The scanning software phones home to check for updates as well as to ensure you are using a valid license.

To avoid an internet outage keeping us from being able to scan, we have spoofed the server response to the license check. The client machine's hosts file (c:\windows\system32\drivers\etc\hosts) should be set to redirect requests intended for the license server to infusion instead.

file hosts.txt

# FILE C:\Windows\System32\drivers\etc\hosts
# localhost name resolution is handled within DNS itself.
#	127.0.0.1       localhost
#	::1             localhost
192.168.0.72  license.seacolt.com

Infusion is running IIS with a plain text file right now that only contains the spoofed response.

Update url: www.seacolt.com/downloads/scanupdates.txt (dead as of October 15, 2015)

• License url: activate.aspx
• License key used for this example: Q84QX-2SF9S-5Z6DI-ZG72G

POST /activate.aspx HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Host: license.seacolt.com
Content-Length: 88
Connection: Keep-Alive

sn=E8A66832C436CB98B54B6E47F147CCC45F7E0C17FB291140&mid=3899FA41CB952C045359FF7E6D343A4CHTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/plain; charset=utf-8
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Thu, 15 Oct 2015 18:06:11 GMT
Content-Length: 16

CC054B68F2937B3A

The license verification posts arguments as follows to the license url:

• sn=E8A66832C436CB98B54B6E47F147CCC45F7E0C17FB291140
• mid=3899FA41CB952C045359FF7E6D343A4C

SN seems to be based on the license or activation key in use. Mid is an identifier based on the detected hardware on the machine. (Video driver changes affect this.)

A plain text response of “CC054B68F2937B3A” seems to indicate success for that sn regardless of what mid argument is supplied. Which is to say hardware changes can be made so long as we return that response.

Hosts file:

# Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host
 
# localhost name resolution is handled within DNS itself.
#	127.0.0.1       localhost
#	::1             localhost
192.168.0.72  license.seacolt.com # use infusion as if it were seacolt's phone home server

License files:

• download