Password for Automation Direct PLC 1

[zaphod1]

I know a company owner whose automation guy left the company after password protecting a fairly wide base of PLCs in customer locations (He also has all sourcecode). He refuses to divulge the passwords or return the sourcecode and the situation has gone to litigation. In the meantime there is a need to access the PLCs. Does anyone have a rccomendation?

 

[nbucska]

You can capture the code with an emulator and in a few
weeks you should be able to decode it.

It may be cheaper to rewrite the code than reverse engineering it.



<nbucska@pcperipherals.com>

 

[CoachGlenn]

What is an emulator?

 

[nbucska]

Usually a connector/socket-extender with buffers etc.
interfaced by cable to a computer. It captures the
address/data busses of the processor as the program runs and the computer's software disassembles them.

When the program waits for the PW, you type in anything
and watch how it fails. Patch/modify the code and repeat...




<nbucska@pcperipherals.com>

 

[SteveMeisel]

Here is a fellow who has cracked the slc and the mitsubishi passwords. This may get you headed in the right direction.

http://freespace.virgin.net/ian.sullivan/rockwell.pdf

http://freespace.virgin.net/ian.sullivan/mitsubishi.pdf

Good Luck.

Steve