Programming and Coding
Programming and coding tips, help and solutions...
1,885 topics in this forum
-
[Code Deobfuscator]
by root- 15 replies
- 35.5k views
Hello, I decided to share this code capable Deobuscation various techniques of obfuscation typical of modern systems of protection based Virtual Machine (Themida, vmProtect etc ..). This tools is intended for analyzing and readable code. I share this tool (the result of hours and hours of my free time) so that someone can improve the code and help me in the very complex that is Control Flow Optimization. https://github.com/Pigrecos/CodeDeobfuscator I am attaching a video to show its use Deobuscator.exe
-
Need some C++ APIs
by LCF-AT- 6 replies
- 12.3k views
Hi again, short question.Just need to know which APIs I have to use to get the filesize by handle and a C++ API to delete the file if the filesize was 0 etc you know.So I use fopen to create a file then fwrite to write bytes into file (if so) and now I need a C++ API for GetFileSize API & DeleteFile API.So I can't use the same handle from fopen API with GetFileSize API you know.DeleteFile API is ok so far so this only need a path to file. Thanks
-
[C#] dnlib patcher code
by mrexodia- 0 replies
- 14k views
Today I wrote a small class that assists with patching .NET binaries. using System; using System.IO; using dnlib.DotNet; using dnlib.DotNet.Emit; namespace MyNamespace { class Patcher { public delegate bool PatchStrategy(AssemblyDef asm); private static bool patchMethodReturnBool(AssemblyDef asm, string classPath, string methodName, bool returnValue, int numArguments = 0) { var method = findMethod(asm, classPath, methodName); if (method != null && method.Parameters.Count == numArguments) { //patch instructions var instructions = method.Body.Instructions; …
-
The4Got10's Protector [Unpack]
by ooilinlove- 5 replies
- 6.8k views
hi anyone i'm try to decompire it. i thinks it best for me , coz i can't unpack it hahaha [ i'm noobs ] just unpack me / good luck NoFuser_Output.rar
-
[C++] Simple Import Table Parser
by mrexodia- 6 replies
- 9.3k views
Just some small code I created for a friend. Not stress-tested or anything, might be useful though #include <windows.h> #include <stdio.h> int gtfo(const char* text = "") { printf("gtfo! (%s)\n", text); return -1; } int main(int argc, char* argv[]) { //LEAKY AND UNSAFE! if (argc < 2) return gtfo("argc"); //read the file auto hFile = CreateFileA(argv[1], GENERIC_READ, FILE_SHARE_READ, nullptr, OPEN_EXISTING, 0, nullptr); if (hFile == INVALID_HANDLE_VALUE) return gtfo("CreateFile"); //map the file auto hMappedFile = CreateFileMappingA(hFile, nullptr, PAGE_READONLY | SEC_IMAGE, 0, 0, nullptr); //notic…
-
Ida Python & Ida Pro Sdk chm docs
by Extreme Coders- 4 replies
- 12k views
When developing scripts/plugins for IDA Pro the online documentation is an invaluable resource. Here I have compiled the online documentation in chm format for IDA Python and IDA Pro SDK for quick offline access. HTTrack and chmProcessor has been used for generation the docs. docs.zip
-
- 19 replies
- 13k views
Hi guys, I have a new question and nee some help again. Problem I have is that I wrote a code part which I wanna execute more times.First I thought again to create a new thread for this but problem is the thraed will run so long till I finish it so I mean the thread 1 runs some minutes (lets think so now) and now I wanna execute the code part again (only other paramters) but the problem is the thread will access the code part again (same address of my routine thread) so what then?Maybe I do think wrong anyhow. I try to explain it better.Lets say I have a code part I do execute as thread and the code does download any file what needs one minute.Now imagine I…
-
Play .xm chips without additional DLLs from C#
by Kurapica- 20 replies
- 10.5k views
Comments are welcome... ufod_C#.rar Tutorial.pdf
-
Bypassing Cloudflare?
by hotpockets- 0 replies
- 7.3k views
I'm creating a program to purchase items from a website. During high traffic hours, it throws me into the cloudflare queue and my program just freezes up. It redirects me to like 20 different places, super annoying. I managed to retrieve the direct ip using a series of Cloudflare resolvers and bypasses but everytime I enter the IP, it redirects me to the domain name. So let's say the IP is 123.123.123.123 and it lets me in but it will take me back to website.com which is protected by Cloudflare. I believe adding the item via POST requests and using the direct IP will help add an item when Cloudflare is active. Checking out may become an issue as pulling up the check…
-
- 2 replies
- 11.1k views
Hey all, recently I came across some old source code from me again for an OllyDbg Deobfuscator Plugin, so I decided why not share it as well. I wanted to improve it and use emerged librarys but that was just a hobby and I haven't found time again for it. Maybe the code can help someone working on x86 deobfuscation and that kind of stuff to get some ideas... OllyDeobfuscator.rar
-
[Help] about hookjit and ilcode compile
by DragonX- 1 reply
- 4.5k views
hook compileMethod like this HMODULE hJitMod = LoadLibrary(_T("mscorjit.dll")); if (!hJitMod) return; p_getJit = (ULONG_PTR *(__stdcall *)()) GetProcAddress(hJitMod, "getJit"); if (p_getJit) { JIT *pJit = (JIT *)*((ULONG_PTR *)p_getJit()); if (pJit) { DWORD OldProtect; VirtualProtect(pJit, sizeof(ULONG_PTR), PAGE_READWRITE, &OldProtect); compileMethod = pJit->compileMethod; pJit->compileMethod = &my_compileMethod; VirtualProtect(pJit, sizeof(ULONG_PTR), OldProtect, &OldProtect); bHooked = TRUE; } } .but how to hook the jitNativeCode and Compiler::compCompile method....
-
Memory Leak with VTK engine.
by Vic- 2 replies
- 5.2k views
Hi guys, I need your help. I'm using the VTK engine for my project but it's occurring memory leaking. It's occurring when go over InsertNextScalarValue function. Leak about 1~2MB when CSurfaceRenderer::Setup function finished. I haven't determined the detail cause and I'm looking for a method to fix it. Who has experience about it can help me? Thanks so much. std::auto_ptr<CSmoothSurfaceData> m_pSmoothSurfaceData; bool CSurfaceRenderer::Setup(const CCalcMatrix3D* pCalcMatrix) { int numRows = pCalcMatrix->GetRows(); int numCols = pCalcMatrix->GetCols(); int numPlanes = pCalcMatrix->GetNumPlanes(); const float* pPosX = pCalcMatrix…
-
Listbox control lags on XP
by LCF-AT- 2 replies
- 5.1k views
Hi guys, got a short question and looking for an answer.At the moment I code something in MASM and use a Listbox control to list informations etc.All fine so far but there is any issue with the scrolling of the Listbox so this just lags and scrolls slowly down / up!?!The question is "why?" and "how to fix this?".By the way,I have test the same file I made under Win7 VM and there it dosen't lag.Its strange so on my XP it lags.Hmmm.Is it maybe any bug in XP or any setting I need to change etc to prevent this lag stuff for Listboxes?Also its strange that the Listviews dosen't lag only Listboxes.Maybe you know the answer to help me to remove this lagging. Thank you
-
How do local kernel debuggers work?
by Hakman- 0 replies
- 3.8k views
Some kernel debuggers are capable of working on the same machine where target OS is being debugged. There is no need to set up a virtual machine or connect two computers via a cable in such case, everything is done locally. For instance, I've used Syser debugger and noticed that it adds message during Windows XP booting screen. During kernel debugging everything is unresponsive, except debugger window. And if you install it on Windows 7 it makes system unbootable. So it definitely has something to do with the way everything boots. How do they achieve that? Do they alter the way computer boots? Do they supply their own boot loader which loads their code, the…
-
Cant open JAR
by whoknows- 0 replies
- 5.1k views
-
Bot theory?
by hotpockets- 3 replies
- 8.2k views
I've been creating bots to purchase items for the last year or two now for my own personal use and it's been a hit or miss. I understand that it's competing with other programs/bots but I just want to get a general idea of YOUR idea of an efficient bot. I believe my bot is as efficient as it can get but I could be wrong so I wanted to reach out and get advice. Currently I am creating my bots using C# and a headless browser. Each product request/purchase is done in an individual async task until it returns successful. The internet speed is about 500 mbps. Basically, I hope to win by numbers. I've met other programmers who claim they didn't use many threads and …
-
Enigma VirtualBox
by _Nooper- 1 reply
- 6.6k views
Hello guys, I have a question. How Enigma Virtual Box does files virtualization? How he unpacks the files silently? After execution, I cant see the virtualized files but other programms can see it When I check if (PathFileExists("virtualized_file.dat")) {}
-
A pointer mess!
by 0xNOP- 4 replies
- 8.3k views
I'm using a library called PE Bliss it's a PE Manipulation library, pretty good, however, I'm having problems writing data to a PE section this is my section scope so far: ////////////////////ADD NEW SECTION////////////////////// section new_section; cout << "[+] Adding New Section ..." << endl; //Section Name (8 Chars MAX!) const char section_name[8] = ".hw"; char data[] = { 0x6A, 0x00, // push 0 0x68, 0x00, 0xA0, 0x02, 0xE1, // push "PeBliss" 0x68, 0x00, 0x00, 0x00, 0x00, // push "Built with PeBliss" 0x6A, 0x00, // push 0 0xE8, 0x00, 0x00, 0x00, 0x00, // call MessageBoxA 0xE9, 0x00, 0x00, 0x00, 0x00, // JMP to OEP 'B','u','i','l',…
-
- 1 reply
- 4.9k views
This is my code so far!!! I'm using a PE Library called "PE Bliss" its quite an extensive and nice and rich in features Library as far as I've seen, but given my novice skills with this, I've been running into a problem lately, I want to inject code to a file this are the steps I have gathered used to do that manually: - Get & Store OEP - Add Section - Replace old OEP to new Section OEP - Write MessageBoxA Structrue to new Section & Jump to old entry point - Rebuild PE - Save PE However in my code as shown below when I try to write such data, I can't, it writes the first few bytes into the section, and I still don't know why it's happenin…
-
Any api hook library ?
by White- 16 replies
- 6.4k views
Hi,guys Do you know any hook api library with its open source code ? I have tried mhook library,not quiet good with named 'RtlAllocateHeap' api. So I am wandering if you guys may know some better library that I can use it to hook that api. Currently I am re-coding a plugin,you may see it within Christmas Thanks in advance.
-
SnR Patch FASM example source
by addhaloka- 0 replies
- 6.9k views
Ported to FASM diablo2oo2's snr patchengine and little search&replace patch example. snr_example_scr_fasm.zip
-
Scrollers Collection For Keygens
by Jasi2169- 0 replies
- 4.8k views
Scrollers Collection For Keygens You can either use the DLL or the static libraries depending on your need. C#, Java and VB.NET developers can use the DLL to invoke the scrollers, C or C++ developers can use both as per need. Source code for the DLL loader and loading DLL's is attached, you can easily manage to get it working with static libraries too. (If you have any issue, post it here). All scrollers are made with all possible simplicity and functionality. See the loader.exe in attached file. Run it and move/play with scrollers, you can also rearrange them,can change there positions,change colors of text,height,width,selfmove,parent move etc Downlo…
-
[Help] VBA Hardware locking
by Arnie- 1 reply
- 8.6k views
Could you advice on code snippet or application for simple and cheap solution of Word/VBA hardware locking preferrably working on both x86 and 64 bit. If possible no external dll due to restricted environment.
-
virtual usb source code
by zeytunak- 5 replies
- 7.3k views
Hi I want to emulate dongle and need source code of virtual use skeleton to make my own emulator I search on google and nothing found . maybe you can help me thanks
-
AssemblyLoadHoocker C#
by CodeExplorer- 1 reply
- 6.8k views
AssemblyLoadHoocker C#: Hoocks Assembly.Load(byte[] array) so you could change the loaded assembly with your own code. AssemblyLoadHoocker-ImportantFiles.zip attached or the whole Project (also include dnlib): http://www112.zippyshare.com/v/jj3hT5Ik/file.html The project is only inject MessageBox.Show("String") in loaded assembly, you got to customize it, this is why I shared the source code! AssemblyLoadHoocker-ImportantFiles.zip
