TheLegendOfRandom.com

Tools • Re: Programming tools

2012-11-28T21:28:29+00:00

netbeans
visual studio 2008
notepad++
openwatcom
DevC++

Statistics: Posted by netesy — Wed Nov 28, 2012 9:28 pm

Tools • Re: Debug 64bit executables with IDA

2012-11-05T20:47:27+00:00

hawaii67 wrote:
Ugdbg:
http://ugdbg.sourceforge.net/

VisualDux debugger supports 64 bit as well:
http://www.duxcore.com/products.html

Thanks i will look into them,anyway i found a solution on a chinese website(lol),you must launch a exe in the ida folder that acts as a server and not the one that ida prompt when it display the error
edit for those seeking the solution:
http://www.h4ck.org.cn/2011/07/unpack-6 ... ug-plugin/

Statistics: Posted by kdma — Mon Nov 05, 2012 8:47 pm

Tools • Re: Debug 64bit executables with IDA

2012-11-05T14:54:04+00:00

Ugdbg:
http://ugdbg.sourceforge.net/

VisualDux debugger supports 64 bit as well:
http://www.duxcore.com/products.html

Statistics: Posted by hawaii67 — Mon Nov 05, 2012 2:54 pm

Tools • Debug 64bit executables with IDA

2012-11-05T13:32:38+00:00

Hello guys i need some help with IDA,since its the only debugger capable of debugging 64 bit executables(without going apeshit crazy with windbg).
So i downloaded it and tried to analyze a executable but i dont understand how to use the debug feature,there are 4 possibile debuggers to use Bochsdbg Windbg and two remote dbgs,of course the first two dont work at all since bochs gives me an error about a plugin and searching with google provides nothing( i had to download Bochs separately),windbg asks to launch a server and again it doesnt work
Can someone point me in the right direction?i tought it was meant to work out of the box and i cant seem to find anything regarding those issues(it works fine with 32 bit executables)
thank you

Statistics: Posted by kdma — Mon Nov 05, 2012 1:32 pm

Tools • Re: Programming tools

2012-10-03T01:29:32+00:00

Statistics: Posted by assasaha — Wed Oct 03, 2012 1:29 am

Tools • Re: VMProtect tools for XorKing

2012-10-02T23:26:40+00:00

XorKing wrote:
Thanks Random, I tried but i don`t think it is working and it is a unpacker, but i m looking for a tutorial like how to unpack vmprotect file in olly.

You should take a look at the stuff from "LFC-AT" which released a lot of videos and scripts to defeat vmprotect (Can be found in the tuts4you database / board).

~Zer0Flag

Statistics: Posted by Zer0Flag — Tue Oct 02, 2012 11:26 pm

Tools • Re: VMProtect tools for XorKing

2012-10-02T17:47:02+00:00

Thanks Random, I tried but i don`t think it is working and it is a unpacker, but i m looking for a tutorial like how to unpack vmprotect file in olly.

Statistics: Posted by XorKing — Tue Oct 02, 2012 5:47 pm

Tools • VMProtect tools for XorKing

2012-10-02T15:25:40+00:00

Here are some unpackers for VMProtect.

Statistics: Posted by random — Tue Oct 02, 2012 3:25 pm

Tools • Re: Themida - Winlicense 1.x - 2.x Multi PRO Edition 1.2

2012-09-28T17:48:42+00:00

you can test it on my request thread..if you want..^_^

Statistics: Posted by dolhaps2000 — Fri Sep 28, 2012 5:48 pm

Tools • Re: Themida - Winlicense 1.x - 2.x Multi PRO Edition 1.2

2012-09-28T17:01:08+00:00

To those who don't know, this is an Olly script to remove a version of Themida (to find the OEP).

Statistics: Posted by random — Fri Sep 28, 2012 5:01 pm

Tools • Themida - Winlicense 1.x - 2.x Multi PRO Edition 1.2

2012-09-28T17:47:34+00:00

Themida - Winlicense 1.x - 2.x Multi PRO Edition 1.0
****************************************************
( 1.) Unpacking of WinLicense & TheMida Targets
( 2.) Three Way Unpack Choice Possibilities x3
( 3.) Supports IAT Special Patch & ESP CRC Checking
( 4.) Use UIF or ImportsFixer or Script + DI Patch
( 5.) Code-En-Crypt Fixer
( 6.) Cryp-To-Code Fixer
( 7.) Version Identification
( 8.) Magic Jump Finder
( 9.) Manually Enable & Disable Option Choice
( 10.) VM OEP Finder xII + [Intelli Version]
( 11.) 500 Bytes Extra Stack-Anti-Dump Checking
( 12.) Master Direct API Code Patching
( 13.) TLS Callback Killer
( 14.) Choice To Break Close On HWID & TRIAL Stop
( 15.) Turbo Patching Mode
( 16.) VM WARE Fixer by quosego
( 17.) EXE & DLL Support with LoadDll
****************************************************

This is an ollydbg Script..
i hope this 1 can help...

credits to:
LCF-AT

Statistics: Posted by dolhaps2000 — Fri Sep 28, 2012 3:38 pm

Tools • Re: ShellOp converter 0.1 - Shellcode Analysis assistant

2012-09-25T02:10:16+00:00

Thank you
However, some bugs still occurred. Have to work harder to make it better
Best regards

Statistics: Posted by Levis — Tue Sep 25, 2012 2:10 am

Tools • Re: ShellOp converter 0.1 - Shellcode Analysis assistant

2012-09-24T14:58:47+00:00

Very nice, Levis. I will post it on the tools page as well as blog about it.

Statistics: Posted by random — Mon Sep 24, 2012 2:58 pm

Tools • ShellOp converter 0.1 - Shellcode Analysis assistant

2012-09-24T13:49:34+00:00

Dear all,
This's my small tool called "ShellOp Converter", which will convert
from shellcode to opcode and disasm these codes also. I created this when working around with some shellcodes embedded in some viruses.
Main features:

Convert Shellcode (Hex string) to opcode.
The opcode can be save to Hard disk.
Disasm the shellcode to MASM syntax(use BeaEngine)
Fix the shellcode entered automatically(only get the hexadecimal
character(s), others will be ignored)

A demo picture to show how it works:

Very simple interface, we have 5 buttons there:
-The "Convert" button: Convert shell code to opcode and disasm these
codes.
-The "Clear" button: Clear the input box
-The "Save data to file" button: Save the converted opcode to a file
-The "Copy to Clipboard" button: Copy the disasm codes to clipboard
-The "About" button: about me and some other simple words.
Note: Still on beta-testing, so all bug reports are welcome.
Link download it here:

http://uppit.com/qvh53sy5qg3j/ShellOp-Converter-0.1-beta-rept.7z

Thank to: Beatrix ( BeaEngine's author), all REPT's members and REPT's Friends, and greetings to all reversers in this world
Best Regards
Levis/REPT

Statistics: Posted by Levis — Mon Sep 24, 2012 1:49 pm

Tools • Re: EVLog

2012-09-18T19:36:08+00:00

Thanks a lot, tpodt. Glad to see you have time to visit our neck of the woods from time to time

Statistics: Posted by random — Tue Sep 18, 2012 7:36 pm