Skip to content

Instantly share code, notes, and snippets.

@JerryLokjianming
Last active November 13, 2024 15:04
Show Gist options
  • Save JerryLokjianming/71dac05f27f8c96ad1c8941b88030451 to your computer and use it in GitHub Desktop.
Save JerryLokjianming/71dac05f27f8c96ad1c8941b88030451 to your computer and use it in GitHub Desktop.
Crack Sublime Text 3.2.2 Build 3211 and Sublime Text 4 Alpha 4098 with Hex

How to Crack Sublime Text 3.2.2 Build 3211 with Hex Editor (Windows | Without License) ↓

  1. Download & Install Sublime Text 3.2.2 Build 3211
  2. Visit https://hexed.it/
  3. Open file select sublime_text.exe
  4. Offset 0x8545: Original 84 -> 85
  5. Offset 0x08FF19: Original 75 -> EB
  6. Offset 0x1932C7: Original 75 -> 74 (remove UNREGISTERED in title bar, so no need to use a license)
  7. Export File and save it to location you want
  8. Backup sublime_text.exe file (just rename)
  9. Copy sublime_text.exe modified to directory Sublime Text 3
  10. Happy Coding :)
Screenshot

Screenshot


How to Crack Sublime Text 4 Alpha 4098 with Hex Editor (Windows | Without License) ↓

  1. Download & Install Sublime Text 4 Alpha 4094
  2. Visit https://hexed.it/
  3. Open file select sublime_text.exe
  4. Go to Address: 0000A700 change 80 38 00 to FE 00 90
  5. Export File and save it to location you want
  6. Backup sublime_text.exe file (just rename)
  7. Copy sublime_text.exe modified to directory Sublime Text 4 (i.e C:\Program Files\Sublime Text)
  8. Use this License
----- BEGIN LICENSE ----- 
TwitterInc 
200 User License 
EA7E-890007 
1D77F72E 390CDD93 4DCBA022 FAF60790 
61AA12C0 A37081C5 D0316412 4584D136 
94D7F7D4 95BC8C1C 527DA828 560BB037 
D1EDDD8C AE7B379F 50C9D69D B35179EF 
2FE898C4 8E4277A8 555CE714 E1FB0E43 
D5D52613 C3D12E98 BC49967F 7652EED2 
9D2D2E61 67610860 6D338B72 5CF95C69 
E36B85CC 84991F19 7575D828 470A92AB 
------ END LICENSE ------
  1. Happy Coding :)
Screenshot

Screenshot


Blocked by Microsoft Defender SmartScreen -> More Info -> Run Anyway

Screenshot

Screenshot

Screenshot


How to Crack Sublime Text 3 & 4 Alpha 4094 with Hex Editor (Linux & MacOS | With License) ↓

  1. Download & Install Sublime Text 3 or 4
  2. Visit https://hexed.it/
  3. Open file select sublime_text
    • Linux Location: /opt/sublime_text/sublime_text
    • MacOS Location: /Application/Sublime Text [version].app (Correct Me If I'm Wrong)
  4. Search 97 94 0D and Change to 00 00 00
  5. Export File and save it to location you want
  6. Backup sublime_text file (just rename)
  7. Copy sublime_text modified to default directory Sublime Text
  8. Use this License
----- BEGIN LICENSE ----- 
TwitterInc 
200 User License 
EA7E-890007 
1D77F72E 390CDD93 4DCBA022 FAF60790 
61AA12C0 A37081C5 D0316412 4584D136 
94D7F7D4 95BC8C1C 527DA828 560BB037 
D1EDDD8C AE7B379F 50C9D69D B35179EF 
2FE898C4 8E4277A8 555CE714 E1FB0E43 
D5D52613 C3D12E98 BC49967F 7652EED2 
9D2D2E61 67610860 6D338B72 5CF95C69 
E36B85CC 84991F19 7575D828 470A92AB 
------ END LICENSE ------
  1. Happy Coding :)
Screenshot

Screenshot


@maboloshi
Copy link

@Destitute-Streetdwelling-Guttersnipe Previous binary file comparison, crack ideas and @leogx9r completely different.

@Destitute-Streetdwelling-Guttersnipe
Copy link

Destitute-Streetdwelling-Guttersnipe commented Dec 21, 2022

@Destitute-Streetdwelling-Guttersnipe Previous binary file comparison, crack ideas and @leogx9r completely different.

@maboloshi This patch just change the initial license check to 6A 00 58 C3, and then use codesign.
I think you can easily find other patch offsets

@maboloshi
Copy link

@Destitute-Streetdwelling-Guttersnipe I don't have a lot of time these days, so I'm going to give it a try when the time comes.

@DeveloperKev
Copy link

@maboloshi i am counting on you.

@Destitute-Streetdwelling-Guttersnipe

what is the way to patch Linux version ? the key listed here is over 3 years old and is not accepted with current version as it needed upgrading

97 94 0D Changed to 00 00 00

----- BEGIN LICENSE ----- 
TwitterInc 
200 User License 
EA7E-890007 
1D77F72E 390CDD93 4DCBA022 FAF60790 
61AA12C0 A37081C5 D0316412 4584D136 
94D7F7D4 95BC8C1C 527DA828 560BB037 
D1EDDD8C AE7B379F 50C9D69D B35179EF 
2FE898C4 8E4277A8 555CE714 E1FB0E43 
D5D52613 C3D12E98 BC49967F 7652EED2 
9D2D2E61 67610860 6D338B72 5CF95C69 
E36B85CC 84991F19 7575D828 470A92AB 
------ END LICENSE ------

@MasterCATZ There's a patch for linux at https://gist.github.com/opastorello/4d494d627ec9012367028c89cb7a1945
That one doesn't need the TwitterInc license.

Copy link

ghost commented Jan 30, 2023

Hi, I wrote a patcher for linux, and you guys can use the code and just change the patterns. thanks to everyone for writing the offsets and hex patterns, Subzero](https://github.com/socialfright/subzero), Thanks, I will make one for all OS's but I just wanted to send a proof of concept.

@t94xr
Copy link

t94xr commented Jan 30, 2023

Fyi that link is 404 ??

Copy link

ghost commented Jan 30, 2023

Sorry its on my github page i dont know why the link is not working

Copy link

ghost commented Jan 30, 2023

Fyi that link is 404 ??

github.com/socialfright/subzero i cant get that link to work

@Reelix
Copy link

Reelix commented Jan 30, 2023

The subzero link originally pointed to https://gist.github.com/maboloshi/url which is why it was broken for some people.

https://github.com/socialfright/subzero works properly.

@Aholicknight
Copy link

rapidgator.net/file/0e5e5b017ffc7ae94026040432122235/SUBLIME_TEXT_V4.4143_WIN64.7z.html

This version is not only uploaded to a random site that makes you wait 45 seconds to start downloading, but is 520kb, contains sandbox evasion code, is packed with UPX, alters the registry, and contains multiple other dlls and files - Including the actual 110.5kb file which it subsequently runs to appear legitimate.

The user ShaGrAt-LsD also has 0 public gists, and hasn't committed to Github in at least a year, with no activity since they forked 3 repos at the start of last year.

I personally wouldn't trust this random file.

@Reelix I have analyzed the program on triage, and the sandbox scan can be viewed here.

It's packed with ACProtect + UPX,

@ShaGrAt-LsD
Copy link

rapidgator.net/file/0e5e5b017ffc7ae94026040432122235/SUBLIME_TEXT_V4.4143_WIN64.7z.html

This version is not only uploaded to a random site that makes you wait 45 seconds to start downloading, but is 520kb, contains sandbox evasion code, is packed with UPX, alters the registry, and contains multiple other dlls and files - Including the actual 110.5kb file which it subsequently runs to appear legitimate.
The user ShaGrAt-LsD also has 0 public gists, and hasn't committed to Github in at least a year, with no activity since they forked 3 repos at the start of last year.
I personally wouldn't trust this random file.

@Reelix I have analyzed the program on triage, and the sandbox scan can be viewed here.

It's packed with ACProtect + UPX,

No it's not. It seems it's time to get better tools...

@Aholicknight
Copy link

Aholicknight commented Feb 19, 2023

rapidgator.net/file/0e5e5b017ffc7ae94026040432122235/SUBLIME_TEXT_V4.4143_WIN64.7z.html

This version is not only uploaded to a random site that makes you wait 45 seconds to start downloading, but is 520kb, contains sandbox evasion code, is packed with UPX, alters the registry, and contains multiple other dlls and files - Including the actual 110.5kb file which it subsequently runs to appear legitimate.
The user ShaGrAt-LsD also has 0 public gists, and hasn't committed to Github in at least a year, with no activity since they forked 3 repos at the start of last year.
I personally wouldn't trust this random file.

@Reelix I have analyzed the program on triage, and the sandbox scan can be viewed here.
It's packed with ACProtect + UPX,

No it's not. It seems it's time to get better tools...

firefox_20230215_v4F9CkThI0

I beg to differ @ShaGrAt-LsD
Virus scan here: https://www.joesandbox.com/analysis/1178886

@Destitute-Streetdwelling-Guttersnipe
Copy link

@o-baka
Copy link

o-baka commented Apr 24, 2023

License+patched for Linux ARM64:

This disk seems to be unavailable,can you send me a linux arm64 license?it's so hard to find,thanks

[email protected]

@strotee
Copy link

strotee commented Aug 2, 2023

Untitled

@fredgolightly
Copy link

fredgolightly commented Aug 3, 2023

@strotee

Untitled

Hex patches?

@strotee
Copy link

strotee commented Aug 3, 2023

https://pastebin.com/raw/KywbN0xV
Same instructions for 4152. These work for portable x64, btw.

@jsbryans22
Copy link

https://pastebin.com/raw/KywbN0xV Same instructions for 4152. These work for portable x64, btw.

Thank you but for me is not working. I tried but I cannot find it.. on
image

@strotee
Copy link

strotee commented Aug 4, 2023

It works. Start with a clean, portable source, when you search in HxD, click on the Hex tab. After you search for & replace the two values, then save the file in HxD and exit and open the file. Click on Help then Enter License, copy/paste the license (altering the [Enter your name] with your name). It's going to attempt to connect so that's why having a firewall (Simplewall) is crucial.

@nopeitsnothing
Copy link

No it's not. It seems it's time to get better tools...

Sorry, are you actually trying to claim that you accidentally have multiple IoC's, and that it was due to changing some hex bytes?

@jsbryans22
Copy link

It works. Start with a clean, portable source, when you search in HxD, click on the Hex tab. After you search for & replace the two values, then save the file in HxD and exit and open the file. Click on Help then Enter License, copy/paste the license (altering the [Enter your name] with your name). It's going to attempt to connect so that's why having a firewall (Simplewall) is crucial.

I don't use portable one.. for normal installed sublime you don't have the solve?

@fredgolightly
Copy link

iN hXd if I search/find it find the strings but if I Replace it can't find the second line. Manually typing the code over the string still says unregistered.

@Hazuki-san
Copy link

Hazuki-san commented Aug 6, 2023

4152 hex (Windows x64/leogx9r's method):
E8 17 FE 20 00 49 8B 96 B8 02 00 00 48 8D 0D 35 0C 00 00 41 B8 98 3A 00 00 E8 FE FD 20 00 4C 89 -> 90 90 90 90 90 49 8B 96 B8 02 00 00 48 8D 0D 35 0C 00 00 41 B8 98 3A 00 00 90 90 90 90 90 4C 89 (Invalidation/Validation Functions)
30 5E C3 E9 66 25 00 00 55 41 57 41 56 41 55 41 -> 30 5E C3 E9 66 25 00 00 48 31 C0 C3 56 41 55 41 (License Validity Checking)
F5 FF 90 48 83 C4 30 5B 5F 5E 41 5E 5D C3 55 56 57 48 83 EC 30 48 8D 6C -> F5 FF 90 48 83 C4 30 5B 5F 5E 41 5E 5D C3 48 31 C0 48 FF C0 C3 48 8D 6C (Server Validation Thread)

After patch just enter anything to license and it should work.

@fredgolightly
Copy link

F5 FF 90 48 83 C4 30 5B 5F 5E 41 5E 5D C3 55 56 57 48 83 EC 30 48 8D 6C -> F5 FF 90 48 83 C4 30 5B 5F 5E 41 5E 5D C3 55 56 57 48 83 EC 30 48 8D 6C (Server Validation Thread) these are the same values

@Hazuki-san
Copy link

Hazuki-san commented Aug 7, 2023

@fredgolightly I'm sorry, my copy/paste system probably had some hiccups.

F5 FF 90 48 83 C4 30 5B 5F 5E 41 5E 5D C3 55 56 57 48 83 EC 30 48 8D 6C -> F5 FF 90 48 83 C4 30 5B 5F 5E 41 5E 5D C3 48 31 C0 48 FF C0 C3 48 8D 6C

@Destitute-Streetdwelling-Guttersnipe
Copy link

@dansemal
Copy link

dansemal commented Aug 9, 2023

https://pastebin.com/raw/KywbN0xV Same instructions for 4152. These work for portable x64, btw.

Thank you but for me is not working. I tried but I cannot find it.. on image

this is work for me sublime text 4152 https://github.com/N1ght420/Sublime-Patch

@jsbryans22
Copy link

https://pastebin.com/raw/KywbN0xV Same instructions for 4152. These work for portable x64, btw.

Thank you but for me is not working. I tried but I cannot find it.. on image

this is work for me sublime text 4152 https://github.com/N1ght420/Sublime-Patch

Thank you very much is worked perfectly
image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment