Exetools

Exetools (https://forum.exetools.com/index.php)
-   Community Tools (https://forum.exetools.com/forumdisplay.php?f=47)
-   -   CJ-TESTER (https://forum.exetools.com/showthread.php?t=17676)

CodeCracker 06-20-2016 04:14

CJ-TESTER
 
1 Attachment(s)
CJ-TESTER: (source code MASM included)
How TO USE THIS TOOLS ?
a.) Set a VA from where to start in Config.txt (you can discover the address with IDA or some other tools)
You can even start testing from Entry Point if you wish to log all conditional jumps.
b.) Load the wanted executable and wait for this tool to make the entire dirty job.

The ideea is to run CJ-TESTER an log all jumps with the unexpired program and
then with expired program and compare the log results and see where is different!
Unconventional method (I know) but sometime may do the job!

Masoud 06-21-2016 18:46

Nice idea and makes someone able to crack an app in shortest time, even without Reversing info.
I had the same idea years ago, but never tried to write a program like this.
May I ask you to upload it somewhere else that I could access please?

CodeCracker 06-22-2016 05:24

Here is a download link:
http://www5.zippyshare.com/v/KH9fTLnm/file.html

Loki 06-22-2016 15:30

There was an Olly plugin that did something similar on v1.10.... OllySnake or something? I'm sure someone else can remember better than me....

DARKER 06-22-2016 16:28

It's something like Olly Conditional Branch Logger plugin:
Code:

http://www.woodmann.com/collaborative/tools/index.php/Conditional_Branch_Logger

Loki 06-22-2016 21:05

Yeah, that one too, although I seem to recall something called OllySnake which actually diff'd 2 runs for you aswell.

Could well have been dreaming.
Or high.

TechLord 06-24-2016 09:50

First of all a BIG thank you to @CodeCracker for this tool.

This reminds me of a post in 2005 regarding almost exactly the same method, that was posted by someone named Benina in one of these forums.

Please do not share or upload on public servers.

Though the content is not mine, I had created the PDF and archived it in my records from 2005, after all :) !

So I want it to remain only within this forum please. Thank you

Kurapica 06-25-2016 05:54

Is there any plan for the 64 bit apps ?

niculaita 06-25-2016 11:53

link to pdf deleted file/dead

Masoud 06-25-2016 17:59

1 Attachment(s)
Quote:

Originally Posted by niculaita (Post 105856)
link to pdf deleted file/dead

File attached .

squareD 06-26-2016 00:27

Just saw this little prog few minutes ago...
Next time working with 30 day trial, I will test it, but will changing some jumps solve the problem?
May be, I will report when test has done.
But first I almost work for key, activation code or something like that, it's the best solution

CodeCracker 03-22-2017 01:09

1 Attachment(s)
CJ-TESTER v2

Well¨Cknown limitations:
- When threads are created with ntdll_12.RtlUserThreadStart (77C201C4)
jump logs are not logged anymore! Doesn't support multiple threads!

What's new in 2.0 version:
- Now a new dialog is shown when Config.txt is not present,
with that dialog you can write configuration information - configure the program:
- "Target exe" - file for which to log jumps
- 2 radio buttons: RVA (Relative Virtual Address) or VA (Virtual address)
are the type of first breakpoint address
- Skip System - skip logging jumps from system files
- EP button: get entry point from "Target exe" and set address with it
- Fixed Windows 7 compatibility

Read Readme.txt

abhi93696 03-23-2017 16:41

Hi

I have a old video regarding tracing the differences b/w 2 programs using only debugger, Excel,Text compare soft which i had posted it in the tutorials section-:

http://forum.exetools.com/showthread.php?t=18178

BR

CodeCracker 07-02-2022 20:32

Fixed a bug!
 
1 Attachment(s)
Changes: fixed so will work on any x86 system no only Windows XP.
Should work now on any x86 system (32 bits system).
Trap flag seems to fail on 64 bits systems for some reasons.

At first erase Config.txt so it will show program setups when CJ-TESTER.exe started.
Config.txt included just for example.

CodeCracker 07-07-2022 18:28

Another bug fix
 
1 Attachment(s)
Another fix, hopefully the last one,
invoke ContinueDebugEvent, DebugEvent.dwProcessId,DebugEvent.dwThreadId,DBG_EXCEPTION_NOT_HANDLED ; was DBG_CONTINUE ;


All times are GMT +8. The time now is 14:25.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX