Denuvo game cracked in 6 weeks

Graal

New member
Shame man, I bet the developer of Inside is pissed. Denuvo only guarantees 4 weeks but I think this is still the fastest one of their games has ever been cracked.

https://torrentfreak.com/denuvo-weakens-after-inside-cracked-in-record-time-160824/

Dozens of anti-piracy techniques have been tested over the years on formats ranging from cassette tapes to digital downloads, but for pirates the lure of free content is both intoxicating and enduring.

In recent years, games developers have come to accept that piracy cannot be eradicated entirely, but it can be slowed down. The main aim in the modern era is to stop games leaking in the days, weeks and early months following their launch. This allows titles, especially those with high production costs, to make the best of those crucial early days.

In no insignificant terms that breathing room has been provided by Austrian anti-piracy outfit Denuvo. Its anti-tamper technology is quite possibly the best there is and as a result, many so-called AAA titles have remained piracy free since their launch. Just recently, however, significant cracks (excuse the pun) have appeared in its armor.

Early this month, a ‘Scene’ group called CONSPIR4CY properly cracked an iteration of Denuvo that had been protecting Rise of the Tomb Raider (ROTTR). The news had many pirates extremely excited.

While undoubtedly a momentous occasion, ROTTR had been released in January, meaning that in theory CONSPIR4CY might have worked on the crack for six or seven months, a lifetime for most pirates. Furthermore, half a year’s head start is huge for the title’s developers in terms of sales, so without doubt Denuvo had done its job.

Yesterday, however, there was a new development which might represent a more worrying chink in Denuvo’s defenses.

With a lack of fanfare usually associated with some of the Scene’s more mature groups, CONSPIR4CY (a reported collaboration between the CPY and CODEX groups) released a fully cracked version of puzzle-platformer ‘Inside‘

The importance here is that while ROTTR enjoyed six months without having to compete with free, Inside was released for Windows on July 7, 2016. No one but CONSPIR4CY knows precisely when they began chipping away at the game’s protection but even if they started on day one, it has taken only six weeks to defeat it.

There is some speculation that Inside took less time to crack because in storage terms it’s a smaller sized game that ROTTR. That being said, it will be of little consolation to Danish developer Playdead who will have paid Denuvo handsomely for their protection.

With CONSPIR4CY all but impossible to find, let alone obtain a comment from, TorrentFreak asked Royalgamer06, a colleague of Voksi who found a Denuvo workaround earlier this month, for his thoughts on the new release.

“It’s quite obvious that CONSPIR4CY is beating Denuvo. At least the current Denuvo protection,” Royalgamer06 told TF.

“Inside’s Denuvo protection is quite recent and therefore we could expect all sorts of Denuvo (Steam) games coming from [CONSPIR4CY].”

Royalgamer06 believes that it may have only taken CONSPIR4CY two weeks to crack Inside (taking the release of ROTTR as a start point) and that another big game’s debut (also Denuvo protected) might have influenced the pirate release yesterday.

“It took CONSPIR4CY two weeks [following the release of ROTTR]. They either waited to release it (just before the new Deus Ex game is nice timing) or it’s all the time it took them to patch all in-game triggers and polish the crack,” he explains.

So all eyes now turn to the brand new release of Deus Ex Mankind Divided. If that game is quickly cracked by CONSPIR4CY, Denuvo could be coming out in a cold sweat. In the meantime, others are also attempting to dismantle their empire.

“Voksi is also up to something,” Royalgamer06 concludes.
 
I would love to know the technical aspect of how Denuvo's protection works, and how it got cracked. Any of the admins here feel to write an article about it? I suppose i can just go google it as well.
 
From what I've read they build specific 'triggers' into the game code itself at various points and when those triggers are activated the game needs to validate for authenticity. And then there's some horribly difficult encryption to break. Something along those lines. I haven't read up on it too closely.
 
I mean wasn't Tomb Raider the first denuvo to be cracked, and look how long that was out before it happened.
 
I mean wasn't Tomb Raider the first denuvo to be cracked, and look how long that was out before it happened.

if i remember the article i posted a while back rise of the tomb raider wasnt the first denuvo game to be cracked, think that was dragon age inquisition or fifa 15 but ROTTR is the first game to be cracked running the current version of denuvo which is apparently version 3
 
I don't know too much about exactly how Denuvo works; However based on some research it seems like they use a 64-bit encryption machine that requires cryptographic keys unique to the specific hardware of each installed system. Armed with this knowledge, and that it has been cracked, I can safely assume the following :

- Denuvo did not write a new cipher or algorithm
- It's likely an Asymmetric cipher
- It's most likely "cracked" by employing a side-channel attack
- Probably a variation of a MITM attack

The most likely way Denuvo works is to cross check various encrypted signatures, the weakness is that (if an asymmetric cipher is used) is that both the public and private parts exist on the same host (i.e you local machine). It would actually be unfeasible for them to run servers that are constantly interrogated to "check" if files have been tampered with this way; This is because every single check would result in you sending a bunch of data to their servers and getting a response back and no response or a malformed response would cause the "check" to fail and lock you out. IF it is a 64-bit based, which it likely is for speed reasons as 512-bit and up based encryption can make CPUs suffer, it would be significantly easier to beat.

Unfortunately I don't have enough knowledge of exactly how Denuvo does what they do, so I really cannot say for sure.
 
I don't know about constantly checking files, but I do know there is a server that is contacted for an activation process. At least I remember one of the workarounds used activations from the demo for the new Doom to bypass Denuvo for other games. I'm guessing that activation involves generating a unique key specific to your system?
 
Yeah, once in a while (or when anything significant on your system changes) Denuvo has to phone home to activate the game all over again.

This means that if you go on holiday somewhere where you don't have internet and the game decides it's time to activate again, you won't be able to play until you get back to an internet connection.
 
And here comes a crack for DOOM.

http://zerolives.com/article/n7MQOfdh/release-group-cpy-releases-doom-denuvo-crack

Release group CONSPIR4CY, or CPY, has released a crack for the Denuvo-protected game DOOM. The new crack comes exactly two weeks after the group's release of Inside.

With the release of DOOM the release group is able to show that anti-piracy software Denuvo is no longer a bulletproof option for developers to protect their games from being shared via illigitimate channels.
The game DOOM has been at the centre of attention of many Denuvo crackers. The game launched last May and has hasn't seen a scene release since that time. In August hacker Voksi released a bypass method for the game that was fixed days later.

In recent months several triple A development studios have signed contracts worth thousands of dollars with Denuvo Software Solutions GmbH, the Austrian company that develops the protection scheme, to use the software in their games.

Now that release group CONSPIR4CY has proven that Denuvo-protected games are no longer safe from being cracked game developers are expected to be less likely to use the software in their games.

Anti-piracy software included in games has long been scrutinized for causing all sorts of issues, including crashes and frame rate issues. When Microsoft released Windows 10 in 2015 hundreds of games protected by anti-piracy techonology SecuROM stopped working.

Denuvo is currently being developed by the same company that also worked on SecuROM, making gamers around the world wary of issues that could make their purchased game unusable in the near future.
 
I just wanna know what incentive these guys have to spend so much time to crack a game, game after game. Before Denuvo I can understand, but the time vs. reward factor now surely must be minimal.
 
I just wanna know what incentive these guys have to spend so much time to crack a game, game after game. Before Denuvo I can understand, but the time vs. reward factor now surely must be minimal.

It's the sense of the achievement of being able to do something that is very difficult or next to impossible; like people who scale Mt. Everest or people who try to crack supposedly uncrackable safes. When somebody says that something can't be done, or in this case cracked, you can be sure that there will be people who will want to test that theory or take on the challenge of trying to beat it. It's like the real life version of this:

0TGApEH.gif
 
Back
Top