Tuluka is a new powerful AntiRootkit, which has the following features:
Detects hidden processes, drivers and devices
Detects IRP hooks
Identifies the substitution of certain fields in DRIVER_OBJECT structure
Checks driver signatures
PluginFix v1.01[By BoB / Team PEiD]
===================================================================
// This simple tool converts OllyDbg and ImmuntiyDebugger plugins to be used with the new ImmDbg v1.80
// It needs to change the Imports and Exports of a plugin to do this, so it will NOT work on packed plugins!
===================================================================
WinRAR 4.00 beta 6 (64bit) Patch
This is the first time , I tried to crack the 64bit program . Luckily I succeed ,lol.
Click here to download the Patch file.
Immunity Debugger 1.80
Immunity Debugger is a powerful new way to write exploits, analyze malware, and reverse engineer binary files. It builds on a solid user interface with function graphing, the industry’s first heap analysis tool built specifically for heap creation, and a large and well supported Python API for easy extensibility.
LanHelper 1.98 En Patch
This is meybe the last article that I posted before the Chinese New Year.After clean the office this afternoon ,I will have a dinner with my best friends.lol.And then Tomorrow I can back home,and have my 14 days New Year Hollyday.So nice. 😉 😉
Back to the topic ,U can download the Orginal install package here.Then download the patch file from here.
文件Hash计算工具(MD5/SHA1/SHA256/CRC32)
可以通过计算文件的hash信息与原来的数值比较看程序是否被修改,猛击此处下载程序!
本程序校验信息(之所以不同是因为我改了点东西 ):
文件名: C:\Users\obaby\Desktop\fHash.exe
文件大小: 301568 字节 (294.50 KB)
修改日期: 2011-01-27 16:42
版本: 1.5.0.0
MD5: 538f799be7147426609c4b5133784223
SHA1: 36618f226ad4f37ae12c97d195a2ab50460967e0
SHA256: b475a016ab0951d9dba71cef4b7414708d96adccf96df60259b9dbcb839703f0
CRC32: d12daab3
PE头移位工具 v1.0
猛击此处下载这个小东西,文件校验信息:
文件名: C:\Users\obaby\Desktop\PE头编辑器-Release.exe
文件大小: 1110528 字节 (1.06 MB)
修改日期: 2011-01-27 14:54
版本: 1.0.0.0
MD5: 29c70b9287508b398ea20e7aec54f534
SHA1: 24140168299ad0a3ab56aab1c433176e7bcf6470
SHA256: 61a20434a80d323ada0e90fd23f2ec809fce999b0e7907a41f319c3a5eac0c96
CRC32: 5daca903