search

Lama3L9R / ArtifactoryKeygen

A keygen for JFrog Artifactory
49 stars 27 forks source link

readme

ArtifactoryKeygen

As it's named, this project is a keygen of Artifactory from JFrog.

Tested on 7.59.11 (Latest version), 7.9.2 (Latest version on releases-docker)

If you think this project is useful to you please leave a star! Thanks!

ALERT!! YOU SHOULD NEVER USE THIS PROJECT TO CRACK / PATCH / ILLEGAL USE ANY SOFTWARE FROM JFROG

ALERT!! THIS PROJECT IS FOR EDUCATIONAL PURPOSES!

ALERT!! THE CONSEQUENCES CAUSED BY THE USE OF THIS SOFTWARE SHALL BE BORNE BY THE USER

996.icu LICENSE

Click for different languages of this file

Table of Contents

0x00 Installation

Download ArtifactoryKeygen and ArtifactoryAgent both from Github Releases

Run ArtifactoryKeygen with Java 11 or above.

$ java -jar /path/to/ArtifactoryKeygen-1.0-SNAPSHOT-all.jar [sub-command]

Leaving sub-command empty will eventually prompt you to enter a sub-command later

Use thegen sub-command to generate a license

Of course, the license generated by Keygen cannot be used directly. You'll need ArtifactoryAgent to patch some files.

Navigate to Artifactory's Tomcat folder then edit bin/setenv.sh (It should be named setenv.bat on Windows)

Add the following line to that file. Don't forget to change the path!

# Linux / macOS(But why macOS??)
CATALINA_OPTS=-javaagent:/path/to/ArtifactoryAgent-1.0-SNAPSHOT-all.jar
:: Windows
SET CATALINA_OPTS=-javaagent:path\to\ArtifactoryAgent-1.0-SNAPSHOT-all.jar

DON'T FORGET: YOU SHOULD NEVER USE Artifactory ILLEGALLY

0x01 Configuring the keygen

Currently, this is not supported. I may add this feature future.

0x02 Configuring the agent

Currently, override the default public key is the only configurable entry.

Override default public key

First, you need to generate a proper configuration using Keygen, although you can do it manually.

By using the keygen

Run the keygen with the sub-command 'mkconfig' and then enter your public key.

To be noticed that the public key should be a RSA Public Key in X509 Format and have at least 4096 bits of modulus of the key

Copy the generated text and put it in agent arguments like this:

# Linux
CATALINA_OPTS=-javaagent:/path/to/ArtifactoryAgent-1.0-SNAPSHOT-all.jar=<GeneratedConfigHere>
:: Windows
SET CATALINA_OPTS=-javaagent:/path/to/ArtifactoryAgent-1.0-SNAPSHOT-all.jar=<GeneratedConfigHere>

The configuration should be in hexadecimal format with all letters capitalized

By your hands

Edit the template below and use Base64 to encode it then convert the encoded result into a hexadecimal string with all letters capitalized.

<config>
    <publicKey>Your public key here</publicKey>
</config>

You can get any text hexadecimal-ized by passing your text into the agent (Yes the agent is executable!)

$ java -jar /path/to/ArtifactoryAgent-1.0-SNAPSHOT-all.jar <Text>

Also, you can generate a proper key pair(RSA 4096) with the genkey sub-command in Keygen

0x03 Other useful tools

Keygen

You can retrieve all available sub-commands by using the sub-command 'help'

I'm lazy to write a help again so I copied from the sub-command 'help'

println("""
    List of all sub-commands:
        obf <text>:
            Obfuscate text with JFrog's 'ObfuscatedString' class
        pub:
            Get the current public key (RSA)
        pri:
            Get the current private key (RSA)
        genkey:
            Generate a key pair
        gen:
            Generate a license with the current private key
        verify <license>:
            Verify a license with the current public key
        enc: [ NOT TESTED ]
            Encrypt a license (I guess this is used for the license of the old version)
        verifyAgent:
            You can verify ArtifactoryAgent by attaching the agent to ArtifactoryKeygen
        mkconfig:
            Create agent config but friendly!
    To inject into artifactory
        Open Artifactory's tomcat folder and add the following JVM options to tomcat.
        In case you don't know how to pass extra JVM args you can see the README of this project
        OR Google it by yourself!

        -javaagent:</path/to/this/jar/file>

        his will patch class 'org.jfrog.license.api.a'

""".trimIndent())

0x04 Compilation

Compiling the code might be a little different compared to other gradle projects.

You will notice that I've used a library from JFrog which looks like not a public one. So I decided not to upload it. However, you can extract it from artifactory.war

I assume that you are familiar with web development with Java and SpringFramework. So there will be no tutorial here about how to extract it. If you meet any problem while extracting google first!

After extracting the necessary libraries you should put them into libs. If those libraries have changed their version don't forget to update in build.gradle.kts

To compile the code and pack a jar file with all dependencies use the following gradle task

# Root project (Keygen)
$ gradlew :shadowJar
# Agent
$ graldew :ArtifactoryAgent:shadowJar

PRs are always welcome! Thanks for your contributions to this project!

0x05 TODOs and Future updates