Quantcast
Channel: Tuts 4 You : Forum
Viewing all 2730 articles
Browse latest View live
↧

[unpackme] UnPackMe

February 26, 2015, 4:06 pm
$
0
0

Hello

 unpackme: Safe engine Shielden v2.3.0.0

full protection activated

packed notepad.exe :scratch:

windows7 32/64bit

good luck

Attached Files

↧
Search

themida unpacking problem! [ vidoo ]

February 27, 2015, 8:14 pm
↧
↧

reduce exe size in visual studio

February 28, 2015, 11:05 pm
↧

[unpackme] Hard CrackMe By Ben Mhenni

March 1, 2015, 10:10 am
↧

GameMaker Collection (games made in GameMaker)

March 2, 2015, 12:30 pm
$
0
0

GameMaker Collection:
a collection of small games made in GameMaker
These games are free, source code included.
I've compiled them and I get rid of Asprotect
(read GameMaker_unpacking.txt)
so they will run on Windows 7.

Games included:
Woei - shoter
1945FinalFronts - shoter
bubble - shoter
dodecagames - varios games: Breakout, Roller,
Bom Snake, Pacman, Shot, Vegeta, Pong, Volley,
15, Space Invaders, Tris, Tetris
master6 - puzzle
VolcanoEscape - action
zball - pong

 

Link:

http://www10.zippyshare.com/v/vXaSQar9/file.html

 

↧
↧

help downloading from 4pda.ru

March 3, 2015, 6:04 am
↧

[Crackme] ESET Crackme Challenge 2015

March 3, 2015, 6:08 pm
$
0
0

Original Post:

http://joineset.com/jobs-analyst.html

 

Uncover a hidden puzzle

Analyze the crackme.exe program and look for 3 passwords hidden in its programming code.
The program can contain hidden files, texts, conditional tasks, protection against debuggers and other pitfalls, which could complicate your arriving at the solution.
Don’t worry too much if you can’t make it past all the hurdles and uncover the hidden passwords. Even if you did not find the solution, we still want to see your analysis, most importantly the progression of steps you took. We are interested in your way of thinking, which can often reveal more about you and your skills than the correct result itself ever could.
Send your analysis to: crackme2015@eset.com
The program was designed to test your skillset in reverse engineering, which might come in handy when you work at ESET in one of the positions described below....

 

Attached Files

↧

Remove space

March 3, 2015, 9:46 pm
$
0
0

Remove space from a string in php without using any php function.

↧
Search

Using RtlAdjustPrivilege to detect debugger.

March 4, 2015, 1:44 am
$
0
0

A basic way using RtlAdjustPrivilege to detect the debugger (OllyDbg and IDA demo 6.6)

As usually but not (enabled by default) for all debugger, the Debugger must acquiring debug privilege to work with its complete capacity.
The snippet is simple and probably already used but I write it as simple as possible to get a clear ASM code inside the debugger.

RtlAdjustPrivilege: Enables or disables a privilege from the calling thread or process.

NTSTATUS RtlAdjustPrivilege
 (
  ULONG    Privilege,     //[In]    Privilege index to change.
  BOOLEAN  Enable,        //[In]    If TRUE, then enable the privilege otherwise disable.
  BOOLEAN  CurrentThread, //[In]    If TRUE, then enable in calling thread, otherwise process.
  PBOOLEAN Enabled        //[Out]    Whether privilege was previously enabled or disabled.
 )

RtlAdjustPrivilege store the previous status into boolean variable.

Our work is to read the contents of this variable after calling RtlAdjustPrivilege with SE_DEBUG_PRIVILEGE as parameter, and of course if a status is already enabled then we have a likely debugging situation.

/*
 * -------------------------------------------------
 * Using RtlAdjustPrivilege to detect debugger.
 * Tested on (OllyDbg and IDA demo 6.6)
 * Released 03/2015.
 * [by Insid3Code from I3CT]
 * -------------------------------------------------
*/

#include <windows.h>
#include <ntdll.h>

#ifdef _WIN64
#define captionMsg L"Application 64-bit"
#else
#define captionMsg L"Application 32-bit"
#endif

int WINAPI iWinMain() {
    //Boolean to check after calling RtlAdjustPrivilege.
    BOOLEAN bPreviousPrivilegeStatus; 

    RtlAdjustPrivilege(
        SE_DEBUG_PRIVILEGE,
        FALSE, // avoid to adjust privilege (DISABLE IT).
        FALSE,
        &bPreviousPrivilegeStatus);

// check if SE_DEBUG_PRIVILEGE was already acquired then voluntary crash the application,
// by calling memset with invalid pointer as parameter.        
    if (bPreviousPrivilegeStatus) 
        memset(NULL, 0, 1); //<-- BOOM! PADA BOOM!!!

    MessageBoxW(
        NULL,
        L"Nothing!",
        captionMsg,
        MB_ICONINFORMATION);

    return 0;
}

Attached: Source, screenshots and binary (32bit/64bit)

Attached Files

↧
↧

how can i get ECC RSA DES DSA MD5 BASE64 C OR C++ SOUCE?

March 4, 2015, 5:40 pm
$
0
0

how can i get ECC RSA DES DSA MD5 BASE64 C OR C++ SOUCE?

↧

What is the biggest file on the internet?

March 5, 2015, 1:07 am
$
0
0

Hi,

 

I was wondering whats the biggest file anyone has ever found available for downloading on the internet and did they manage to download it :)

 

Thank you.

 

Greetz,

FB

↧

Dyamar Protector 1.3X unpacker

March 5, 2015, 1:49 am
$
0
0

Hi all.

 

Recently i get over a nice easy keygenme protected with this protector and i feel the need to automate the unpacking process.

 

Was a fun journey because the protector insert a unique stub almost every time for OEP jump interlaced sometimes with jumps so a universal way is almost impossible BUT i was using the stack OEP pointer witch is the same every time  (well it changes one byte from time to time but is no problem).

 

I have tested as many unpackmes i can and i have.

 

The script support version 1.3X, and mabye others.

 

Support:

- exe

- dll

- framework

(OEP find, cancel IAT redirection).

 

I have put in package the script, unpackmes i have, 3 videos.

Sometimes i run quick the operations but if you have questions feel free to ask here.

I have recorded with a 22" monitor so for viewing is recommended on a close diagonal one.

 

Is a pitty that this protector was discontinued but some files are still protected with it.

 

 

http://up.ht/1CAcOTd
 

 

↧

Security Alert when access tuts4you main page

March 5, 2015, 5:56 pm
$
0
0

Hi,

 

I  have this security alert from firefox when visit tuts4you main page:

 

Regards

 

unsec1

 

↧
↧

A Good Ebooks & Documents

March 5, 2015, 6:08 pm
↧

[unpackme] uknown packer

March 6, 2015, 6:35 am
↧
Search

GameMaker Collection (games made in GameMaker)

March 2, 2015, 12:30 pm
$
0
0

GameMaker Collection:
a collection of small games made in GameMaker
These games are free, source code included.
I've compiled them and I get rid of Asprotect
(read GameMaker_unpacking.txt)
so they will run on Windows 7.

Games included:
Woei - shoter
1945FinalFronts - shoter
bubble - shoter
dodecagames - varios games: Breakout, Roller,
Bom Snake, Pacman, Shot, Vegeta, Pong, Volley,
15, Space Invaders, Tris, Tetris
master6 - puzzle
VolcanoEscape - action
zball - pong

 

Link:

http://www10.zippyshare.com/v/vXaSQar9/file.html

 

↧

Wireless networking tutorial

March 9, 2015, 11:46 am
↧
↧

My program will not run on win8

March 9, 2015, 12:51 pm
$
0
0

Hello. I created simple tray application wih options of showing a messagebox and launching one .exe in same folder as the tray app. But for some reason it shows some blue bar on windows8 saying it will not allow to open or smth like that... What may be the reason?

↧

[UnPackMe] .NET UnPackMe(SE+DNG)

March 10, 2015, 12:08 am
$
0
0

Hi guys.

Nice to meet u.

this app was protected by Shielden+DNGuard.

Have a try,If u got it,Describe how to do it,thx...

sorry my poor english,sorry my chinglish !

 

((o(^_ ^)o))    ((o(^_ ^)o))    ((o(^_ ^)o))    ((o(^_ ^)o))

 

Attached Files

↧

DSEFix x64 (kernelmode.info)

March 10, 2015, 10:27 am
$
0
0

Windows x64 Driver Signature Enforcement Overrider from kernelmode.info.
 

For more info see Defeating x64 Driver Signature Enforcement http://www.kernelmode.info/forum/viewtopic.php?f=11&t=3322

System Requirements
x64 Windows Vista/7/8/8.1/10.

DSEFix designed only for x64 Windows.

Administrative privilege is required.

Build
DSEFix comes with full source code. In order to build from source you need Microsoft Visual Studio 2013 U4 and later versions.

Authors
© 2014 - 2015 DSEFix Project


Updated Source and binary:



https://github.com/hfiref0x/DSEFix  

 

↧
Viewing all 2730 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>