[Delphi] how to Sniff serial from dll files

[h4sh3m]

hi dears

how we can switch to dll files in memory and sniff serial in delphi?

sorry for poor english

tnx

[ragdog]

hi dears

how we can switch to dll files in memory and sniff serial in delphi?

sorry for poor english

tnx

Search in the programing section for sniff serial or serialsniffer

I think it gives 2-3 example in delphi or translate Masm or c++ code in delphi

and Get the module base of your dll. (Module32First etc.)

Now ModuleBaseaddress + ReadAddress =eax

mov eax, ModuleBaseAddr

add eax,60B4h ; Read address thats hold the serial

ReadProcessMemory pInfo.hProcess, eax.....................

Greets

Edited June 6, 2011 by ragdog

[h4sh3m]

tnx ragdog for help but my target don't start to test it !

best regards

[BLaCkViRuS]

Hi Dear h4sh3m

Can Use Oraclum source code by ARTeam

but source is ASM

BLaCkViRuS

[h4sh3m]

Hi Dear h4sh3m

Can Use Oraclum source code by ARTeam

but source is ASM

BLaCkViRuS

hi dear BLaCkViRuS

please put it's download link & if you have any delphi source plz share it !

tnx

[0xFF]

OpenProcess -> CreateToolhelp32Snapshot (SNAPMODULE) -> ReadProcessMemory (With condition Loop) -> GetThreadContext -> WriteProcessMemory.

[h4sh3m]

tnx all my friends

I'm solved it last night.

Best Regards

Edited June 10, 2011 by h4sh3m

[BLaCkViRuS]

Hi Dear h4sh3m

and this is Sniffer for DLL s

Sample is Reflexive Games

Enjoy it !

DLL Sniffer.ASM.rar

[h4sh3m]

hi dears

I'm wrote a sniffer Creator for dll's ,you can get & and test it from here.

please report any bugs.

Bes Regards

[ganvin]

Thanks h4sh3m for the link, but what is the PW?

Regards,

-Ganvin.

[h4sh3m]

Password : h4sh3m

I'm Packed files with nSpack 3.7 and it's signature is virus in some antivirus Softwares.

N-Joy my friends

[ganvin]

@h4sh3m: Thanks for the password and the info.

Regards,

-Ganvin.