|
My
ToolZ Box
Every
work needs some kinds of Tools to accomplish the Task.
A
REVerSeR is NOT different. Some tools are needed before we start
to crack programs . First of all we need a good debugger to peek
inside (assembly) of the target program
1. SoftICE
:
(A Debugger)
SoftIce is an advanced debugger for windows,designed by
Numega Software. SoftIce is a must
have tool for any cracker. B'cze, SoftIce in the
hands of a cracker is just like a Kalashnikov
with a terrorist. Click
here
to see how SoftIce is installed & used....
2. Hiew
/ Hedit
/WinHex :
(File
Editors)
Hiew
is a DOS based File-Editor.little Old..still effective..has its
own fans among crackers Hedit is Windows based.Facility
to cut and paste some part of file.Create 00 bytes..etc WinHex
is a hex editor , disk editor , memory editor ,memory scanner
....and a lot more and one of the important and must have
tool.Download WinHex from www.winhex.com
Any one is ENOUGH..(say HIEW)
3.
ProcDump / LordPE / PE
Editor : (Portable
Executable(PE) Editors)
ProcDump is used to edit the header details of a Windows
exe file [PE format]. This tool is useful when we are dealing
with unpacking a file. PICK ONE....
4. W32
Dasm :
(A Dis-ASseMbler)
Win32 Disassembler [DASM] is used to see the assembly listing of
a file with out executing it.This can only come in handy if file
is not packed i.e not encrypted..
5. API
SPY :
This program is used to see what API CALLS are used by a target
program. This program fails if the target program have any
anti-debugging tricks. Any way very useful.
6. Filemon
& Regmon :(
Great Tools from Mark
Russinovich and Bryce
Cogswell
)
Filemon:->Would
tell you what files are Created, Accessed and Updated by any
program during its Execution.
Regmon:->Tell
you what registry keys are being Created, Accessed and deleted
by a particular program on Execution.
It directly does not control target programs, but just gives you
a spying effect. www.sysinternals.com
7.
Active
Registry Monitor / Registry Crawler :(Registry
Tools)
This kinds of program can go deep into windows registry and find
registry keys. These all are registry key search programs. ARM
can COMPARE two registry back ups, and thus find out what
keys are different (added,deleted..etc) .
8.
Code
Fusion :
Code fusion is used to make crack files. This tool is not necessary
if you have some programming knowledge.
9.
Uninstall
Manager :
This tool also helps me some times to crack target program.
It keeps record of all file in our computer. This program will
show newly created files etc.
ADVANCED
TOOLS
1. IMpREC / LordPE (
Import Table ReConstructors)
When u
unpack a packed EXE,the target maynot run, B'cze the
Import table may be destroyed. So we need to Re-construct
the Import table manually in dumped (unpacked) file.These tools
helps us to do the same.
|