Tools & Utilities

NEW dUP2 - Friendly with antivirus
Password: tuts4you.com

hey guys

i create a program for serial sniff by vb6

esc features :

check crc(automatic)
unicode string
small size
background music
bypass packers

and .....

sorry for my english (im persian)

enjoy it

snr.dup.search.and.replace.patchengine.sourcecode
ASM Code

ScyllaHide is an advanced open-source x64/x86 usermode Anti-Anti-Debug library. It hooks various functions in usermode to hide debugging. This tool is intended to stay in usermode (ring3). If you need kernelmode (ring0) Anti-Anti-Debug please see TitanHide https://bitbucket.org/mrexodia/titanhide.

ScyllaHide supports various debuggers with plugins:

- OllyDbg v1 and v2 http://www.ollydbg.de
- x64_dbg http://x64dbg.com or https://bitbucket.org/mrexodia/x64_dbg
- Hex-Rays IDA v6+ https://www.hex-rays.com/products/ida/
- TitanEngine v2 https://bitbucket.org/mrexodia/titanengine-update and http://www.reversinglabs.com/open-source/titanengine.html

PE x64 debugging is fully supported with plugins for x64_dbg and IDA.

Please note: ScyllaHide is not limited to these debuggers. You can use the standalone commandline version of ScyllaHide. You can inject ScyllaHide in any process debugged by any debugger.

More information is available in the documentation: https://bitbucket.org/NtQuery/scyllahide/downloads/ScyllaHide.pdf

Source code license:
GNU General Public License v3 https://www.gnu.org/licenses/gpl-3.0.en.html


Special thanks to:

- What for his POISON Assembler source code https://tuts4you.com/download.php?view.2281
- waliedassar for his blog posts http://waleedassar.blogspot.de
- Peter Ferrie for his PDFs http://pferrie.host22.com
- MaRKuS-DJM for OllyAdvanced assembler source code
- MS Spy++ style Window Finder http://www.codeproject.com/Articles/1698/MS-Spy-style-Window-Finder

This is my own coded jump calculator...
Coded specially for our team site but i will share it the members on this board.
It's simple as it is and nothing special. It's a simple jump calculator.
Fill the fields for "Jump From:" and "Jump To:" with a hex address and press the button "Calculate". Thats all...
Simple eh?

grEEtZ iNvIcTUs oRCuS

This application will show you how Algorithm RC4 works

FIX for ZwQueryObject hang on file objects that have FO_SYNCHRONOUS_IO set.
There is a "bug" in Win32 that hangs calls to ZwQueryObject and other functions
when the queried handle has this flag set, as the Syscall is waiting forever.

Ollydbg suffers from this bug as it reads certain handle informations after it
hits a breakpoint. This then leads to a freeze of the debugger.
This plugin tries to fix it by hooking the functions

NtQueryObject (ntdll.dll)
GetFileType (kernel32.dll)

that get used by olly, which can cause the lockup and let them process the
queries in a seperate thread with a timeout of 1sec. If the call hangs, an error
is returned to Olly and the debugger doesn't freeze anymore.

Hello everyone!

I made a new utility for Team Rept called "REPT Patch Engine". As it name says, this patch engine provides you an easy to use interface to make different types of patch in one single executable. Currently it has 3 types of patching method:
Hex Editor (Offset Patch)
File Export
Registry Patch

This utility is made on .NET. I did NOT put any credit of "Created with REPT Patch Engine" because I wanted to make a new patch engine useful.

Things to update for next versions:
Compare files to see the offset of cracked and original file. DONE!
Add custom skin

If you need another thing to put on the patch tell me

I hope you like it and it could be interesting to use. Fell free to use as you want.

LordCoder

REPT KeyGen Maker is an utility to make keygens easily without having a programming knowledges.
Please report any bug/improve to make it better

This is currently done in .NET so will need .NET Framework 3.5 or higher.
Thanks for download it!

My very old generic crack generator. Supports skins, music and text scroller by your choice.

- What does "generic" means?
- It does not only patch concrete offsets but it's trying to find the same segments into the target app so it might be newer version of the app but the same parts of the code might exist so it cracks them.

It's very old, I'm uploading it just to share it but if you feel it useful feel free to use it.

This application provide information about PE File.
If you have time, please report any kind of mistake in this application.

Regards

Converting Offset to RVA and VA.

Simple utilty to help unpackes calculate the RVA of a adress.
The default imagebase is 400000h

This is a simple utility to convert between ImageBase, VA, RVA & File offset

Hi all,

i created a command line pe header dump tool with gives you all kind of information about the PE file.

Support both 32 and 64 bit PE files.

Main tool site link: http://pefile.net

Tool features:
File Name.
MD5 Hash.
SHA1 Hash.
NT Offset.
File Entropy.
Sections MD5.
Sections Entropy.
Overlay Count.
File-Overlay.
File Attributes.
Time Stamp.
File Version Info.
Header Information.
Characteristics information.
Dll Characteristics.
Data directory sections.
Image ConfigInformation.
Imported DLL List.
Imported functions from the DLL.
Stream (ADS) Information.
Resource Information.
Support Screen (stdout), Text and HTML output.


Have Fun.

http://code.google.com/p/hookit/

A tool that automates C++ class wrappers, global function hooking, and dll proxy generation.

I coded the C++ class wrapper and global function hooking code generation.
Both GUI (Nedim Sabic ) and dll proxy generation code (Michael Chourdakis) aren't mine.

Click on the help button after running hookit.exe more details.

I use this tool a lot, so i thought it's time to share it =)
Enjoy.

Powerful, Small and Easy tool for creation yours releases with flexible
support of a NFO and DIZ templates and packing them in a archive.

REPT File Compare 0.94c
Created by Levis/Team REPT

REPT File compare is small tool that help you compare between 2 files
and make a list of different byte(s) with its offset. You also can export
data to file with type of some general programming languages. There are four types
of languages I added:
1.Assembly
2.Delphi
3.C/C++
4.C#
and you can export data to text file, if you want
Compare speed is very high, with less CPU and RAM used.
For any suggestions, or complain, or questions... please send me: levintaeyeon[at]live[dot]com
or contact via our board at: Http://www.team-rept.com
Thanks for using!

dirtyJOE - Java Overall Editor is a complex editor and viewer for compiled java binaries (.class files).

dirtyJOE is free for non-commercial use.

dirtyJOE is entirely written in C++.

dirtyJOE is using Python library as a script engine.

Main features:
Viewer for: constant pool, methods, fields, attributes
Editor for: constant pool, bytecode, file header, attributes
Python scripting for encrypted strings

Current version: v1.5 (c359)

Project homepage

convert your extended module files to *.pas
thx to : BeRo & http://un4seen.com

--------------
Serial Counter Plugin for OllyDBG
-------------
[1]Use it to generate Random Char & Numbers.
[2]With Random Chars automatically generate [MD4, MD5,SHA-1,SHA-256,SHA-384,SHA-512, Tiger, RipeMD 128, - RipeMD 160,Haval 256 .Hashs or Base 64 encode]. New
[3]It can Generate upper Case Letters or Letters & Numbers or Numbers only.
[4]It Can Reverse Random Chars.
[5]It Can Convert Hash To Upper Case.
[6] Some Functions - New

MPRESS [Matcode comPRESSor] GUI

GUI for fine packer Mpress.

Converter Hex-Dec-Bin-Chr and calculator (Xor,Or,And,Mod,Div,Mul,Shl,Shr)

0.02 - Added button to clear the input fields.
p.s.
If you have any ideas, bug reports, please PM me - or post on the release thread of the tool.

Reversers' Calculator is a full tool that combines all logical and mathematical operations, also can convert hexadecimal numbers to binary, decimal(signed/unsigned),octal and string. This tool is very handy for all reversers.

Conversion in any way.

Version 0.3 available in support topic