Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   The installation package for IDA Pro 9.0 beta leaked (https://forum.exetools.com/showthread.php?t=21066)

TOM_RUS 08-10-2024 21:39

More versions found:
Code:

https://out5.hex-rays.com/beta90_6ba923/idademo_90_x64win.exe
https://out5.hex-rays.com/beta90_6ba923/idademo_90_x64linux.run
https://out5.hex-rays.com/beta90_6ba923/idademo_90_armmac.app.zip
https://out5.hex-rays.com/beta90_6ba923/idademo_90_x64mac.app.zip

https://out5.hex-rays.com/beta90_6ba923/idaedu_90_x64win.exe
https://out5.hex-rays.com/beta90_6ba923/idaedu_90_x64linux.run
https://out5.hex-rays.com/beta90_6ba923/idaedu_90_armmac.app.zip
https://out5.hex-rays.com/beta90_6ba923/idaedu_90_x64mac.app.zip

https://out5.hex-rays.com/beta90_6ba923/idafree_90_x64win.exe
https://out5.hex-rays.com/beta90_6ba923/idafree_90_x64linux.run
https://out5.hex-rays.com/beta90_6ba923/idafree_90_armmac.app.zip
https://out5.hex-rays.com/beta90_6ba923/idafree_90_x64mac.app.zip

https://out5.hex-rays.com/beta90_6ba923/idaarm_90_x64win.exe
https://out5.hex-rays.com/beta90_6ba923/idaarm_90_x64linux.run
https://out5.hex-rays.com/beta90_6ba923/idaarm_90_armmac.app.zip
https://out5.hex-rays.com/beta90_6ba923/idaarm_90_x64mac.app.zip

https://out5.hex-rays.com/beta90_6ba923/idam68k_90_x64win.exe
https://out5.hex-rays.com/beta90_6ba923/idam68k_90_x64linux.run
https://out5.hex-rays.com/beta90_6ba923/idam68k_90_armmac.app.zip
https://out5.hex-rays.com/beta90_6ba923/idam68k_90_x64mac.app.zip

https://out5.hex-rays.com/beta90_6ba923/idamips_90_x64win.exe
https://out5.hex-rays.com/beta90_6ba923/idamips_90_x64linux.run
https://out5.hex-rays.com/beta90_6ba923/idamips_90_armmac.app.zip
https://out5.hex-rays.com/beta90_6ba923/idamips_90_x64mac.app.zip

https://out5.hex-rays.com/beta90_6ba923/idapc_90_x64win.exe
https://out5.hex-rays.com/beta90_6ba923/idapc_90_x64linux.run
https://out5.hex-rays.com/beta90_6ba923/idapc_90_armmac.app.zip
https://out5.hex-rays.com/beta90_6ba923/idapc_90_x64mac.app.zip

https://out5.hex-rays.com/beta90_6ba923/idappc_90_x64win.exe
https://out5.hex-rays.com/beta90_6ba923/idappc_90_x64linux.run
https://out5.hex-rays.com/beta90_6ba923/idappc_90_armmac.app.zip
https://out5.hex-rays.com/beta90_6ba923/idappc_90_x64mac.app.zip

https://out5.hex-rays.com/beta90_6ba923/idapro_90_x64win.exe
https://out5.hex-rays.com/beta90_6ba923/idapro_90_x64linux.run
https://out5.hex-rays.com/beta90_6ba923/idapro_90_armmac.app.zip
https://out5.hex-rays.com/beta90_6ba923/idapro_90_x64mac.app.zip


TOM_RUS 08-11-2024 04:45

hexvault+hv+hvui cracked
Code:

https://gofile.io/d/E1oCvH
hexvault server requires Linux to run, you can run it in WSL on Windows, in Linux VM or on dedicated Linux server.

N0P 08-12-2024 18:32

source:
[
Code:

https://x.com/gmhzxy/status/1822871063795315135
translation:

This is a common .DS_Store path leak flaw @HexRaysSA

1. Subdomain enumeration to get the second-level domain name http://out5.hex-rays.com
2. Download http://out5.hex-rays.com/.DS_Store file
3. Decrypt .DS_Store and get the relative path beta90_6ba923

blue_devil 08-12-2024 18:43

You can still download the infamous .DS_Strore file
But you cannot download files :/

blue_devil 08-12-2024 18:56

After dowloading the .DS_Store file from this url:
Code:

http://out5.hex-rays.com/.DS_Store
You can extract the path by using the python script below:
Code:

'''SCT'''
import ds_store

def extract_paths(ds_store_path):
    paths = []
    with ds_store.DSStore.open(ds_store_path, 'r') as ds:
        for record in ds:
            paths.append(record.filename)
    return paths

# Usage
ds_store_path = './Untitled.DS_Store'
extracted_paths = extract_paths(ds_store_path)
for path in extracted_paths:
    print(path)

You need 2 python packages to install in you environment
Code:

mac-alias
ds-store


niculaita 08-12-2024 23:36

https://out5.hex-rays.com/.DS_Store
Forbidden
You don't have permission to access this resource.

https://out5.hex-rays.com/beta90_6ba923

Not Found
The requested URL was not found on this server.

but works https://out7.hex-rays.com/files/idafree84_windows.exe

JMP-JECXZ 08-13-2024 01:13

some subdomains:
Code:

partners.hex-rays.com
docs.hex-rays.com
api.hex-rays.com
my.hex-rays.com
hub.hex-rays.com
assets.hex-rays.com
dist5.hex-rays.com
dist7.hex-rays.com
public-lumina.hex-rays.com
plugins.hex-rays.com
mx200.hex-rays.com
mail.hex-rays.com
lumina.hex-rays.com
mx100.hex-rays.com
forum.hex-rays.com
out5.hex-rays.com
out7.hex-rays.com


jonwil 08-13-2024 06:42

None of the links work anymore by the look of it.

niculaita 08-13-2024 22:44

Quote:

Originally Posted by jonwil (Post 131512)
None of the links work anymore by the look of it.

forum.hex-rays.com works for me

Artic 08-22-2024 20:48

damn thats crazy, thanks to all involved!

Bidasci 08-26-2024 07:40

Quote:

Originally Posted by JMP-JECXZ (Post 131509)
some subdomains:
Code:

partners.hex-rays.com
docs.hex-rays.com
api.hex-rays.com
my.hex-rays.com
hub.hex-rays.com
assets.hex-rays.com
dist5.hex-rays.com
dist7.hex-rays.com
public-lumina.hex-rays.com
plugins.hex-rays.com
mx200.hex-rays.com
mail.hex-rays.com
lumina.hex-rays.com
mx100.hex-rays.com
forum.hex-rays.com
out5.hex-rays.com
out7.hex-rays.com


Don't know what you were using to subdirectory brute but here are more:
Code:

hex-rays.com (FQDN) --> ns_record --> davina.ns.cloudflare.com (FQDN)
hex-rays.com (FQDN) --> ns_record --> garrett.ns.cloudflare.com (FQDN)
hex-rays.com (FQDN) --> node --> api.hex-rays.com (FQDN)
hex-rays.com (FQDN) --> node --> dist5.hex-rays.com (FQDN)
hex-rays.com (FQDN) --> node --> out5.hex-rays.com (FQDN)
hex-rays.com (FQDN) --> node --> mx100.hex-rays.com (FQDN)
hex-rays.com (FQDN) --> node --> mx200.hex-rays.com (FQDN)
api.hex-rays.com (FQDN) --> cname_record --> phgftqutpkutozwgtvoj.supabase.co (FQDN)
dist5.hex-rays.com (FQDN) --> cname_record --> out5.hex-rays.com (FQDN)
mx100.hex-rays.com (FQDN) --> a_record --> 91.183.32.78 (IPAddress)
mx200.hex-rays.com (FQDN) --> a_record --> 95.211.160.134 (IPAddress)
hex-rays.com (FQDN) --> mx_record --> smtp.google.com (FQDN)
hex-rays.com (FQDN) --> node --> forum.hex-rays.com (FQDN)
hex-rays.com (FQDN) --> node --> docs.hex-rays.com (FQDN)
forum.hex-rays.com (FQDN) --> a_record --> 95.211.160.134 (IPAddress)
docs.hex-rays.com (FQDN) --> a_record --> 13.227.37.107 (IPAddress)
docs.hex-rays.com (FQDN) --> a_record --> 13.227.37.69 (IPAddress)
docs.hex-rays.com (FQDN) --> a_record --> 13.227.37.102 (IPAddress)
docs.hex-rays.com (FQDN) --> a_record --> 13.227.37.94 (IPAddress)
hex-rays.com (FQDN) --> node --> out7.hex-rays.com (FQDN)
hex-rays.com (FQDN) --> node --> dist7.hex-rays.com (FQDN)
hex-rays.com (FQDN) --> node --> get.support.hex-rays.com (FQDN)
dist7.hex-rays.com (FQDN) --> cname_record --> out7.hex-rays.com (FQDN)
get.support.hex-rays.com (FQDN) --> cname_record --> get-support-hex-rays-com-49d4571b-07ee-402f-a4f5-76ce5b74ceb5.saas.atlassian.com (FQDN)
lumina.hex-rays.com (FQDN) --> a_record --> 95.211.194.33 (IPAddress)
hex-rays.com (FQDN) --> node --> mail.hex-rays.com (FQDN)
hex-rays.com (FQDN) --> a_record --> 85.17.15.247 (IPAddress)
hex-rays.com (FQDN) --> node --> assets.hex-rays.com (FQDN)
mail.hex-rays.com (FQDN) --> cname_record --> hex-rays.com (FQDN)
phgftqutpkutozwgtvoj.supabase.co (FQDN) --> a_record --> 104.18.38.10 (IPAddress)
phgftqutpkutozwgtvoj.supabase.co (FQDN) --> a_record --> 172.64.149.246 (IPAddress)
assets.hex-rays.com (FQDN) --> a_record --> 85.17.15.247 (IPAddress)
out5.hex-rays.com (FQDN) --> a_record --> 212.32.227.138 (IPAddress)
support.hex-rays.com (FQDN) --> a_record --> 172.67.202.197 (IPAddress)
support.hex-rays.com (FQDN) --> a_record --> 104.21.77.5 (IPAddress)
support.hex-rays.com (FQDN) --> aaaa_record --> 2606:4700:3031::ac43:cac5 (IPAddress)
support.hex-rays.com (FQDN) --> aaaa_record --> 2606:4700:3033::6815:4d05 (IPAddress)
get-support-hex-rays-com-49d4571b-07ee-402f-a4f5-76ce5b74ceb5.saas.atlassian.com (FQDN) --> a_record --> 108.157.142.117 (IPAddress)
get-support-hex-rays-com-49d4571b-07ee-402f-a4f5-76ce5b74ceb5.saas.atlassian.com (FQDN) --> a_record --> 108.157.142.18 (IPAddress)
get-support-hex-rays-com-49d4571b-07ee-402f-a4f5-76ce5b74ceb5.saas.atlassian.com (FQDN) --> a_record --> 108.157.142.50 (IPAddress)
get-support-hex-rays-com-49d4571b-07ee-402f-a4f5-76ce5b74ceb5.saas.atlassian.com (FQDN) --> a_record --> 108.157.142.107 (IPAddress)
hex-rays.com (FQDN) --> node --> my.hex-rays.com (FQDN)
my.hex-rays.com (FQDN) --> cname_record --> portal-web-six.vercel.app (FQDN)
hex-rays.com (FQDN) --> node --> partners.hex-rays.com (FQDN)
hex-rays.com (FQDN) --> node --> public-lumina.hex-rays.com (FQDN)
partners.hex-rays.com (FQDN) --> cname_record --> ghs.googlehosted.com (FQDN)
public-lumina.hex-rays.com (FQDN) --> a_record --> 37.48.109.121 (IPAddress)
plugins.hex-rays.com (FQDN) --> a_record --> 37.48.115.12 (IPAddress)


Shub-Nigurrath 08-26-2024 16:20

Coming back from summer break, I notice numerous discussions about IDA 9.0 leaks. Could someone be so kind as to provide a recap or a step-by-step tutorial on limitations and how to obtain, install and patch it?

thanks
Shub

bolo2002 08-26-2024 23:09

Quote:

Originally Posted by Shub-Nigurrath (Post 131624)
Coming back from summer break, I notice numerous discussions about IDA 9.0 leaks. Could someone be so kind as to provide a recap or a step-by-step tutorial on limitations and how to obtain, install and patch it?

thanks
Shub

hi,check this thread:
https://forum.exetools.com/showthread.php?t=21067&page=4

niculaita 08-26-2024 23:38

your trying to access was logged

bolo2002 08-26-2024 23:51

Quote:

Originally Posted by niculaita (Post 131627)
your trying to access was logged

what the f**k?
i just replied to Shub-Nigurrath!


All times are GMT +8. The time now is 16:33.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX