Software Tools: Difference between revisions
Polymorphic7 (talk | contribs) mNo edit summary |
Polymorphic7 (talk | contribs) No edit summary |
||
| Line 22: | Line 22: | ||
*[https://github.com/craigz28/firmwalker Firmwalker] - is a script for searching the extracted firmware file system for goodies! | *[https://github.com/craigz28/firmwalker Firmwalker] - is a script for searching the extracted firmware file system for goodies! | ||
====Setup or Overlay Unpackers / Extractors ==== | ====Setup or Overlay Unpackers / Extractors==== | ||
* [https:// | *[https://innounp.sourceforge.net/ innounp] - the Inno Setup Unpacker. | ||
* [https://github.com/ | *[https://github.com/Bioruebe/UniExtract2 Universal Extractor 2 (UniExtract2)] - is a tool designed to extract files from any type of extractable file. | ||
* [https://github.com/crackinglandia/fuu FUU] - [F]aster [U]niversal [U]npacker. | *[https://github.com/activescott/lessmsi lessmsi] - a tool to view and extract the contents of an Windows Installer (.msi) file. | ||
*[https://github.com/crackinglandia/fuu FUU] - [F]aster [U]niversal [U]npacker. | |||
====Binary PE Analysis / Editor (Windows)==== | ====Binary PE Analysis / Editor (Windows)==== | ||
*[https://web.archive.org/web/20210331144912/https://protectionid.net/ ProtectionID] - Great little tool to scan a Windows binary payload for overlays and packers. [[File:ProtectionId.690.December.2017.zip|thumb|PiD.690.zip]] [https://www.virustotal.com/gui/file/26c54eb376183d508ee129531728f9e01d30f0df29d7621f390e8f0ea6a1c79c/community VT link], pw: recessim.com | *[https://web.archive.org/web/20210331144912/https://protectionid.net/ ProtectionID] - Great little tool to scan a Windows binary payload for overlays and packers. [[File:ProtectionId.690.December.2017.zip|thumb|PiD.690.zip]] [https://www.virustotal.com/gui/file/26c54eb376183d508ee129531728f9e01d30f0df29d7621f390e8f0ea6a1c79c/community VT link], pw: recessim.com | ||
*[https://web.archive.org/web/20220331063153/http://www.rdgsoft.net/ RDG Packer Detector] - is a detector for packers, cryptors, compilers, installers. | *[https://web.archive.org/web/20220331063153/http://www.rdgsoft.net/ RDG Packer Detector] - is a detector for packers, cryptors, compilers, installers. | ||
| Line 87: | Line 88: | ||
*[https://www.telerik.com/products/decompiler.aspx Telerik JustDecompile] - is a free .NET decompiler and assembly browser that makes high-quality .NET decompilation easy With an open source decompilation engine. | *[https://www.telerik.com/products/decompiler.aspx Telerik JustDecompile] - is a free .NET decompiler and assembly browser that makes high-quality .NET decompilation easy With an open source decompilation engine. | ||
*[http://www.reteam.org/board/showthread.php?t=939 dotNET Tracker 2.0 by Kurapika] - is a simple tool that has a similar functionality to RegMon or FileMon but it's designed to trace events in .NET assemblies in runtime. | *[http://www.reteam.org/board/showthread.php?t=939 dotNET Tracker 2.0 by Kurapika] - is a simple tool that has a similar functionality to RegMon or FileMon but it's designed to trace events in .NET assemblies in runtime. [[File:KDT2.0.zip|thumb]] [https://www.virustotal.com/gui/file/d29afcc5115c28f9892f7a6d249423374ad77ac86f69b316665c347982975d02 VT1] [https://www.virustotal.com/gui/file/04cd51dbbc3d2b4fe4a721e4ad0c2f3012fe0f409dc902b430207ea25561ff8c VT2] (thermida packed), pw: recessim.com | ||
=====JAVA===== | =====JAVA===== | ||