28 January 2008

ap0x R.C.E. RL!dePacker 1.41 (101+) Reversing Labs

0 comments
ap0x R.C.E. RL! de Packer 1.41 unpackerap0x R.C.E. RL!dePacker 1.41 Unpacker EngineRLKit - Reversing Labs (first aid) Kit
----------------------------------------
After seeing a lot of so called crackers kits being spread around which weight overcomes 10 and sometimes 20 MB. I decided to create a real minimum reverser kit. That kind of first aid kit would contain only the most used applications by all crackers. So this is a bear bone kit that proves that all you can need during reversing of 90% of applications can be packed in one package that weighs lesser than 2 MB. This kit contains:

+ OllyDBG 1.10
+ LordPE 1.4
+ ImpRec 1.6
+ PeID 0.94
+ 32bit Calculator 1.7
+ RepairPE 0.4
+ FileMon 4.28
+ RegMon 6.06
+ FSG 2.0
+ WinUPack 0.39
+ R!SC`s Process Patcher 1.5.1
+ IIDKing 2.0
+ dUP 2.10
+ Tola`s Patching Engine 2.03


Reversing Labs RL!dePacker has a build in option to detect OEP. However this option does not work with VB (always use FindOEP! function with VB applications and Force to manual OEP?) and some packers. So if RL!dePacker can not unpack the file use FindOEP! function to detect correct OEP, but use it only as a second resort since it can be jammed!
° Option Force OEP to manual address is used to force stopping on manual OEP address, use this option ONLY if packer can not be unpacked (the target runs instead of breaking at OEP or dumps at wrong OEP).
° Option Correct OEP to manual address is used correct OEP in PE header of the unpacked file.
° Option Hide unpacker from detection is used hide debugger from being detected by antiTricks. Option Use tracer to correct IAT is used to remove all known redirection types.
° Option Fix Import elimination is used on applications that relocate import table in memory outside PE32 file. This option has been tested with AlexProtector 1.0 and RLPack TE 1.18. Please note that even dow this option is in testing it should give good results on all known redirection types (see ap0x unpacker SDK).

Generic unpacker can unpack ONLY packers that do not use IAT redirection, that don’t steal APIs and which fill out IAT table in correct order. All ordinals that can be converted to API names are converted, others are inserted into IAT as ordinals! Designed for NT systems, Windows 2000 or later but it should work on Windows 9x if you have psapi.dll file!
If you don’t want to update the software and therefore wait few seconds before you can use this program delete Updater.dll file.


RL!dePacker 1.41 is tested with 101+ packers
aUS [Advanced UPX Scrambler] 0.4 - 0.5
ASPack 1.x - 2.x
AHPack 1.x
AlexProtector 1.x
ARMProtector 0.x
BamBam 0.x
BJFNT 1.3
BeRoEXEPacker 1.x
CryptoPeProtector 0.9x
CodeCrypt 0.16x
dot Fake Signer 3.x
dePack
DragonArmour
eXPressor 1.2.x - 1.5.x
EZip 1.0
EP Protector 0.3
ExeSax 0.x
EXEStealth 2.x
FSG 1.xx & 2.0
Goat's PE Mutilator 1.6
hmimys-Packer 1.x
HidePX 1.4
HidePE 2.1
JDPack 1.x
JDProtect 0.9
JeyJey UPX Protector
KByS Packer 0.2x
Krypton 0.x
LameCrypt 1.0
MEW 1.x
nSPack 2.x - 3.x
nSPack Scrambler
nPack 1.x
NeoLite 1.0 & 2.0
NWCC
ORiEN 2.12
OrIEN 2.1x
PECompact 0.9x - 2.x
PeX 0.99
PC Shrink 0.71
Polyene 0.01
Pack 4.0
PackMan 0.0.0.1 & 1.0
PE Diminisher 0.1
PolyCrypt PE 2.1.5
PeTite 1.x
PEStubOEP 1.6
PELockNT 2.x
PePack 1.0
PC PE Encryptor alpha
PackItBitch
PEncrypt 4.0
PEnguinCrypt 1.0
PeLockNt 2.x
PeLock 1.0x
Perplex PE-Protector 1.x
RLP 0.6.9 - 0.7.x
RLPack Basic Edition 1.x
ReCrypt 0.15 - 0.80
Stone`s PE Encryptor 2.0
StealthPE 2.1
Software Compress 1.x
SPLayer 0.08
ShrinkWarp 1.4
SPEC b3
SmokesCrypt 1.2
Simple UPX-Scrambler
SimplePack 1.x
SLVc0deProtector 1.x
tELock 0.x
UPX 0.8x - 2.x
UPolyX 0.4 & 0.5
UPXRedir
UPXCrypt
UPX Inkvizitor
UPXFreak 0.1
UPolyX 0.x
UPXLock 1.x
UG Chruncher 0.x
UPX-Scrambler RC 1.x
UPX Protector 1.0x
UPXShit 0.06 & 0.0.1
UPXScramb 2.x
VirogenCrypt 0.75
WWPack32 1.x
WinUPack 0.2x - 0.3x
WinUPack Mutanter 0.1
Winkript 1.0
yC 1.x
32Lite 0.3a
!ExE Pack 1.x
!EP (ExE Pack) 1.x
[G!X]`s Protector 1.2



This unpack engine covers everything what unpacker needs. It has debugger, dumper and importer modules which enable coding unpackers with ease. SDK is free and can be used by anyone but make sure you mention my name or include logo.bmp somewhere in About dialog.

SDK v.1.4
- Updated Delphi and MASM SDK
- Fixed memory problems for all modules


v.1.6 [Debugger.dll]
- Added new ldex86
- Rewritten DebugLoop
- Added new API: ForceClose
- Added new API: SehGoneWildProtection
- Fixed: Handling custom exceptions
- Fixed: In case breakpoint is fired in second thread context doesn't get read
- Fixed: Not releasing loaded .dll file handles on process terminate
- Fixed: Find crashing on some searches with an access violation


v.1.5 [Dumper.dll]
- Fixed: PastePEHeader not writting header on some files
- Fixed: DumpProcess crash on file with PE header moved above SectionAligment
- Fixed: DumpProcess not rebuilding header correctly on files which have larger...
- Fixed: ConvertVAtoFileOffset on files which have code inside PE header
- Fixed: AddNewSection resizing the new section size to fit FileAligment
- Fixed: AddNewSection not aligning raw offset correctly


v.1.0 [Tracer.dll] (just for internal use by RL!dePacker, next version will be public!)
- Added support for following redirections: SLVc0deProtector 1.1x...
- Added support for following redirections: tELock 0.8x-0.99, PeX 0.99, ReCrypt 0.74
- Added support for following redirections: yC 1.x, Goat's PE Mutilator 1.6...
- Added support for following redirections: RLP 0.7x, ACProtect 1.x...
- Added new API: TracerGetAPIAdressByHashing
- Added new API: TracerAutoFixImportElimination
- Added new API: TracerDetectRedirection
- Added new API: TracerAutoFixIAT
- Added new API: HashTracerLevel1
- Added new API: TracerLevel1
- Added new API: TracerInit


v.1.5 [Importer.dll]
- Fixed: StrToInt conversion
- Added new API: ImporterCleanup
- Added new API: ImporterMoveIAT
- Added new API: ImporterGetAddedDllCount
- Added new API: ImporterGetAddedAPICount
- Added new API: ImporterFindAPIWriteLocation
- Fixed: ImporterAddNewAPI ordinal import handleing
- Fixed: ImporterAutoFixIAT check already loaded .dll files code
- Fixed: ImporterAutoSearchIAT to correctly find IAT in case of invalid near jumps
- Fixed: Not unloading loaded .dll files with ImporterAutoFixIAT
- Fixed: ImporterGetAPINameOrOrdinal API...
- Fixed: Ordinal processing in ImporterGetAPIName, ImporterGetAPINameEx...
- Fixed: ImporterAutoFixIAT to get all .dll files(s) libraries and calculate relative...
- Fixed: ImporterGetAPINameFromDebugee to get API names from all libraries....
- Fixed: ImporterAutoFixIAT to get all .dll files(s) libraries not just the system ones


w/o internal modules: http://ap0x.jezgra.net/SDK.rar
Homepage: http://ap0x.jezgra.net/index.html
Tracer.dll & GenOEP.dll Downloads:
Mirror1 - Mirror2

Homepage: http://ap0x.jezgra.net/programs_2.html

Download all-in-on full (4.68 MB): RL!de.zip
AV's may report it as False Positive

µTorrent 1.8 build 8188

0 comments
µTorrent Version 1.8 alpha build 8188 Changelog:
- Change: Removed the two pixel gap on both sides of the main toolbar
- Change: Add properties to torrent category menu
- Change: Give delete torrent confirmation dialog "always show this dialog"-style functionality
- Change: Give search button a style more conformant to the Vista UI guidelines if available
- Change: Make delete torrent button look pressed while its menu is up
- Change: make Search and Remove buttons consistant with IE7 search button behaviour
- Change: removed 10 pixel gap on the right side of the searchbox
- Change: Alternate listview background color to be roughly the same color as the selected column, rather then a constant gray
- Change: Increase maximum waiting time from five seconds to one minute for UAC subprocess when installing on Vista
- Change: Add confirm deletion of trackers option to UI Settings
- Change: Show graphical progress bar option is now in advanced settings
- Change: Delete key now deletes trackers in the trackers tab
- Change: Remove label setting from torrent properties dialog
- Change: Note that port 0 in the speed guide is a signal for uTorrent itself to choose the port
- Change: Make about dialog non-modal
- Change: Change text of a few updater-related checkboxes in preferences to be more specific about what they effect
- Change: Always show the selection in the tracker and file listviews, even if they don't have focus
- Change: Move items in add torrent dialog listview left a bit if there are no directories in the torrent
- Change: Max Up and Max Down have been renamed to Up Limit and Down Limit
- Fix: Some cases of controls, such as listviews, not properly updating on Windows theme change
- Fix: potential remote crash exploit
- Fix: Opening dialog on Windows 95
- Fix: Modal dialogs now correctly disable and return focus to the window they were launched from, not the main window
- Fix: Various tiny memory leaks
- Fix: Leaking of memory when closing non-modal dialogs (existed in both 1.6 and 1.7)
- Fix: corrupted URL/messsage in Add Torrent by URL dialog
- Fix: incorrect column highlighting after hiding/showing columns
- Fix: disable webui relative path parsing

Download:
µTorrent 1.8 alpha 8188
http://download.utorrent.com/beta/utorrent-1.8-alpha-8188.uncompressed.exe
http://download.utorrent.com/beta/utorrent-1.8-alpha-8188.upx.exe
http://www.utorrent-deutsch.de/downloads/utorrent-1.8-alpha-8188.upx.exe

26 January 2008

Azureus 3.0.4.3 Beta 12

0 comments
AZUREUS VUZE v3.0.4.3 CHANGELOG

Azureus Vuze 3.0.4.3

FEATURE: Core | Added µTorrent PEX support [amc1]
FEATURE: UI | Added option for "Open Containing Folder" menu action - which may integrate better with non-standard file browsers [amc1]

CHANGE: Core | Further memory footprint reductions; for additional tweaks see http://www.azureuswiki.com/index.php/Reduce_memory_usage [The 8472]
CHANGE: Core | Reimplemented LT extension protocol code [amc1]
CHANGE: Core | Queuing rules now don't start any further torrents if the global up/download speed limits are reached [The 8472]
- makes "don't count torrent ..." minimum speed rules more useful to dynamically regulate the queue lengths
- prevents runaway chain reactions in case of connection loss
CHANGE: Core | Made the crypto handshake a bit less predictable [The 8472]
CHANGE: Core | Added support for plugins which implement mainline DHT [amc1]

BUGFIX: UI | Shells no longer use the low-res frog icon, the normal main window icon is now used instead [amc1]
BUGFIX: UI | Limiting comments in General View to 5k characters under WinXP to avoid crashes due to faulty comctl32.dll [The 8472]

To use, rename the downloaded AzureusXxxx-Bxx.jar file to Azureus2.jar to replace your old jar in the Azureus program dir: ChangeTheAzureusTwoJarFile
Azureus v2 vs. v3 (Vuze) FAQ
Changelog
Commitlog
Snapshot RSS Feed
Beta Site: http://azureus.sourceforge.net/index_CVS.php

★ Download:
Azureus3043-B12.jar - 23 Jan 2008 07:40:33 AM [10021745 bytes]
Azureus3043-B12.jar.torrent

Windows XP Service Pack 3 RC Build 3282 Refresh 2 - XP SP3 Milestone RCR2

0 comments
Standalone Update Package for Windows XP Service Pack 3 Release Candidate Refresh 2
Build 2600.xpsp.071227-1539
year---------------^
month---------------^
day--------------------^
-
hour----------------------^
minute----------------------^

27. December 2007 - 15:39

Connect Rel. Date: 24.01.2008
Size DVD (all Languages): 944,47 MB
Version: 3282
Kategorie Build: Milestone RCR2 - RC2 Refresh

This is the self-extracting executable (ms cabinet) that contains the update package for Windows XP Service Pack 3 Release Candidate Refresh 2 (RCR2). Release documentation, including lists of fixes and known issues, are available in the downloads section of the Connect site.

It is recommended that you apply this update package to an activated, genuine copy of Windows XP, in a test environment. As with any pre-release software, it is also recommended that you back up files and settings on your machine before applying this update package. You may apply this package to previous pre-release editions of Windows XP Service Pack 3 (e.g., the Release Candidate Refresh).

windowsxp-kb936929-sp3-x86-enu.exe
windowsxp-kb936929-sp3-x86-deu.exe
windowsxp-kb936929-sp3-x86-jpn.exe

Torrent Download: XP 5.1.2600.3282 (xpsp.071227-0220) x86.exe . torrent (windowsxp-kb936929-sp3-x86-enu.exe) - 311 MB - Mirror

Fixes: OEM Bios, Hardware ID, *inf computer initialization strings corrected during setup (DELL, HP and others).
IE7, Media Player 11, High Definition Audio Driver will be not included in Final stage.

RC2 Refresh Public release date: last January week / 1st February week 2008
Final Release public: end February / 2nd week March 2008

nfo: MS Munich, Press center

How to slipstream: http://unattended.msfn.org/unattended.xp/

P2P max TCP connection limitation Patch use: xp-AntiSpy 3.96-7

µTorrent 1.7.7 Build 8179

0 comments
µTorrent v1.7.7.8179
1.7.7 released to fix some potential security exploits. Barring any other security issues before the release of 1.8, this will be the last 1.7.x release.

The extension protocol crash bug affects 1.4, 1.5, 1.6, 1.7, and 1.8 builds releases to date. No update will be released for pre 1.7 builds. Upgrading is strongly recommended.

http://download.utorrent.com/1.7.7/utorrent.exe

2008-01-25: Version 1.7.7 (build 8179)
- Fix: remote crash bug in WebUI
- Fix: (potential) remote crash bug with extension protocol (affects all 1.4, 1.5, 1.6, 1.7, and 1.8 builds released to date)

Screenshot

25 January 2008

LimeWire Pro 4.16.3 Final & LimeWire Pro 4.17.0 Beta for Windows, Mac and Linux

0 comments
LimeWire - The Fastest P2P File Sharing Program on the Planet, running on the Gnutella Network. It is open standard software running on an open protocol, free for the public to use. LimeWire allows you to share any file such as.mp3s, .avis, jpgs, tiffs, etc., allows you to search for multiple files at the same time, available in several different languages, and is most famous for its ease-of-use and cross-platform compatibility. Limewire is written in Java, and will run on Windows, Macintosh, Linux, Solaris, and other computing platforms.

LimeWire Pro 4.17.0 from Thank you for purchasing LIMEWIRE PRO! page:

Choose Your Platform

Windows (95, 98, NT, ME, 2000, XP, Vista): LimeWireWin.exe (6.30 MB)
Mac OS X (10.4 Tiger or above): LimeWireOSX.dmg (10.59 MB)
Linux (RPM - Redhat, Fedora): LimeWireLinux.rpm (7.31 MB)
Linux (DEB - Ubuntu, Debian): LimeWireLinux.deb (8.26 MB)
Other Systems (OS/2, Solaris, Linux): LimeWireOther.zip (11.08 MB)


Last final from LimeWire PRO Download Page!:
LimeWire Pro 4.16.3

for Windows (6.25 MB): LimeWireWin.exe
for Mac OS X (10.46 MB): LimeWireOSX.dmg
for Linux Ubuntu, Debian (8.13 MB): LimeWireLinux.deb
for other systems (10.95 MB): LimeWireOther.zip

Alternative try FrostWire 4.13.4 - http://sourceforge.net/projects/frostwire/
Blog: http://www.frostwire.com/blog/
Betas: http://www.frostwire.com/beta/

Archive