Programming and Coding
Programming and coding tips, help and solutions...
1,893 topics in this forum
-
- 22 replies
- 8.7k views
Hi , question to all who worked with TitanEngine: some targets hang on startup, dont react and consume alot CPU. Some make it to their GUI, some halfway. Other targets run fine. Even if I just do Debugger::InitDebug(filename, NULL, NULL); and no CustomHandlers nor any BPs/Callbacks. In Olly they start fine btw. However if I do Debugger::AttachDebugger the target doesnt freeze but they die after first BP callback was run. Has anyone experienced that or knows a solution? Any help appreciated
-
Need help to get hThread parameter etc
by LCF-AT- 8 replies
- 5.4k views
Hi guys, I got a short question about TitanEngine dll.So I did long time no more work with it and now I wanna test a function and have problems with some push parameter which I need to use this function.Sorry I forgot it already... IsJumpGoingToExecuteEx determines whether or not the targeted jump is going to execute. IsJumpGoingToExecuteEx allows you to specify which process and which thread to check.bool __stdcall IsJumpGoingToExecuteEx( HANDLE hProcess, HANDLE hThread, ULONG_PTR InstructionAddress, ULONG_PTR RegFlags );Parameters hProcess [in] Handle of the process in which the jump resides. hThread [in] Handle of the thread from which EFLAGS/RFLAGS will be read.…
-
Memory allocation/ FileMapping
by snoopy- 3 replies
- 7.4k views
Guys, Got a question about the following. I have a .exe I want to debug using my own tool. My tool runs the process using CreateProcess, than injects a DLL which sets up a Vectored Exception Handler. Than I can set breakpoints and such and let the DLL trace through the code. Now I am wondering if it is possible to make an exact copy of a .exe and map it into memory. So I can trace through a buffer instead of creating the process and injecting a DLL. What I tried so far: 1. CreateFile 2. CreateFileMapping 3. MapViewOfFile and MapViewOfFileEx. The problem I am facing here is that the rva's inside the .exe are not pointing to the proper memory locat…
-
section flag to not writeable in asm
by Yoshi- 11 replies
- 5.9k views
how to set a section flag to not writeable in asm coding? i dont want to change it with tools but need to do it manually. i got a pe32 which is writeable but i want to change this flag to not writeable. i wrote already a piece of code which change it to not writeable but for x reason the code has not acces because it crashes when it trys to write the flag to not writeable assume edx: ptr IMAGE_SECTION_HEADER mov [edx].Characteristics, 60000040h
-
Kill Process
by StoneHeart- 9 replies
- 14.8k views
How does Kernel Detective "smart terminate" process work? I found it very interesting and awesome to kill any stubborn process. Is there any source for it?
-
How to handle strings?
by LCF-AT- 20 replies
- 6.8k views
Hello again, so I have again a little question for you and hope that you can help. So the problem is that I am no coder and also don't know all API's and what they can do.So at the moment I need to find some API's of any xy dll which can handle interger and strings quickly. So what I wanna do is to create a LOG text file in realtime which does log diffrent informations. 1. How to convert integers to a string? ----------------------------------------- For exsample I have any value 12345678 in eax and want this get back as ASCII string in my buffer.Which API/s can I use for this? 2. How to convert Hex to Dec? ----------------------------------------- Here I need an…
-
64 bit sections
by Guest SkyHigh- 3 replies
- 9.9k views
based upon the code from yesterday i want to make a new section to a 64 bit file in example notepad.exe windows 7 64 bit. but for a reason the section is added but it cant execute the file. maybe you people does know why not? bool AddSection(LPWSTR lpFileName, char* sectionName, LPBYTE lpSection, DWORD dwSectionSize) { // Read the original file HANDLE hOriginalFile = CreateFile(lpFileName, GENERIC_READ, 0, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL); if (hOriginalFile == INVALID_HANDLE_VALUE) return false; DWORD dwFileSize = GetFileSize(hOriginalFile, NULL); if (dwFileSize == INVALID_FILE_SIZE) { CloseHandle(hOriginalFile); return false; } LPBYTE lpBuf…
-
Memory Allocation Problem
by StoneHeart- 12 replies
- 9.8k views
I'm trying to allocate memory on lsass.exe process but it always fail. Other tools i try like sam password dump works. What could be the problem? Example code i use to allocate memory on that process. // Enable the debug privilege if( SetDebugPrivilege() != 0 ) // Get the LSASS pid dwPid = GetLsassPid(); // Open lsass hLsassProc = OpenProcess( PROCESS_ALL_ACCESS, FALSE, dwPid );. // Allocate memory in remote proc pRemoteAlloc = VirtualAllocEx( hLsassProc, NULL, 1000, MEM_COMMIT, PAGE_READWRITE ); Result: pRemoteAlloc = NULL GetLastError = 5 .... I'm using win 7 x86 sp1 and vsc++ 2010
-
how to call readfile in asm code?
by ewwink- 2 replies
- 5.4k views
hi, I want to create loader and need to change BytesToRead to 0 but how to call readfile in asm code 0012F130 0132A275 /CALL to ReadFile 0012F134 0000015C |hFile = 0000015C (window) 0012F138 02724FF8 |Buffer = 02724FF8 0012F13C 000002F8 |BytesToRead = 2F8 (760.) 0012F140 0012F660 |pBytesRead = 0012F660 0012F144 00000000 \pOverlapped = NULL thanks
-
From nasm to masm
by Yoshi- 7 replies
- 10.5k views
when i use nasm.exe in cmd and choose the filepath to my asm file it will generate a new file. Just like this in cmd; nasm.exe mynasmsource.asm. this will geneate a new file. now i want do the same with masm32. i got the same source but this time written in masm, now i need that new file like what nasm.exe generated. how?
-
How to get the sections of an exe in .NET?
by LordCoder- 9 replies
- 8.6k views
Hello! I want to get the sections of an executable (.text, .rdata, etc). With PEiD it's easy to dump them, but programming it's more difficult. Anybody knows how to do so in .NET? Thanks so much!
-
ShellCode Aint working!
by StoneHeart- 7 replies
- 7k views
Im trying to create a shellcode but it aint working. Maybe im doing it wrong or i dunno lol int main() { char *msg = "Hello World!"; char *title = "World!"; char *usr ="user32.dll"; char *mbox ="MessageBoxA"; DWORD lLib = (DWORD)GetProcAddress(LoadLibraryA("kernel32"), "LoadLibraryA"); DWORD lProc = (DWORD)GetProcAddress(LoadLibraryA("kernel32"), "GetProcAddress"); //This shit works /* __asm { push usr call [lLib] push mbox push eax call [lProc] push 00000000h push title push msg push 00000000h call eax…
-
injecting code into a process 1 2
by Messias- 27 replies
- 36.5k views
I have been injecting a DLL into a computer game to increase stamina, speed, etc but now i would like to learn how to inject code directly. injecting a DLL is easy, inside my DLL i call API functions, for example i can show a MessageBox easily because my DLL has its own import section and the text i show on my MessageBox is located inside the DLL's data section. Now im searching on injecting code directly into the game process but i don't know how to inject an API call that will show some text that im also going to inject. i would like an example on injecting fox example: MessageBox(0, "hello", "hi", 0); i thought about injection a function that will get me the MessageBox…
-
Protecting file after decryption
by spman- 0 replies
- 11k views
Hi friends I'm producing a secure program. The program opens files with secret contents. suppose the file is video or any other specific format that I don't know about its structure and I use some libraries in my source project to open the file. So I can't make change in the section of code which opens the file. In order to protect the file, encryption is used. But on the other hand, the file must be decrypted to be opened by the program, meaning that the neat file must be passed to the section of program which uses file contents. In the program I do it before passing the file to that section. But in this time the decrypted file is subjected to illegal read. How can I Pr…
-
- 0 replies
- 4.5k views
Visual Basic 6.0 Only! Compiler Type : uFMOD Linker * MASM SDK Required TextScroller Imports: TextScroller.VB6.rar
-
- 0 replies
- 5.8k views
Visual Basic 6.0 Only! Compiler Type : uFMOD Linker Bassmod Imports: Bassmod.VB6.rar
-
ImpREC Source Code Project
by Dreamer- 2 replies
- 9.1k views
ImpREC source code project downloaded from unpack.cn ImpREC_lite_v11.rar
-
[C#] Problem With Fiddlercore
by ken3ss- 3 replies
- 14.7k views
Hi, I'm trying to bypassing the server check by using fiddlercore in order to produce a 'fake' autoresponse back into the software in order to trick the program here's come the problem, the code I made didn't wait for the operation, but it just executed and exit like nothing happended this is my sauce: using System; using System.Collections.Generic; using System.Linq; using System.Text; using Fiddler; namespace ConsoleApplication1 { class Program { static void Main(string[] args) { List<Fiddler.Session> oAllSessions = new List<Fiddler.Session>(); Fiddler.FiddlerApplication.BeforeRequest += de…
-
Problem With VB6 Exe
by StoneHeart- 23 replies
- 8.1k views
Im finishing my exe loader which run exe from memory. All went fine but now im facing problem with vb6 exe. When i try loading resource data, the app crash because it cant find the resource. Does anyone know what is the problem with my loader to load vb6 exe? Some example to fix the problem would be nice. Thanks.
-
PE section question
by Guest SkyHigh- 4 replies
- 5.1k views
solved
-
Undocumented NtQuerySystemInformation Structures...
by Teddy Rogers- 2 replies
- 5.8k views
I came across this nice article from Matthew Graeber regarding NtQuerySystemInformation and it's undocumented structures of the function. Thought others here may find it of interest... http://www.exploit-monday.com/2013/06/undocumented-ntquerysysteminformation.html Ted. Undocumented NtQuerySystemInformation Structures.zip
-
Almdev All in One - Full Source
by Dreamer- 2 replies
- 7.9k views
Almdev All in One - Full Source BusinessSkinForm VCL library help you to create applications with skins support for forms, menus, hints, many standard and DB controls. Also this library includes Office2010 / Office 2013 skins, Ribbon UI control and Ribbon UI Application Menu. You can create your skins with special editor. Develop your business applications with BusinessSkinForm VCL! Use the latest generation of Ribbon UI and you'll be on the wave of the latest trends! - BusinessSkinForm VCL v10.31 - Smart Flash v3.40 - AlmDev Smart Effects v2.70 - DynamicSkinForm VCL v12.90 thx to pnta https://www.box.com/s/16fi72mynuyue00uefoy
-
Java Native Access (Java)
by CodeExplorer- 0 replies
- 10.9k views
Java Native Access: native APIs on Java Links: https://java.net/projects/jna/downloads http://en.wikipedia.org/wiki/Java_Native_Access
-
Python language question
by PythonArt- 3 replies
- 13.6k views
i want to learn new language that is python. is there any good place to start? btw, what can i really do with python??? or should i learn other language? where is the place we use more of this language?
-
Music .xm or .mod into VB 2010
by PythonArt- 3 replies
- 11.5k views
Hello guys.. i'm making a simple game in Visual Basic 2010 and i need a background music when i start the program but the problem is i didn't find any code that work. i tried to find tutorials everywhere also in this forum but still no luck. I read something about Bass.dll but i don't understand how to do it and the source code included is not helping at all. How to actually do this??? Tut
