
For smooth, animated screen recordings: Cursor + Zoom
I fixed all vulnerabilities the orig crack missed. Dev can’t close them anymore
🕵️♂️ 🇮🇳🇸🇹🇦🇱🇱
Install Canvid. Sign in, record a test, hit Export - it’ll prompt you to subscribe
Close Canvid completely. Check Task Manager to make sure the
Canvid.exeprocess isn’t still running
Rename
app.asartoapp.asar.backup
Win:
C:\Program Files\Canvid\resourcesMac:
/Applications/Canvid.app/Contents/Resources/
Drop the
app2.4.0 / 3.0.0 folder into:
Win:
C:\Program Files\Canvid\resourcesMac:
/Applications/Canvid.app/Contents/Resources/Didn’t work on Mac? Patch the
appmanually
🧐 𝗗𝗜𝗬 𝗰𝗿𝗮𝗰𝗸𝗶𝗻𝗴 𝗴𝘂𝗶𝗱𝗲
Install Node.js
In CMD as admin
npm install -g asar
Install Canvid. Sign in, record a test, hit Export - it’ll prompt you to subscribe
Close Canvid completely. Check Task Manager to make sure the
Canvid.exeprocess isn’t still running
In CMD as admin. If Canvid is installed elsewhere, use your own path
Win:
cd C:\Program Files\Canvid\resourcesMac:
cd "/Applications/Canvid.app/Contents/Resources"
copy app.asar app.asar.backupBackup original
mkdir appapp folder
asar extract app.asar appExtract app.asarDon’t close CMD
Drop
patch.js2.4.0 / 3.0.0 ➜C:\Program Files\Canvid\resources
In CMD:node patch.jsApply patch
Launch Canvid
👨💻 𝗙𝗲𝗮𝘁𝘂𝗿𝗲𝘀 𝗼𝗳 𝚙𝚊𝚝𝚌𝚑.𝚓𝚜
Canvid runs on Electron. All code is packed into the app.asar archive. The patch is applied by unpacking the archive, modifying scripts, and renaming the original file to .backup
![]()
patch.js2.4.0 (Direct Editing)
- License: Finds specific verification lines in the backend code and hard-codes the responses from “No” to “Yes”
- Updates: The New version check function is replaced with a dummy that returns nothing. The software thinks there are no updates
![]()
patch.js3.0.0 (Two-Level Protection)
The interface became smart: it caches the license in memory and constantly communicates with the developer’s servers
Firewall (Protection): Embedded into the software core. Hard-blocks at the network level access to update servers and cuts off hidden communication channels (websockets). The developer won’t be able to: update the software, remotely block it
Interceptor (License): Sits between the server and the software. Replaces responses “on the fly”. Doesn’t look for specific setting names, but the meaning of words (if it sees the words “export”, “license” and the value
false- changes it totrue). The patch won’t break even if the developer renames variables in the code
!