStyler MDL Guru

    Jun 23, 2007
    3,557
    3,832
    120
    @hack
    a /rearm should change the Installation ID of the system, right?

    My method seems to work just fine, but i might have triggered /ato on a snapshot more then once which stopped increasing the count, eg: the so called "Activation Count Grace Period"
    Once I pushed the client count up once using another install my method start working again.

    Anyway, looking into a method that would simplify things a bit as my method is not the fastest (the whole detecting hardware cycle has to run to get a unique installation ID)
    I was thinking about something like this:
    1. VM starts to desktop for the very first time (made a snapshot 'Firstboot')
    2. /rearm & reboot
    3. VM starts to desktop and runs a script /skms /ipk & /ato
    4. VM stops
    5. ... apply 'firstboot' and rerun
     
  15. Mr Jinje

    Mr Jinje MDL Expert

    Aug 19, 2009
    1,770
    1,101
    60
    I'm sure this would have sounded crazy 10 years ago, but 250GB is not a lot of space, why not create 25 VM's.
     
  16. FreeStyler

    FreeStyler MDL Guru

    Jun 23, 2007
    3,557
    3,832
    120
    Right 250GB is not a lot of space, but to my opinion way to much to spend on useless VM's

    Anyway, seems like a /rearm in the method described above doesn't change the Installation ID... how do i know if the CMID has changed? (without actually trying to activate against KMS host)
     
  17. Mr Jinje

    Mr Jinje MDL Expert

    Aug 19, 2009
    1,770
    1,101
    60
    #97 Mr Jinje, Sep 6, 2012
    Last edited by a moderator: Apr 20, 2017
    Try this

    Code:
    Get-WmiObject -class SoftwareLicensingService | Select-object ClientMachineID
    I'm guess export-csv every pass and compare against the previous row in the array. Or check in Start-Transcript logs.
     
  18. hack

    hack MDL Senior Member

    Sep 14, 2009
    293
    252
    10
    #98 hack, Sep 6, 2012
    Last edited: Sep 6, 2012
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  19. FreeStyler

    FreeStyler MDL Guru

    Jun 23, 2007
    3,557
    3,832
    120
    #99 FreeStyler, Sep 6, 2012
    Last edited by a moderator: Apr 20, 2017
  20. roirraW "edor" ehT

    roirraW "edor" ehT MDL Addicted

    Sep 1, 2007
    618
    217
    30
    Oh no! Can't wait for the new onslaught of "Will this activate my Windows 8?" posts? ;)
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...