[?]: Unlock password of s7 1200

[Mustablanco]

Hello everyone

I have a plc s7-1200 cpu 1215c dc/dc/dc locked by password without a MMC

May i anyone help me???

[roberto_battistella]

prova a mandarmi il file

[Mustablanco]

I dont have the file program , i want to upload from the plc s7 1200 but is locked by a password and in my cpu there is no MMC memory card

any idea to get the password and get in

[roberto_battistella]

purtroppo non riuscirai a fare nulla. ho già provato senza successo. se vuoi, mandami una mail e ti invio un programma che usa il metodo "brute force" direttamente collegato alla CPU (con Proneta trovi indirizzo IP e poi lanci il programma). Se la pwr non è complessa forse la trova. ciao

[viettl]

Dear Mustablanco,
Can you share this software "prova a mandarmi il file" with me? I have some S7-1200 PLCs that are password locked.
Thanks!

[georg_demmler]

Hello,

I' m surprised - "prova a mandarmi il file" sounds like a italian language and means - try to send my the file.

Hope this helps

[fbarbosa]

Ciao, Roberto. Mi chiedo se puoi condividere il software di forza bruta con me, per favore. Ho una macchina che non funziona e vorrei indagare sulla logica per trovare la causa del problema.
Saluti.

Hello Roberto. I wonder if you can share the brute force software with me please.
I have a machine that is not working and I would like to investigate the logic to find the cause of the problem.

[nikolajpug]

Dear Roberto! Can You unlock a bin file from s7-224 ? Regards Nikolai

[CoMod]

unPassword Step7/Micro/Win S7-200/S7-300 Project
viewtopic.php?f=31&t=18068

Для S7-200/S7-300 есть утилиты - учитывай, что они упакованы упаковщиками, которые (упаковщики) определяются антивирусами как вирусы = работай в виртуалке.

[PLC_ITA]

For Roberto

Hi Roberto, I Read that you have a small program that uses the BRUTE FORCE method to try to find the password on 1200.
A colleague of ours for disputes with the ownership has quit and left no trace of a software password on a 1200, but the source is also missing so I have to download it from the CPU which is protected
I would like to try this program and hope to discover the password. In this case, the sw is relatively simple, and if I have to waste too much time I'll do it again in this case in 2..3 days.
But the fear is that also on other works of him we find the same surprise.

Can you share the little program? (clearly if you can !!)
May contact me in PM

thanks a lot

Fabio

[misa1515]

If is possible, I please too for small app to PM. Thanks.

[mikele]

Dear Roberto, Could you also send me this small program?

[LiginDan]

Dear Roberto, Could you also send me this small program?

[roberto_battistella]

redirect link to 4shared site
keyS7.rar
805 KB | 2018-02-28
https://www.4shared.com/rar/L19aRZ9fca/keyS7.html

https://mega.nz/file/hN9mHIoI#DdrKytveL ... PWLMVEm9BU

[AMJScholz]

Hello Mr Roberto Battistella,
Like the others, I have a PLC S7 1200 where the program is write and read protected.
I urgently need a way to open this program and read the password.
If you can, please give me the possibility.
If there are any costs, please give me a way to pay them.
With kind regards

[roberto_battistella]

in the description of the video posted above, I found the link to download the program that should find the password. else I don't know. HI.

[atmel]

Hello,

was somebody successful with using program keyS7 (I have version v3.13) for brute-force password guessing on newer series S7-1200? I am even unable to connect to the PLC, I always get an unhandled exception error with message: Unable to find an entry point named _MPI_A_Einleitung_TCP_IP_Direct in DLL WSC32.DLL.

I wanted to test the keyS7 software, so I made a simple program in TiaPortal V15.1, set the password protection (HMI access) and download the program to the S7-1200 plc. Ping on PLC's IP address works fine, but the keyS7 software can't connect to the PLC...

Do you have any ideas?

Thanks a lot in advance.

[willbmetalhead]

Dear Roberto, Could you also send me this program?

[houamncnd]

HI
I have step7-1200 password protected with no MMC, I need to upload but it needs user and password
any body can help
I really need to add some new I/O to logic but I cannot

Regards
Houman

[guolibin]

Open the storage card file using TIA, create a new empty program, select the next level directory of "Reader_1" and drag and drop it into the empty project. This will prompt you to upload the program from the storage card。

[famaro]

Hello Atmel,
I have the same error, could you solve it?

Thank you