[Library] Blizzard Authenticator Emulator

[kynox]

Recently, a friend asked if I knew how to run the authenticator on a Windows Mobile; puzzled that Blizzard hadn't supported that platform yet, I decided to take a look for myself.

Attached is the result of my findings. A complete authenticator emulator library, with included basic demonstration.

* Notes *

1. This does not allow you to gain unauthorized access to peoples authenticators.
2. This is limited to mobile-authenticators keys, as I don't have the know-how to disassemble the physical hardware authenticators.
3. To use this tool with a pre-existing authenticator, you must have access to your phones file-system in order to extract the Serial and Token from its configuration file.

Caveat: The library itself is closed source until further notice, and must retain the included license files if used in projects other than the included test project.

Serial refers to the "US-XXXX-XXXX-XXXX" code and Token refers to a shared-public key used in the generation of the one-time keys.

* Releases *

v20090108

[Gripen2]

Nevermind, The link is working now.

[kynox]

The link is broken.

Sorry about that, i forgot i have my domain set-up to redirect - it's temporarily fixed.

[Cypher]

Omg no virus scan! Now where am I supposed to get a false sense of security?

P.S. Nice work.

[DesperadosCZ]

Well, how i can get to work this on SE C510 ?

[kynox]

Well, how i can get to work this on SE C510 ?

You don't. Your model of mobile has support for JavaME.

[DesperadosCZ]

ok, is any chance to get authenticator to my mobile? Its not supported and I don't know how to get it to work

[OriginalG]

Omg no virus scan! Now where am I supposed to get a false sense of security?

I lol'ed

[snigelmannen]

Another kynox release looks good and i hope its possible to port this to my Symbian cell

[kynox]

Another kynox release looks good and i hope its possible to port this to my Symbian cell

Red Five Labs should get you started.

[snigelmannen]

You sir are a god. Thanks. PS fyi my browser does support google but i havent really been looking into it but thanks DS

[HiddenFear]

I'm confused about this. Does this add support for the mobile authenticator on phones that aren't listed by Blizzard? And if so, would this work for a Blackberry Curve 8330?
It's a darn shame Blizz has support for the less popular Blackberry models, but the most popular brand isn't supported. Go figure.

[BoogieManTM]

The hardware authenticators are the same thing, you just have no remote access to the symmetric keys (aka seed), without that you'd never be able to emulate the hardware token without ripping it to pieces and figuring out how to get the keys off of it.

Good job as always Kynox!

[ReidE96]

Another epic release from kynox. Good job!

[kynox]

The hardware authenticators are the same thing, you just have no remote access to the symmetric keys (aka seed), without that you'd never be able to emulate the hardware token without ripping it to pieces and figuring out how to get the keys off of it.

Good job as always Kynox!

True - I wish i knew how to extract it from the hardware, but my field of expertise doesn't extend that far