Jump to content
Tuts 4 You
Sign in to follow this  
Aguila

Scylla Imports Reconstruction Source

Recommended Posts

Aguila

Scylla Imports Reconstruction Source


Scylla - x64/x86 Imports Reconstruction

ImpREC, CHimpREC, Imports Fixer... this are all great tools to rebuild an import table, but they all have some major disadvantages, so I decided to create my own tool for this job.

Scylla's key benefits are:

  • x64 and x86 support
  • full unicode support
  • written in C/C++
  • plugin support
  • works great with Windows 7

This tool was designed to be used with Windows 7 x64, so it is recommend to use this operating system. But it may work with XP and Vista, too.

Source code is licensed under GNU GENERAL PUBLIC LICENSE v3.0

https://github.com/NtQuery/Scylla
https://github.com/x64dbg/Scylla

 


 

Edited by Aguila (see edit history)
  • Like 11

Share this post


Link to post
Killboy
clap2.gifclap.gif

Share this post


Link to post
Mad Max

So many Greetings to gRn?? Which Member since probably behind it??clap2.gifclap.gifclap.gif

Share this post


Link to post
metr0

Nice to see you releasing the source code as well! :)

Share this post


Link to post
GIV

The software is nice. But it needs some improvements. Good work!

Share this post


Link to post
Aguila

But it needs some improvements.

prove it!

Share this post


Link to post
Teddy Rogers

The software is nice. But it needs some improvements. Good work!

You might want to elaborate on that for it to be a useful comment... smile.png

Ted.

Share this post


Link to post
qifeon

good,maybe searching iat need improving.

00749BD4 00F349A0 Calender.ShowCalender iat end importREC can recognize right

00749BD8 00000000

00749BDC 6E72656B

00749BE0 32336C65

00749BE4 6C6C642E

00749BE8 00000000

00749BEC 656C6544

00749BF0 72436574

.....

but Scylla Imports Reconstruction recognize iat end error

iat_rva="00349BCC" address_va="00ED3C5C" />

</module>

<module filename="calender.dll" first_thunk_rva="00349BD4">

<import_valid name="ShowCalender" ordinal="0001" hint="0000" suspect="0" iat_rva="00349BD4" address_va="00F349A0" />

</module>

<module filename="?" first_thunk_rva="00349BDC">

<import_invalid iat_rva="00349BDC" address_va="6E72656B" />

<import_invalid iat_rva="00349BE0" address_va="32336C65" />

<import_invalid iat_rva="00349BE4" address_va="6C6C642E" />

<import_invalid iat_rva="00349BEC" address_va="656C6544" />

<import_invalid iat_rva="00349BF0" address_va="72436574" />

<import_invalid iat_rva="00349BF4" address_va="63697469" />

Share this post


Link to post
sitifis

Good tools thanks a lot


Share this post


Link to post
Teddy Rogers

Seems someone uploaded a new release/build today, is there any more detail behind the changes?

Quote

Built with Visual Studio 2015 and some minor C++11 modernized.

https://github.com/tathanhdinh/Scylla/releases

Ted.

Share this post


Link to post
Aguila

Hi,

sorry I wasn't online for so long. I am still alive 🙂 but I had a HDD crash and lost almost everything including account information. Today I was able to recover some account information from a forgotten USB stick. At least the forum here + bitbucket/github account. So I may be able to work on the projects again 🙂

  • Like 3
  • Thanks 1

Share this post


Link to post
ahmadmansoor

Welcome back @Aguila  😀

Share this post


Link to post
Teddy Rogers
1 hour ago, Aguila said:

So I may be able to work on the projects again 🙂

Thank you for the commits! 👍

Ted.

Share this post


Link to post

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  
×
×
  • Create New...