: Browse to and select the parent Siemens S7 project file ( *.s7p ) or system library folder ( *.s7l ).
(System Function Blocks), as these are stored in the PLC's system memory and do not contain readable code. www.runmode.com Common Use Cases Lost Source Code
Select the target block folder to populate the component grid. The interface will highlight blocks appended with the KNOW_HOW_PROTECT flag. Highlight the desired rows. Click the button.
: It targets and opens individual offline S7 Program files ( *.s7p ) and S7 Libraries ( *.s7l ).
The tool operates by modifying the attribute bytes within the compiled block files.
: Completely exit SIMATIC Manager, programming editors, and simulation tools to release file locks.
Regaining access to your IP and troubleshooting protected S7-300/S7-400 blocks.
While powerful for diagnostic recovery, the application has strict structural limits dictated by compiled machine code:
While the is a valuable tool for maintenance, it should be used responsibly.
: Complex blocks (SCL, CFC, GRAPH7) compile directly down to plain STL code without original variable names.
: It operates on standard STEP 7 project files, including: S7 Programs ( *.s7p ). S7 Libraries ( *.s7l ).
It does not bypass or remove the hardware CPU password required for online access or downloading to a controller. Usage Highlights
The is a specialized, third-party software utility designed specifically for automation engineers, maintenance technicians, and system integrators who work with older Siemens PLC systems, particularly the S7-300 and S7-400 series. This tool addresses a common industry challenge: losing access to password-protected or encrypted PLC blocks (FCs, FBs, OBs, DBs) within STEP 7 projects.
The software works by directly editing the local index database file ( subblk.dbf ) located within the offline Step 7 project directory structure.
: If the original block contained comments, the tool preserves them after unlocking so you can understand the logic.
Instead of forcing users to manually decrypt individual files, the application lists every block directory within a selected S7 project. Users can select multiple items simultaneously to execute massive batch changes in a single action. 2. Bidirectional Flag Toggling
When utilizing the S7 Can Opener to unlock a block that was compiled from higher-level languages such as , Continuous Function Chart (CFC) , or GRAPH7 , you will not retrieve the original high-level layout.
Click and navigate to your project's home directory. Select the main project database file. The software will display all identified Blocks Folders .
Plant owners should test their own systems with tools like Can Opener (under controlled conditions) to identify exposure before attackers do. A “can opener” in friendly hands reveals brittle security.