-
How account specific identifiers could be used to generate character specific DRM, along with obfuscation techniques one could use inside the WoW environment.
-
Copy the
LicenseProbefolder into: Interface/AddOns/ -
Log into WoW on any character
-
Type: /lp
-
Click the generated hash to select it, then press Ctrl+C
- Open
website/index.htmlin any modern web browser
(works fully offline) - Paste the copied license hash
- Click Compile Addon
- Download the three generated files
-
Create: Interface/AddOns/LicenseDemo/
-
Place all three downloaded files inside
-
Reload the UI: /reload
-
Type: /ldemo
The demo intentionally expires 15 minutes after hash generation and displays a live countdown to illustrate time-based validation logic.
The following are included strictly for educational analysis:
These are intentionally very naive implementtions, the intention is to demonstrate PoC, not actually make this project hard to crack
- Character-bound identifiers (GUID binding)
- Short-lived temporal binding
- Multi-stage key derivation
- Control-flow flattening
- Symbol mangling
- Dead-code injection
- Shuffled payload chunks
- Basic anti-tamper checks
- Self-destructing plaintext logic
These techniques raise the cost of inspection, but would not stand up to someone dedicated to reversing the code.
- This project is solely for educational purposes
- Client-side licensing can always be bypassed
- Obfuscation ≠ security
Used, not here trying to spend hours to prove its possible :P
MIT