Malwarebytes Keygen Proxy

Overview

Malwarebytes Keygen Proxy is a Proof of Concept (POC) C# application that acts as a proxy server to intercept and manipulate HTTP requests made by the Malwarebytes client application. The proxy handles requests for license validation and registration, responding with a generated "valid" license key, effectively allowing you to bypass the standard license checks.

How It Works

• The proxy intercepts API requests made by the Malwarebytes client (e.g., requests for license validation, registration, etc.).
• Based on the request type, the proxy generates a suitable response containing license information.
• For validation or registration requests, it responds with a pre-defined "valid" license key, making the Malwarebytes client believe it is properly licensed.

Features

• Intercepts License Checks: Captures requests made to the Malwarebytes API for installations, registrations, and validations.
• Generates Valid License Key: Responds to the intercepted requests with a "valid" license key and associated information.
• Customizable Responses: The proxy is set up to provide predefined responses but can be easily modified to change the response data.

Prerequisites

• .NET SDK 8.0 or later: The application is written in C# and requires .NET for compilation and execution.
• Certificates: The application uses .pfx certificates for SSL decryption and traffic manipulation. The following certificates should be placed in the root of the application's directory:
  • rootCert.pfx: Root certificate for establishing trust with the client.
  • MalwareBytes.pfx: Generic certificate used by the proxy for HTTPS traffic.

How to Use

1. Prepare the Certificates: Ensure that the rootCert.pfx and MalwareBytes.pfx files are in the root directory of the application.

2. Install and Trust Certificates: In order for the proxy to intercept HTTPS traffic, you need to install and trust these certificates on your machine. On Windows, this usually means adding rootCert.pfx to the Trusted Root Certification Authorities store. Make sure the certificates are trusted at the Local Machine level for the proxy to work properly.

3. Build the Application: Use the .NET SDK to build the project.

   dotnet build

4. Run the Application: Launch the application, specifying the IP address and port on which to listen.

   dotnet run -- <ipAddress> <port>

   Replace <ipAddress> with the desired IP address to bind and <port> with the port number.

5. Configure the Malwarebytes Client: Point the Malwarebytes client to the proxy server by setting its proxy settings to match the IP address and port specified above.

6. License Key Response: The proxy will handle and respond to all license-related requests with valid data, allowing the Malwarebytes client to function as if it has a valid license.

Code Structure

• Proxy.cs: The main logic for intercepting requests and generating license responses is located here.
• Handlers: Various handlers (HandleCheckRequest, HandleRegisterRequest) manage specific request paths and responses based on intercepted API calls.
• Certificate Management: Manages certificates required for HTTPS interception and ensures the proxy can properly decrypt and manipulate traffic.

Dependencies

• Titanium.Web.Proxy: A cross-platform C# library for creating a man-in-the-middle (MITM) proxy server.
• Newtonsoft.Json: JSON library used for serialization and deserialization of request/response data.

Notes

• Admin Privileges: Running the application with administrator privileges is necessary for installing certificates into the LocalMachine store and intercepting HTTPS traffic.
• Installing Certificates: Before running the proxy, ensure that you have installed and trusted the rootCert.pfx and MalwareBytes.pfx certificates. This is essential for HTTPS traffic interception.
• License and Terms of Use: Please be aware of the legal implications of using this software, as intercepting and manipulating software licensing may violate Malwarebytes' terms of service.

Disclaimer

This software is for educational purposes only. The author does not endorse or support the misuse of this tool to bypass legitimate software licensing. Use at your own risk.

License

This project is licensed under the MIT License.

---

Contributing

Contributions are welcome! Feel free to submit pull requests or raise issues if you encounter any bugs or have feature suggestions.

---

Author: Nebula