I got a GUI Program, which loads the Logic from a webserver if the entered License Key is valid.
The actual connection string I hexed and
xor'd with a secret key. (which is unfortunately static)
The Webservice itself authenticates
Person A doesn't want to buy a license. So he tries to reverse engineer it:
- Enters Random False Key - no data from Webservice.
In my understand, the only chance to actually bruteforce the program is to crack the secret key. My thought was creating one dynamically. Besides that, what other approaches are there?