Jump to content
Tuts 4 You


  1. Teddy Rogers

    Teddy Rogers


    • Points


    • Content Count


  2. whoknows


    Full Member

    • Points


    • Content Count


  3. unknown021



    • Points


    • Content Count


  4. m0rfl1ng



    • Points


    • Content Count


Popular Content

Showing content with the highest reputation since 06/15/2020 in Files

  1. 23,933 downloads

    A collection of tutorials aimed particularly for newbie reverse engineers. 01. Olly + assembler + patching a basic reverseme 02. Keyfiling the reverseme + assembler 03. Basic nag removal + header problems 04. Basic + aesthetic patching 05. Comparing on changes in cond jumps, animate over/in, breakpoints 06. "The plain stupid patching method", searching for textstrings 07. Intermediate level patching, Kanal in PEiD 08. Debugging with W32Dasm, RVA, VA and offset, using LordPE as a hexeditor 09. Explaining the Visual Basic concept, introduction to SmartCheck and configurati
    9 points
  2. 1,650 downloads

    I want to release a new tutorial about the popular theme Themida - WinLicense. So I see there seems to be still some open questions mostly if my older unpack script does not work anymore and the unpacked files to, etc. So this time I decided to create a little video series on how to unpack and deal with a newer protected Themida target manually where my older public script does fail. A friend of mine did protect unpackme's for this and in the tutorial you will see all steps from A-Z to get this unpackme successfully manually unpacked but this is only one example how you can do it, of course. S
    4 points
  3. Version 7.6.210507


    This (completely!) free version of IDA offers a privilege opportunity to see IDA in action. This light but powerful tool can quickly analyze the binary code samples and users can save and look closer at the analysis results. What’s included in the pack? Analyze both 32-bit and 64-bit applications Cloud-based x64 decompiler Local x86/x64 debugger included Support x86/x64 processors Save your analysis results Perpetual license The freeware version of IDA v7.6 comes with the following limitations: no commercial use is allowed lacks al
    2 points
  4. 691 downloads

    Try to unpack or alternatively provide a serial. Protections used: Necrobit Antitampering Antidebug Obfuscation Code Virtualization + Shield with SNK
    2 points
  5. Version v 1.0


    hey guys i create a program for serial sniff by vb6 esc features : check crc(automatic) unicode string small size background music bypass packers and ..... sorry for my english (im persian) enjoy it
    2 points
  6. Version 2.0


    My very old generic crack generator. Supports skins, music and text scroller by your choice. - What does "generic" means? - It does not only patch concrete offsets but it's trying to find the same segments into the target app so it might be newer version of the app but the same parts of the code might exist so it cracks them. It's very old, I'm uploading it just to share it but if you feel it useful feel free to use it.
    1 point
  7. 1,454 downloads

    This is a complete archive (site rip) of all files on Tuts 4 You as of July 2011 except for the malware samples - you will need to download these directly from Tuts 4 You. I have created the torrent as directories and files rather than one archive which gives you the option to download files individually or in categories. The entire collection is 3.69 GB of which some sections may be of little interest to some but you have the option of downloading what you want. This collection will be updated annually so please check at the following link for the official and up-to-date torrent fil
    1 point
  8. 106 downloads

    This unpackme was protected using NETProtect.IO using protection options shown in the screenshot. Nice to meet guys in forum.
    1 point
  9. 1,522 downloads

    Password: tuts4you .NET .NET Reactor CliSecure 3.2.rar CliSecure 4.5.rar CodeVeil 1.2.rar DNGuard (Standard) 2.6.rar DNGuard HVM dotNET Reactor dotNET Reactor dotNETZ 0.2.7.rar Maxtocode 3.2.rar MPress 0.71.rar MPress 0.75.rar MPress 0.77.rar MPress 2.12.rar NsPack 3.6.rar Phoenix Protector Sixxpack 2.2.rar Skater .NET Obfuscator Light 2.6.rar Smart Assembly 1.3.rar Smart Assembly 2.0.rar Themida .NET FoxPro KONxiSE 1.0.rar vfp&exeNc 6.20.rar PE32 x32 !EP (EXE Pack) 1.0.rar !EP (EXE Pack) 1.2.rar
    1 point
  10. 103 downloads

    Welcome back! A lot of people asked me after they've read my article about inserting a message box at program start of an exe file if it's possible/how to add a splash screen to a PE. Well, yes it is possible! You can inject (theoretically) everything you want to an exe file, it just depends of your reverse engineering skills! (of your time and of your perseverance. Actually I thought about doing this, so my first step was to think about what is necessary. So let's just think about all the steps.
    1 point
  11. 90 downloads

    Try to unpack or alternatively provide a serial.
    1 point
  12. Version 0.9.5


    PinMe! allows setting individual windows to TopMost (window always on top) with the following additional features; Setting windows to TopMost / NoTopMost Changing window transparency levels Window captures and region captures Desktop captures (foreground and background) Basic window statistics Window information; dimensions, sizes, styles, etc. Installation As of version 0.8.9 PinMe! is a Windows 10 only application. Extract PinMe! from the archive and copy to a directory from where it can be run. If you want to have PinMe! run at each
    1 point
  13. 174 downloads

    Hi guys , i write a very simple crack me , i really do not know how i should secure my code just write a very basic one . anyway i know it's very easy but still wanted to know other peoples opinion. if it did not run please let me know , i did not use any packer , or protector , just my own code , and it's written in C++ with visual studio 2019 on windows 10. Submitter: m0rfl1ng Category: CrackMe Virus Total Scan
    1 point
  14. 155 downloads

    DupSkins.rar contains fallowing dup skins: Ariana_Grande_Skin_v1 Ariana_Grande_Skin_v2 DooM_Skin Elsa_and_Tiana_Skin Female_Skin paradise_frieslve-dup2skin (Paradise-DUP2skin) All credits go to original author fRiESLVe: https://forum.tuts4you.com/profile/98062-frieslve/content/?type=downloads_file https://forum.tuts4you.com/files/file/1206-paradise-dup2-skin/
    1 point
  15. Version 1.1


    Tracing ASProtect 2 SKE stolen and poly code is very difficult because of lots of short obfuscation jumps. This script written by me makes this code much easier to read and trace. There is some more to be done but i switching to immunity so i can make a better script and remove more code. To use it you should run it at the start of obfuscated code because it will deobfuscate an entire section.
    1 point
  16. Version 1.7


    REPT KeyGen Maker is an utility to make keygens easily without having a programming knowledges. Please report any bug/improve to make it better This is currently done in .NET so will need .NET Framework 3.5 or higher. Thanks for download it!
    1 point
  17. 622 downloads

    A video tutorial showing a method of unpacking Enigma Protector 4.10.
    1 point
  18. Version 1.80


    This plugin is process memory dumper for OllyDbg and Immunity Debugger. Very simple overview: OllyDumpEx = OllyDump + PE Dumper - obsoleted + useful features Features: Various debuggers supported Select to dump debugee exe, loaded dll or non-listed module Search PE File from memory Multiple Dump mode. Rebuild for typical PE dump, Binary for PE Carving PE32+ supported (Search and Binary Dump mode only available on 32bit debugger) Native 64bit process supported (IDA Pro, WinDbg and x64dbg) ELF supported (both of 32bit and 64bit)
    1 point
  19. Version 0.3


    SigCreator is a reproduction of "SigMaker 0.4" for the new OllyDbg version 2.xx. SigCreator generates you all needed information for using the selected signature in your code. Furthermore it will give you a list of all occurrences of the signature in the current module. Result: Sig start // Start-address of signature occurrence Sig end // End-address of signature (both addresses are inclusive) // sizeOfSig = sigEnd - sigStart + 1 Modulebase // Base address of the module Offset // Offset from base address to the signature Signature // Signature in code design Mask // Mask of signa
    1 point
  20. Version 1.10


    This update, my vicOlly can run very well on Windows 7, x86 & x64. All for fun.
    1 point
  21. 69 downloads

    This tutorial aim is show some simple techniques that can be used to reverse and patching Java target, a first classical approach will be about the class decompilation with JAD and JODE decompiler, then we can move into the JVM (Java virtual machine) analysis and deeper into the bytecode analysis and patching. In order to fix some concepts a simple Java CrackMe will be explored trough decompilation with the presented tool and bytecode patching by using IDA and Hex Editor. Of course this topic isn't new and was also covered into the past by other, but this essay will just point some well k
    1 point
  22. 48 downloads

    This book provides a quick introduction to the PureBasic programming language. PureBasic's popularity has increased significantly in the past few years, being used for many purposes such as rapid software prototyping, creation of commercial applications and games, Internet CGI applications, while some people just use it for small utilities. This book has been written, with the complete novice in mind. We all need to start somewhere and I believe PureBasic is a fantastic first leap into the programming world. With PureBasic becoming more and more widely used, many people are starting out and fi
    1 point
  23. 53 downloads

    Serial fishing CloneTrone KeygenMe #1. Level for beginners.
    1 point
  24. 525 downloads

    A premier collection of articles compiled by Fly from the now defunct UnPack China forum dated in 2007. Note that most of the content contained in this compilation is in Chinese, you may need to use a translator to fully understand some of the information it contains.
    1 point
  25. 256 downloads

    Again I have written a new script called "TM - WL HWID & BASIC Inline Patcher 1.0" So maybe you have sometime trouble to unpack a TM / WL app and for this case I have written this new script. It writes the Inline automatically {+ addresses adjustment} & HWID Inline too if needed.For a HWID app you have just to find the jump address to attack for this you can use my older Unpacker script to get the data which you have to fill in the inline.So I don´t want to explain now all here on this post so watch the 3 movies and do it too.If something not works or you have some trouble with s
    1 point
  26. 140 downloads

    You may wonder why I have chosen this topic, why write a tutor on .net components? Technically a .NET component is not different from an executable assembly, I mean that both are compiled to MSIL and you can usually view the source in Reflector and other tools, but when it comes to commercial components you have to understand that more and more complicated protection schemes are being implemented to protect them, and after analyzing many products I found so many points that all these components share to protect themselves. The second reason that pushed me to write this tutor is that
    1 point
  27. 169 downloads

    This article discusses the methods of software reverse engineering and the case study of FLEXlm system.
    1 point
  28. 150 downloads

    In my previous tutorial on HASP SL (6.41.95) I demonstrated how to easily find the OEP, dumping and rebuilding of the target application. The main goal of this tutorial is to do a little more in-depth analysis, how to manually bypass the anti-debug feature and finding out what version you are dealing with etc. Also this tutorial includes a flash-movie of the manual handy work described in this tutorial. Dodging the anti-debug, finding OEP, dumping and rebuilding. All done in about 2.5 minutes! Edit: This new version of HASP SL - A Deeper Dig features some new info on the encryption, ant
    1 point
  29. Version v1.1 & v2.0 & Sh


    OllyDbg with Plugin + OllyDBG v1.1 + OllyDBG v2.0.1 + OllyDBG Shadow GUI with Vic Plug-In Enjoy !
    1 point
  30. Version 0.9.8


    Scylla - x64/x86 Imports Reconstruction ImpREC, CHimpREC, Imports Fixer... this are all great tools to rebuild an import table, but they all have some major disadvantages, so I decided to create my own tool for this job. Scylla's key benefits are: x64 and x86 support full unicode support written in C/C++ plugin support works great with Windows 7 This tool was designed to be used with Windows 7 x64, so it is recommend to use this operating system. But it may work with XP and Vista, too. Source code is licensed under GNU GENERAL PUBLIC LICENSE
    1 point
  31. Version 2.2


    Bundle of .NET tools! Main reason is to defeat strong name validation, on the other hand third party tools merged! ACorns.Hawkeye Is the only .Net tool that allows you to view, edit, analyze and invoke (almost) any object from a .Net application. Whenever you try to debug, test, change or understand an application, Hawkeye can help. CFF Explorer-NTCore Designed to make PE editing as easy as possible, but without losing sight on the portable executable's internal structure. HwndSpy-dp0 Is an invaluable tool for developers doing maintenance on GUI applica
    1 point
  32. Version 1.7


    Bundle of .NET tools! The development ended @ 2012 with v1.7. Main reason is to defeat strong name validation, on the other hand third party tools merged! ACorns.Hawkeye Is the only .Net tool that allows you to view, edit, analyze and invoke (almost) any object from a .Net application. Whenever you try to debug, test, change or understand an application, Hawkeye can help. CFF Explorer-NTCore Designed to make PE editing as easy as possible, but without losing sight on the portable executable's internal structure. HwndSpy-dp0 Is an invaluable tool for developers doing m
    1 point
  33. Version 1.10


    The folder Ollydbg made the following modifications on the basis of DosaDBG 1, Path several key name 2, OllyDBG-C, OllyICE-B two debugger in loader Path after a title 3, inside the INI File contains no debug logging blank INI document, only need to use after decompression can restore the debugging yywr
    1 point
  • Newsletter

    Want to keep up to date with all our latest news and information?
    Sign Up
  • Create New...