[?]: How to get password from S7 400 PLC ?

engineer888 · Post by **engineer888** » Wed Oct 31, 2007 7:04 am

I want download PLC program fro CPU of S7 400, but it has password.
I don't know password, because I need upgrade plc program.
Do you have a kind of software that can crack it .
Thank everybody !

bithu · Post by **bithu** » Wed Oct 31, 2007 8:00 am

engineer888 wrote:I want download PLC program fro CPU of S7 400, but it has password.
I don't know password, because I need upgrade plc program.
Do you have a kind of software that can crack it .
Thank everybody !

Want to open the protected block?
s7canopener can make it.

just click the link below,
viewtopic.php?t=6763&highlight=s7canopener

engineer888 · Post by **engineer888** » Wed Oct 31, 2007 8:21 am

I want download PLC program but not open block. beacuse I have no original program. Could you help me ?

dante · Post by **dante** » Wed Oct 31, 2007 8:30 am

can U upload the program into your PC? If not, there is no way to modify it (or, only Siemens know how to do it); that case you have to ask the manufacturer for the program; after this you must compare the offline blocks with the online ones and ONLY if they are IDENTICAL you can proceed to perform a complete PLC reset and download the offline program.

engineer888 · Post by **engineer888** » Wed Oct 31, 2007 8:42 am

In fact, this project was made by another company, they didn't deliverly original program to end customer. If customer want make a little change, they must require supply company come to site. the price is very expensive , so the customer want crack password and change original program. Now , the problem I cann't download and upload it, I know a kind of way to do it. We can erase MMC card also password was deleted. But the original program were deleted at this time.

How to resolve it ??

dante · Post by **dante** » Wed Oct 31, 2007 10:18 am

I am suggesting you to NOT play with that card. Make first - if possible - a backup of it and play with the backup.

engineer888 · Post by **engineer888** » Thu Nov 01, 2007 1:05 am

I cann't upload, because it also need password. How to back up program from 400 MC card. I think it only was read by Siemens PG.

dante · Post by **dante** » Thu Nov 01, 2007 9:07 am

For the moment the only way to recover the password is to ask a guy from Germany, called Andi Rothenbacher who is able to do it. Is not free, around 1100Euro.

contact:

S.Rothenbacher GmbH
Benzstr.6 89079 Ulm
tel: 0731 45020
fax: 0731 46055
email: info@rothenbacher-gmbh.de <mailto:info@rothenbacher-gmbh.de>
<http://www.rothenbacher-gmbh.de>

Andi was able to find the PASSWORD from a copy of the files
stored on the Micro Memory Card (MMC).

For the moment there is NO OTHER way.

dante · Post by **dante** » Thu Nov 01, 2007 9:28 am

Another ideeas:

Method 1:
IF U have a MC card (not MMC), try the following:
1. power off the PLC.
2. remove the MC-card
3. power the plc on
4. perform a PLC reset
5. switch PLC off
6. plug in the MC card
7. power the PLC on
8. perform again a reset (program from MC card will be loaded into the PLC)
Note: ALL data will be set to the initial values, so try this with another PLC and MC card, or, write down on the paper all actual machine parameters BEFORE doing this.

Method 2:
1. make sure you have a good backup battery
2. power off the PLC.
3. remove the MC-card
4. DO NO NOT power the plc on without the card!!!!
5. read the MC card on a Siemens PG
6. plug in the MC card back into the PLC
7. power the PLC on

Don't forget to GIVE A FEEDBACK on the forum. Many, many other guys have the same problem!

amarillo · Post by **amarillo** » Thu Nov 01, 2007 9:30 pm

lol,

Give me the Memory Card file and I will retrieve the password for free .

Lone star
amarillo

frankw · Post by **frankw** » Fri Nov 02, 2007 3:11 am

viewtopic.php?t=2005&start=0&postdays=0 ... ht=300+mmc

a good tool ! I used it with S7-300 MMC.

dante · Post by **dante** » Fri Nov 02, 2007 7:21 am

Ok, thank you, but... engineer888 doesn't have a MMC card, but a MC one.

executer · Post by **executer** » Tue Nov 01, 2011 10:16 am

So, please, does someone can provide a right way to get password from protected S7-400 PLC with MC Flash card?

jk1981 · Post by **jk1981** » Fri Apr 22, 2022 12:24 am

amarillo wrote: ↑
Thu Nov 01, 2007 9:30 pm
lol,

Give me the Memory Card file and I will retrieve the password for free .

Lone star
amarillo

Please send me your email address in private message

smb · Post by **smb** » Sat Sep 23, 2023 8:44 am

Hi,

How can I get the password of Bin file of S7-400 MC flash memory?

Thx

PLCforum.uz.ua