EXETOOLS FORUM  

Go Back   EXETOOLS FORUM > General > Community Tools

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 06-20-2016, 04:14
CodeCracker CodeCracker is offline
Family
 
Join Date: Jun 2011
Posts: 78
Rept. Given: 12
Rept. Rcvd 179 Times in 34 Posts
Thanks Given: 3
Thanks Rcvd at 205 Times in 42 Posts
CodeCracker Reputation: 100-199 CodeCracker Reputation: 100-199
CJ-TESTER

CJ-TESTER: (source code MASM included)
How TO USE THIS TOOLS ?
a.) Set a VA from where to start in Config.txt (you can discover the address with IDA or some other tools)
You can even start testing from Entry Point if you wish to log all conditional jumps.
b.) Load the wanted executable and wait for this tool to make the entire dirty job.

The ideea is to run CJ-TESTER an log all jumps with the unexpired program and
then with expired program and compare the log results and see where is different!
Unconventional method (I know) but sometime may do the job!
Attached Files
File Type: zip CJ-TESTER.zip‎ (13.2 KB, 43 views)
Reply With Quote
The Following 2 Users Gave Reputation+1 to CodeCracker For This Useful Post:
MarcElBichon (06-20-2016), Storm Shadow (06-24-2016)
The Following 10 Users Say Thank You to CodeCracker For This Useful Post:
besoeso (06-22-2016), canopus (06-22-2016), Masoud (06-21-2016), Nacho_dj (06-22-2016), niculaita (06-20-2016), serseri_1453 (03-22-2017), TechLord (06-24-2016), uel888 (06-23-2016), wilson bibe (06-20-2016), ZeNiX (06-21-2016)
  #2  
Old 06-21-2016, 18:46
Masoud Masoud is offline
Friend
 
Join Date: Dec 2014
Location: Underground
Posts: 16
Rept. Given: 2
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 7
Thanks Rcvd at 1 Time in 1 Post
Masoud Reputation: 0
Nice idea and makes someone able to crack an app in shortest time, even without Reversing info.
I had the same idea years ago, but never tried to write a program like this.
May I ask you to upload it somewhere else that I could access please?
Reply With Quote
  #3  
Old 06-22-2016, 05:24
CodeCracker CodeCracker is offline
Family
 
Join Date: Jun 2011
Posts: 78
Rept. Given: 12
Rept. Rcvd 179 Times in 34 Posts
Thanks Given: 3
Thanks Rcvd at 205 Times in 42 Posts
CodeCracker Reputation: 100-199 CodeCracker Reputation: 100-199
Here is a download link:
http://www5.zippyshare.com/v/KH9fTLnm/file.html
Reply With Quote
The Following 3 Users Say Thank You to CodeCracker For This Useful Post:
Masoud (06-23-2016), user_hidden (06-22-2016)
  #4  
Old 06-22-2016, 15:30
Loki Loki is offline
Lo*eXeTools*rd
 
Join Date: Jan 2009
Posts: 116
Rept. Given: 144
Rept. Rcvd 65 Times in 30 Posts
Thanks Given: 41
Thanks Rcvd at 6 Times in 5 Posts
Loki Reputation: 65
There was an Olly plugin that did something similar on v1.10.... OllySnake or something? I'm sure someone else can remember better than me....
Reply With Quote
  #5  
Old 06-22-2016, 16:28
DARKER DARKER is offline
VIP
 
Join Date: Jul 2004
Location: C么te d'Ivoire
Posts: 203
Rept. Given: 22
Rept. Rcvd 88 Times in 33 Posts
Thanks Given: 1
Thanks Rcvd at 17 Times in 6 Posts
DARKER Reputation: 88
It's something like Olly Conditional Branch Logger plugin:
Code:
http://www.woodmann.com/collaborative/tools/index.php/Conditional_Branch_Logger
Reply With Quote
The Following 2 Users Say Thank You to DARKER For This Useful Post:
Masoud (06-23-2016), TechLord (06-24-2016)
  #6  
Old 06-22-2016, 21:05
Loki Loki is offline
Lo*eXeTools*rd
 
Join Date: Jan 2009
Posts: 116
Rept. Given: 144
Rept. Rcvd 65 Times in 30 Posts
Thanks Given: 41
Thanks Rcvd at 6 Times in 5 Posts
Loki Reputation: 65
Yeah, that one too, although I seem to recall something called OllySnake which actually diff'd 2 runs for you aswell.

Could well have been dreaming.
Or high.
Reply With Quote
  #7  
Old 06-24-2016, 09:50
TechLord TechLord is offline
VIP
 
Join Date: Mar 2005
Location: PlanetTech
Posts: 411
Rept. Given: 363
Rept. Rcvd 173 Times in 74 Posts
Thanks Given: 457
Thanks Rcvd at 818 Times in 203 Posts
TechLord Reputation: 100-199 TechLord Reputation: 100-199
First of all a BIG thank you to @CodeCracker for this tool.

This reminds me of a post in 2005 regarding almost exactly the same method, that was posted by someone named Benina in one of these forums.

Please do not share or upload on public servers.

Though the content is not mine, I had created the PDF and archived it in my records from 2005, after all !

So I want it to remain only within this forum please. Thank you
Attached Files
File Type: pdf USINGLOGWINDOW.pdf‎ (131.6 KB, 42 views)

Last edited by TechLord; 06-26-2016 at 10:17. Reason: Attached File locally
Reply With Quote
  #8  
Old 06-25-2016, 05:54
Kurapica's Avatar
Kurapica Kurapica is offline
VIP
 
Join Date: Jun 2009
Location: Archives
Posts: 85
Rept. Given: 10
Rept. Rcvd 109 Times in 28 Posts
Thanks Given: 11
Thanks Rcvd at 50 Times in 15 Posts
Kurapica Reputation: 100-199 Kurapica Reputation: 100-199
Is there any plan for the 64 bit apps ?
Reply With Quote
  #9  
Old 06-25-2016, 11:53
niculaita's Avatar
niculaita niculaita is offline
Family
 
Join Date: Jun 2011
Location: here
Posts: 730
Rept. Given: 750
Rept. Rcvd 81 Times in 53 Posts
Thanks Given: 1,072
Thanks Rcvd at 79 Times in 59 Posts
niculaita Reputation: 81
link to pdf deleted file/dead
Reply With Quote
  #10  
Old 06-25-2016, 17:59
Masoud Masoud is offline
Friend
 
Join Date: Dec 2014
Location: Underground
Posts: 16
Rept. Given: 2
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 7
Thanks Rcvd at 1 Time in 1 Post
Masoud Reputation: 0
Quote:
Originally Posted by niculaita View Post
link to pdf deleted file/dead
File attached .
Attached Files
File Type: pdf USINGLOGWINDOW.pdf‎ (131.6 KB, 14 views)
Reply With Quote
  #11  
Old 06-26-2016, 00:27
squareD's Avatar
squareD squareD is offline
VIP
 
Join Date: Aug 2005
Location: Banana Republic
Posts: 204
Rept. Given: 30
Rept. Rcvd 25 Times in 19 Posts
Thanks Given: 6
Thanks Rcvd at 9 Times in 7 Posts
squareD Reputation: 25
Just saw this little prog few minutes ago...
Next time working with 30 day trial, I will test it, but will changing some jumps solve the problem?
May be, I will report when test has done.
But first I almost work for key, activation code or something like that, it's the best solution
__________________
SHA-256 : F328949CD27157042116B719A43F89856D7EFF2F18A104AC3351477AE37C0782
Reply With Quote
  #12  
Old 03-22-2017, 01:09
CodeCracker CodeCracker is offline
Family
 
Join Date: Jun 2011
Posts: 78
Rept. Given: 12
Rept. Rcvd 179 Times in 34 Posts
Thanks Given: 3
Thanks Rcvd at 205 Times in 42 Posts
CodeCracker Reputation: 100-199 CodeCracker Reputation: 100-199
CJ-TESTER v2

Well–known limitations:
- When threads are created with ntdll_12.RtlUserThreadStart (77C201C4)
jump logs are not logged anymore! Doesn't support multiple threads!

What's new in 2.0 version:
- Now a new dialog is shown when Config.txt is not present,
with that dialog you can write configuration information - configure the program:
- "Target exe" - file for which to log jumps
- 2 radio buttons: RVA (Relative Virtual Address) or VA (Virtual address)
are the type of first breakpoint address
- Skip System - skip logging jumps from system files
- EP button: get entry point from "Target exe" and set address with it
- Fixed Windows 7 compatibility

Read Readme.txt
Attached Files
File Type: zip CJ-TESTER_v2.zip‎ (41.7 KB, 17 views)
Reply With Quote
The Following 3 Users Gave Reputation+1 to CodeCracker For This Useful Post:
alephz (03-22-2017), MarcElBichon (03-22-2017), niculaita (03-22-2017)
The Following 5 Users Say Thank You to CodeCracker For This Useful Post:
abhi93696 (03-23-2017), new_profile (03-22-2017), niculaita (03-22-2017), serseri_1453 (03-22-2017), wilson bibe (03-22-2017)
  #13  
Old 03-23-2017, 16:41
abhi93696 abhi93696 is offline
Friend
 
Join Date: Mar 2017
Location: India
Posts: 27
Rept. Given: 0
Rept. Rcvd 2 Times in 1 Post
Thanks Given: 59
Thanks Rcvd at 33 Times in 15 Posts
abhi93696 Reputation: 2
Hi

I have a old video regarding tracing the differences b/w 2 programs using only debugger, Excel,Text compare soft which i had posted it in the tutorials section-:

http://forum.exetools.com/showthread.php?t=18178

BR
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Export Table Tester Nacho_dj Community Tools 3 08-13-2016 07:02


All times are GMT +8. The time now is 09:28.


苏ICP备05004977号
vBulletin Security provided by vBSecurity v2.2.0 (Lite) - vBulletin Mods & Addons Copyright © 2017 DragonByte Technologies Ltd.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX