Tutorial Reversing Newbies by LENA – Team SnD

Tutorial Reversing Newbies by LENA [ Team SnD ]

01. Olly + assembler + patching a basic reverseme
02. Keyfiling the reverseme + assembler
03. Basic nag removal + header problems
04. Basic + aesthetic patching
05. Comparing on changes in cond jumps, animate over/in, breakpoints
06. “The plain stupid patching method”, searching for textstrings
07. Intermediate level patching, Kanal in PEiD

Continue Reading

MemViewer 1.0 for OllyDbg v1.0 and Immunity Debugger v1.8x

这个插件的功能,就是创建额外的内存窗口,以便同时查看多个不同地区内存的数据。虽然strongod提供了几个不同的内存地址切换的功能,但是不是非常直观,对于数据的变化也不便于进行实时观察,效果就是上图看得到的这个样子(Immunity Debugger v1.8x)。

功能以及改变:

1.绿色区域是新创建的内存个窗口,这个是没有边界的,不能进行拖放或者设置大小的操作。

2.将左侧的内存窗口的滚动条移到了左边,以便于区分。

3.可以创建其他类型的内存窗口
Continue Reading

IDA Pro 64bit 插件编译

今天偶尔打开一个64bit的ida数据库的时候提示什么加载插件失败。而问题的关键是自己并没有这几个64位的插件,只有32位的。其实问题也很容易就解决掉了,代码都是自己的,所以直接编译一个64位的插件就可以了。

1.配置管理器中新建一个配置,名称可以随便设置,只要能区分就可以了。

复制设置选择当前的解决方案配置。

Continue Reading

SDF Tool v1.0 (Keygenning Tool)

 SDF Tool v1.0 by Saduff
This is a keygenning tool I started coding a long time ago, but never finished it. I decided to finally finish this tool and release it, removing some of the planned features.

Features :
★32bit Calculator – Supports hex, dec, oct, bin. Functions: +, -, *, /, BSwap, Mod, RoL, RoR, And, Or, Xor, Lsh, Rsh, Not, x^2, x^3, x^y, n!.
★ As a side-feature, it’s also possible to evaluate expressions, but the expression evaluator works with floats and not 32bit Integers.
★ BigNum Calculator – Supports binary, decimal, hex. Functions: +, -, *, /, Mod, Xor, Or, And, Shl, Shr, x^y, x^-1 mod n (modular inverse), x*y mod n, x^y mod n, GCD(x, y), LCM(x, y), Prime Generation, Prime Checking.
★ Can convert between following bases: ASCII (Base-256), Hexadecimal (Base-16), Decimal (Base-10), Binary (Base-2), Base-32, Base-64, Base-85.
★ Supports following hash algorithms with possibility to change init vectors of some hashes (*) : GOST, HAVAL* (128/160/192/224/256), MD2, MD4*, MD5*, Panama, RipeMD* (128/160/256/320), Sapphire II (128/160/192/224/256/288/320), SHA-0*, SHA-1*, SHA* (256/384/512), Snefru-128 (level 8), Snefru-256 (level 8), Square*, Tiger* (128/160/192), Whirlpool-0, Whirlpool-1, Whirlpool-512, Adler-32, CRC-16, CRC-24, CRC-32, CRC-32b, CRC-64, XOR-16, XOR-32.

Continue Reading