7 thg 4, 2014

PE/Files Compare Tools

Its use to compare two files and show the difference line by line as byte.

1. CmpDisasm_v0.84

2. Compare It! (Deleted)
 Unrar: compareit

3. PEDiff

4. CmpPE+

5. ITCompare

6. REPT_COMPARE

Download Here 
Unrar: D7 55 55 75 5B AD 7F 7A EA EB 5A 9A D5 DF E3 3C

Thanks to all author of tools.

Source: INTERNET

10 thg 2, 2014

RSA Collection + Some Tutorials[Update 02.2014]


Today, i was found some tools and useful tuts from exetools forum, i want to upload and share to anyone. I hope it's useful for someone.

1. RSA Collection

Link Here
Unrar: 19 6F 6F 65 40 56 F6 84 4E EA 03 A8 F2 71 1C 48 

2. RSATools v2.110 - 2004 by tE!

Link Here

3. gRn-Rsa-Donkey-v1.2.2 by gRn Team

Link Here

4. RSA Keygen tuts by happy [aka Digital Dreamer]

Link Here
Unrar: 29 EC CF 16 E1 E4 B3 00 3D 80 C5 0D 25 29 93 1D

Best Regard

quygia128

3 thg 12, 2013

CleanupExEx - OllyDbg 2.XX Plugin


Name: CleanupExEx v201.01
Date: 11.25.2013
OD Version: OllyDbg 2.XX
Author: quygia128
Home: http://cin1team.biz

=============
Desciption =
=============

* CleanupExEx is a plugin for OllyDbg 2.XX. It's a new plugin BUT it's improving with
a good idea from CleanupEx(by Gigapede and atom0s) to work on OllyDbg 2.XX,
The plugin is allows to delete OllyDbg data (*.UDD,*.BAK) into UDD directory.

Plugin isn't good but source code is OPEN(Delphi IDE), You can improve/add/modify code whenever as you like :-)

* Why was "CleanupExEx" created ?
- I'm found BUG in both plugins CleanupEx v2 and VicPlugIn2, both plugins weren't work
on OllyDbg 2.01(G,H,I).

* So i decided to create my own plugin to do that.

Thanks and Credits to:
TQN, phpbb3, BOB, Gigapede(author of CleanupEx), atom0s(developer),
of course thanks to all CiN1's members & all my friends.
+++++++++++++

=============
Features =
=============
Quote:
+ Clean DATA
. All OllyDbg Data(*.*)
. All Debug Data (*.UDD)
. All Backup Data (*.BAK)
. ++++ Future Data (*.XXX)
. Latest Used (*.UDD;*.BAK)
. Open UDD Directory
. Empty Recent Files Debug List
. About
+++++++++++++
=============
Changelogs =
=============

+ CleanupExEx v201.01
- 11.25.2013
. First release
+++++++++++++

Download Plugin + SRC

https://github.com/quygia128/CleanupExEx

BR,
quygia128

27 thg 10, 2013

[OllyDbg 2.01 Plugin] - OllyDbg2FixeR 201.04


Name: OllyDbg2FixeR 201.04
Author: quygia128
Home: http://cin1team.biz
Description:


- "OllyDbg2FixeR" is a plugin for OllyDbg201(I).
- OllyDbg2FixeR allows to Fix OllyDbg Assemble BUG when you
press Space/DoubleClick on CALL/JUMP commands.
if you had choose "Show Symbolic Addresses" in OllyDbg Options,
This BUG only decode by Name of API/Label when it's exist.
You must be checked in "Fix Assemble" Menu to Fix BUG and
Uncheck if you want to ReStore Assemble as default of ollyDbg.
You can also add new parameter by manual for OllyDbg2FixeR to
Patch OllyDbg, include (ManualPatch, Address, OldByte
NewByte, PatchLen, PatchTime)
It's easy to fix SMALL BUG of OllyDbg automatic way when
you run OllyDbg with OllyDbg2FixeR Plugin.
NOTES: Plugin work only with last version of OllyDbg201(I)

Download Here
Unrar: C2 4A D2 E4 EC EF 6D BF DA 58 08 33 A7 87 99 CC 

BR,
quygia128

10 thg 9, 2013

OD2-ExPlug 2.0.14.03 For OllyDBG 2.XX


Name: OD2-ExPlug v2.0.14.03
Date:  02.15.2015
Author: quygia128
Home: http://cin1team.biz

=========================
Features:
=========================

+ Main Menu +

- Breakpoint Manager
. Import Breakpoints
. Export Breakpoints
- Comment Manager
. Import Comments
. Export Comments
- MAP File Master
. Import Labels
. Import Comments
. Import MAP To Library
. Open Label Tabel
. Clear All Labels
. Clear All Comments
- Plugin Debug Break
. DoMyJob
. Support..
- Help..
- Option..
- About...

+ Disasm Memu +

- Data Copy
. ASNI (str) (Copy ansi string to clipboard) (Ctrl + Alt + A)
. WIDE (str) (Copy wide string to clipboard) (Ctrl + Alt + W)
. Unicode (str) (Copy Unicode string to clipboard) (Ctrl + Alt + U)
. BYTE (Copy 1 BYTE)
. WORD (Copy 2 BYTE)
. DWORD (Copy 4 Byte)
. Address (Copy selected address) (Alt + Insert)
- Breakpoint Manager
. Import Breakpoints
. Export Breakpoints
. Delete All INT3 BPs (Delete all INT3 Breakpoints)
. Delete All Hard BPs (Delete all Hardware Breakpoints)
. Delete All Mem  BPs (Delete all Memory Breakpoints)
- Tools
. Notepad
. Calculator
. TaskMgr
. HashTool
. Configuration
- Label Master
. Add New Label (Ctrl + Shift + E)
. Open Label Table (Ctrl + Shift + T/L)
. Follow In Dump (Ctrl + D)
. Search By Google (Ctrl + Shift + G)
- ASM2Clipboard (Ctrl + Shift + A)
- ASCII Hint
- ByteCounter
- Go EIP (Shortcut Only: Esc)

+ Dump Menu +

- Data Copy
. ASNI (str) (Copy ansi string to clipboard) (Ctrl + Alt + A)
. WIDE (str) (Copy wide string to clipboard) (Ctrl + Alt + W)
. Unicode (str) (Copy Unicode string to clipboard) (Ctrl + Alt + U)
. BYTE (Copy 1 BYTE)
. WORD (Copy 2 BYTE)
. DWORD (Copy 4 Byte)
. Address (Copy selected address)(Alt + Insert)
- Follow In Dump (Ctrl + D)
- Follow In Disassembler (Ctrl + Alt + D)
- Create DumpWindow (Ctrl + Alt + C)
- ReverseHex (Ctrl + Z)
- MiNiHash (Ctrl + Alt + Z)

+ Info Bar +

- Add selected count(er)

+ Register Menu +

- Hardware Breakpoint [ESP]

+ INT3Breakpoint Menu +

- Breakpoint->
. Set a few breakpoint

+ HotKey +
 1. You must PRESS and HOLD the hotkey in 0.1s for it work
. "Esc" : go EIP(current origin) (Allow on any MDIWindows)
. ","   : Copy BYTE
. "."   : Copy WORD
. "/"   : Copy DWORD
. "`"   : Copy Address
. "["   : Go to start of function (You must analysis code before use it)
. "]"   : Go to end (RET) of function
. "Shift + 4" [CPU Dump] : Set/Remove Memory Breakpoint On Access
. "Shift + 4" [CPU Disasm] : Set/Remove Memory Breakpoint On Excu
. "Shift + 5" [CPU Disasm] : Set/Remove Hardware Breakpoint On Excu
. "Gray *" : Set "Malware Analysis" breakpoint group
. "Gray /" : Set "NET" breakpoint group
. NOTE: MAYBE THE HOTKEY DO NOT WORK WITH THE MOD OLLYDBG (SND v2.2)
  (Use OllyDbg2FixeR Plugins To Fix Bug In SnD v2.2)

=========================
ChangeLogs:
=========================

+ OD2-ExPlug v201.13
- 10/29/2014
. Fixed [Bigger] Internal BUG(Crash OllyDbg in version 12)
. Fixed "Search by Google" (Allows Access if Labels is Exist)
. Fixed "API helper(BTN ?)" (Allows Access & Open API if Labels is Exist)
. Fixed dialog is appeare incorrectly if Not XPStyle.
. Edit Some Shortcut.
. Add Enter(VK_RETURN) Key on "Add New Label" & "Advance Go ExPression"
. Remove Module on "Search by Google"(Keep API Name Only)
. I'm Removing Delay On Windows 8|Above(Not Test) (Thanks to Vic4Key)
. Fix Some BUG in Breakpoint Manager(Import & Export & Delete & Detect Bps)
. Improved Auto Update (Auto restart OllyDbg & Update Plugin)

+ OD2-ExPlug v201.12
- 10/12/2014
. Add Update-Checker
. Add Plugin DebugBreak for IDA Pro 6.5 & x32_dbg
. Add Auto Insert Module Loaded Label(Thanks to LCF-AT for good idea)
. Fixed & Improve Advance Go ExPression
. Fixed Find OEP
. Fixed Plugin DebugBreak
. Improved MiNiHash To Version 0.3
. Remove EnumWindows API Patch
. Changes Left-Click On BTN "I" to "Import Label"
         Right-Click On BTN "I" to "Import Label & Comment"
. API Helper(?) Supported(*.CHM & *.HLP)
. Change OD2-ExPlug Options.

+ OD2-ExPlug v201.11
- 07/02/2014
. Upgrade Menu "Breakpoints"
. Upgrade "Go Expression"
. Fixed: Run playtime Plugin(Open Lua script on Window 7)
. Add Copy "Unicode(str)"
. Add "Memory Manager"
- Dump(Memory) To File
- Encode/Decode(Add/Sub/XoR/Shift and Rotation Bit/zlib)
- Advance Dump(E/D)
. Add Hotkey for Memory/Hardware Breakpoint(@+ HotKey)
. Add Simple HideOD2
. ++PEB -> BeingDebugged
           ++PEB -> ntGlobalFlag
           ++PEB -> ProcessHeap.HeapFlags
           ++PEB -> ProcessHeap.ForceFlags
  ++PEB -> ProcessHeap.ProcHeapFlag
          +++ Access & Modify API
           ++API -> CheckRemoteDebuggerPresent
           ++API -> BlockInput
           ++API -> OutputDebugStringA
           ++API -> FindWindowA
           ++API -> FindWindowExA
           ++API -> GetTickCount
           ++API -> KiRaiseUserExceptionDispatcher
  ++API -> Process32FirstW
  ++API -> EnumWindows
  ++API -> Module32Next

+ OD2-ExPlug v201.10a
- 04/19/2013
. Upgrade Menu "Breakpoints"
. Upgrade "Hardware Break[ESP]"
. Add "Find OEP"
. Add "Find All Strings"
. Add "BTN To Run  LUA and Python Script"
. Add "BTN To Run Online/Offline API Help"
. Add "Go Expression"
. Change Shortcut of "ByteCounter" to "Ctrl+Shift+B" ("Ctrl+Shift+C" used by OllyGraph)

+ OD2-ExPlug v201.09
- 11/03/2013
. Add "Import MAP To Library"
. Add "BTN iL"
. Right Click On "BTN iL" (Copy Victim path)
. Upgrade "Label Manager" (Add Module, Command)
. Fixed crash OllyDbg On "Open Label Table"
. Fixed internal bugs (I Know)

New Menu:
- Import MAP To Library (*.DLL, *.*)
. Import Label
. Import Comments
. Import Signatures
. Search All Label From Module
. Clear All Signature Of Module

+ OD2-ExPlug v201.08
- 10/16/2013
. Add "New Option"
. Add "Open Label Table"
. Add "Olly Hints" (Show The Hint In Status Bar)
. Add Right Click On "BTN I" (Import Label Only)
. Add "Set/Remove Memory Bps" On E In CPUDisasm (Shift + 4 or Shift + Space) (Shortcut Only)
. Add "Set/Remove Memory Bps" On RW In CPUDump (Shift + 4 or Shift + M) (Shortcut Only)
. Fixed Table Exporter (On Seclect Language)
. Fixed Follow In Dump (CPU_DUMPHIST //Add change to Dump history)
. Upgrade Menu "Breakpoint->" Engine (Set/Remove/Checked If Exist API Address In Bps List)
. Read "OD2ExPlug.ini" for more detail
. Fixed internal bugs

New Menu:
- Open Label Table
. Search All Labels (Shift + S)
. View In CPU Disasm (Shift + W)
. Set/Remove INT3 Beakpoint (Shift + 3)
. Set/Remove Hard Breakpoint (Shift + 4 or Shift + H)
. Copy Address Of Label (Alt + Insert)
. Copy File Offset (Shift + O) (Shortcut Only)

+ OD2-ExPlug v201.07
- 09/30/2013
. Add "New Option"
. Add "MAP File Master"
. Add "Plugin Debug Break"
. Add "Label Master"
. Add "Offset address" to status bar
. Fixed MiNiHash
. Fixed internal bugs


Download:

OD2-ExPlug v2.0.14.03-02.15.2015.CiN1

OR

From SnD Download

NOTES:

You can check and get new version anytime you want, it's automatically work
form version 201.13 i will be update plugin to my host when new version available.
Check it and Enjoy!

========= ========= ====
Bonus:
Plugins are working with OD2-ExPlug v201.13
========= ========= ====


OR

OllyDbg2-python Plugin[PythonScript] Homepage
Download Here Builded by Computerline[HVA]

Playtime Plugin[LuaScript] Build r57 Homepage
Download Here

OllyMSDN_Fixed_v2.1 by Mario Vilas
Download Here

BR,
quygia128