Exetools - All Packer | Protector Source

Exetools (https://forum.exetools.com/index.php)

- Source Code (https://forum.exetools.com/forumdisplay.php?f=46)

- - All Packer | Protector Source (https://forum.exetools.com/showthread.php?t=16128)

Escargot v0.1
Language : ASM

pex-0.99
Language : ASM

RLPack Basic Edition 1.21
Language : ASM

Simple Protector
Language : Delphi

GHF Protector v1.0
Language : Delphi

Cexe Packer GUI Source
Language : C++

bambam v.0.04
Language : C++

Bl0b Protector
Language : VisualBasic

Elite Protector
Language : VisualBasic

Yoda Crypter 1.3
Language : C++

Eset Smart Seurty Scan Version 7

Elite Protector [VB6 Source Code].rar Win32/Injector.BWA
GHF Protector v1.0_src.rar Generik.HCKNKOK

All Download Link Alternativ

https://cloud.mail.ru/public/7539652c0eb0%2FAll%20Packer%20Protector%20Source%2F

agree, some of these packages contains virus but not exactly as meaning virus. For example, some injection methods are viruses from the antivirus software perspective.

any update about this Topic ?

Quote:

Originally Posted by tK! (Post 94895)

any update about this Topic ?

@tK!

I think I have 4 or 5 another packer and protector source that I will share next time.

NoobyProtect
Language : C++

wow!!!!

how did you get them?? :D

thanks

Already posted by narciszu here
http://forum.exetools.com/showpost.p...6&postcount=28

No double post please

zeuscane

Quote:

Originally Posted by Mahmoudnia (Post 95282)

NoobyProtect
Language : C++

PESunrise
Language : Delphi

Yoda's Protector is open-source:
_http://sourceforge.net/projects/yodap/files/Yoda%20Crypter/1.3/

there is a chance that we will see here the source themida or armadillo ?:)
or have source with virtual machine+license manager or nanomites ?

PE-Armor v0.46
Language : Assembler (MASM)

I have several softs and they are protected with
Molebox Virtualization Solution v4.(2321) 20.11.2009 - Teggo Software Ltd. www.molebox.com (5589) ,
Overlay : 584F4A... Nothing discovered
#???# for dump try RL!dePacker v1.5 from http://ap0x.jezgra.net

the old unpacker and scripts are too old.

Any ideas ? Thank you!

here is one https://www.youtube.com/watch?v=f-ddSMGwt58 but maybe have other too...

Have Unpacker source ? :confused:

Quote:

Originally Posted by niculaita (Post 96936)

other unpacker

Try this below
http://forum.enigmaprotector.com/viewtopic.php?f=6&t=8267

Theres a download link in the thread, I didnt test it out so I'm not sure whether it works for you or not.

MOLEBOX SOLUTION OFFERS improved virtualization and reliable protection for native and .NET applications. MoleBox is a software virtualization and protection tool that allows delivering your application as a portable stand-alone secure EXE file which runs instantly with zero installation.........
Download key generator for Molebox Virtualization Solution 4.5235

EXEProt
Language : C++

Packman
Language: C++

V2Packer
Language: Delphi

Packman
Language: C++

fasm_packer
Language: ASM + Delphi

KCrypt2
Language : C++

Kryptonite
Language : C++

masm_crypter
Language: ASM

x86obf
Language : C++

Morphine
Language : Delphi

SimplePack 1.0 (LZMA)
Language : ASM

SimplePack 1.3 (aplib)
Language : ASM

Quote:

Originally Posted by stev (Post 97382)

I tried many times and can not download it

Quote:

Originally Posted by niculaita (Post 101420)

I tried many times and can not download it

Hi friend
I can download ad attach�� here

@ mudlord

If possible upload file to public link
I don't have access for download these files

I see no harm in that.

h**ps://www.sendspace.com/file/5oev0z

DXPack
Language : C++

Molebox Virtualization Solution is open source (GPL 3.0)

https://github.com/sudachen/Molebox
https://sudachen.github.io/Molebox/

exefog! a_delphi_packer_number_1000002

I do not know if the place is right or not but do you have any android packer source code

Quote:

Originally Posted by nimaarek (Post 117008)

I do not know if the place is right or not but do you have any android packer source code

Code:

https://github.com/woxihuannisja/Bangcle

https://sourceforge.net/p/proguard/code/ci/default/tree/

Quote:

Originally Posted by nimaarek (Post 117008)

I do not know if the place is right or not but do you have any android packer source code

Code:

https://github.com/ZSShen/AppChameleon

Research on some protector source code

Recently, I have a topic on how to defeat API hook.
Some protector can work as I want. So, I gona to read these open source protectors code.

YZPACK was open source.

Quote:

Originally Posted by ReBirth (Post 122624)

YZPACK was open source.

YZPack 1.1 by UsAr
YZPack - Simple OpenSource PE Packer writen on MASM32
based on LZMA compression method (library from packman)

Quote:

Originally Posted by Mahmoudnia (Post 94241)

bambam v.0.04
Language : C++

Bl0b Protector
Language : VisualBasic

Elite Protector
Language : VisualBasic

Yoda Crypter 1.3
Language : C++

Hi all, I know this is a 20 year old thread, but I no longer have download permissions and I am trying to recover my old code. Is anyone able to share bambam source for me please. Btw, I am original author of bambam, but my old hdd has failed many years ago 😢

—
bedrock

Quote:

Originally Posted by bedrock (Post 133369)

Here it is, dude.
https://www.upload.ee/files/18221202/bambam_v.0.04.rar.html

ExeSax 0.9.1 - C++

Code:

-- WHAT IS EXESAX?

Key features:

* Small decryption code (usually 50-200 bytes)

* Random encryption algorithm and decryptor code

* Decryptor can be put in a "cave" or a new section

* Pure X86 assembly language - No WinAPI, DLL calls, etc.

* Keeps extra data at the end of the EXE

* Console and graphical interface



ExeSax is an EXE encryptor that has a very small randomly generated decryptor

code. The decryptor is so small (50-200 bytes) that it usually can be placed

in the padding (or the "cave") after the code section, which means that the

file size won't change. If the cave is too small, or absent (which always

is the case for UPX compressed files), ExeSax will create a new section and

put the decryption code there (this can be a bit buggy, see below).



-- NOTES

* If you compress your files, do that before you ExeSax them. Most

  compressors won't compress ExeSax'ed files very well. ExeSax will

  only increase the file size by at most 552 bytes (and often it won't

  change it at all)

* If your files don't work after encrypting, try compressing them with

  UPX (or another compressor) BEFORE encrypting them.



-- KNOWN ISSUES

* 64-bit EXEs are not yet supported

* Sometimes ExeSax creates broken EXEs when it has to create a new section

  (when there's no cave in the file or "Always use new section" is selected)



-- CHANGELOG



0.9.1  - 2006-09-18 -  Fixed a section alignment bug that (= less broken EXEs) Added icon to GUI exe

0.9.0  - 2006-09-17 -  Initial release

PolyEnE 0.01 - ASM
Note: This is not the original source code, I have changed some file to make the executable packed file worked with newer versions of Windows

Code:

PolyEnE - Polymorphic Encryptor for Executeables

(c) 2001 Lennart Hedlund

Tested under Win98 & Win2k.

http://hem.passagen.se/polyene



PolyEnE is able to compress and encrypt most of your programfiles while 

leaving them in an executeable state. To accomplish this, PolyEnE compress

and encrypts most parts of the program and then appends a piece of code

that runs when you start the program. This piece of code decrypts,

decompresses and fixes some other stuff in memory before it finally jump

to the original entrypoint of the program.



PolyEnE is free for both commercial and non-commercial use. I am NOT

responsible of any damage it causes in your system. It creates a backup,

don't remove this before you've tested the program in all environments you

would like to use it in.



If you see the message "An exception occured while restructurizing

resources" or if the "New section size"-progressbar increases faster than 

"This section", the program is probably already packed and the output may

be non-functional.



Settings:

        File to encrypt

        Hmm, the file to encrypt. Select it by browsing or use drag'n'drop.



        Randomization seed

        Chooses seed for the randomization algorithm. You can use a

        pseudorandom seed, or enter your own between 0 and 2^32-1.



        Compression

        Selects windowsize of compressionalgorithm. Bigger windowsize

        results in better but slower compression. Decompression should not

        be effected in other ways than a bigger possibility of cache misses.

        

        Add junkcode

        Inserts        some code in the loader that doesn't do anything. Used to

        confuse disassemblers or people tracing your program in a debugger.



        Scramble loader

        *Disabled* - To buggy, see bugs-section.

        A normal loader runs in a linear mode with the following instruction

        coming directly after the current one. A scrambled loader runs a

        few instructions and then uses a JMP-instruction to go on with

        the following instructions at a totally different place in the

        loader. Used to confuse people.



Today there are many compressors/encryptors/"protectors" (let's call them

"wrappers") available for PE-files. For most of them, there are also

unwrappers available to the public written by and for people that wishes

to examine your original file. These unwrappers must get quite much

information about the original file by examining the wrapped one. The

unwrapper then has to rely on the fact that the wrapper have them stored

in the wrapped file and that they have to be used by the wrapper's loader

for the inmemory decryption. By knowing where in the loader the data is

accessed, the unwrapper can grab them easily. Most wrappers uses a static

loader, and because of that the offsets that the unwrapper needs to know

are also static.



To aviod this, the wrapper needs a dynamic loader, that will look 

different for every encrypted file. The data that the unwrapper wants

should rather be stored as immediate operands than in structured tables.

The decryption-algorithms should be polymorphic and should use randomized

registers as source and destination parameters. 

This is harder to make a generic unwrapper for. 

This is PolyEnE.

(The early versions are not so hard to unwrap though.. To come.)



So far:

Sometime in        Started to write on a polymorphic codegenerator for fun.

February -01        My military service doesn't leave me much time for it. 



March - 01        Got an idea to use the (still not ready) codegenerator in an

                executeable-encryptor. Not much was done due to lack of time.



Summer -01        Not really interested in programming. It's summer outside.

                Wrote on it when it was raining and I had time for it.



5/7 -01                PolyEnE works with most programs under Win9x, but

                encrypted programs doesn't seem to run under Win2k..



14/7 -01        Resource-restructuring now supports named resources. Wow.



20/7 -01        Solved importtable-troubles for programs created by some

                linkers. 



03/8 -01        PolyEnE now handles BSS- and TLS-sections without 

                problems (I hope).



29/8 -01        Fixed the biggest Win2k-problem. Some programs won't run 

                under Win2k anyway.



13/9 -01        The processing of the executeable now runs in it's own thread

                fixing problems of lagging GUI.



15/9 -01        Fixed a problem with programs containing a bound import 

                directory.



10/10 -01        PolyEnE now saves the settings.

                Commandline-support. Use:

                polyene.exe <filename.exe>

                or just drop a file on polyene.exe in explorer.

                In this case PolyEnE starts the processing immedietly, using

                the current settings. When finished, it shuts down silently.

                GUI-fix: the dialogbox with the progressbars is now centered.

                Advanced from v0.01 pre-alpha to v0.01 alpha.



14/10 -01        Supports files with other section alignment than 1000h even

                under Win2k.



16/10 -01        Commandline-support now works.. Maybe I should really test the

                features that I add before releasing the program in the future.. ;)

                Minor optimizations in the (de)compression algorithm.

                A lot of testing.. Released as v0.01 alpha r2.



20/10 -01        Compression improved a bit.

                Bugfix: Some non-PE files crashed PolyEnE.



21/10 -01        A couple of bugfixes. The "Encrypt"-button now become disabled

                when a file is under progress, preventing a nasty crash.



22/10 -01        Added exceptionhandling in the resource-restructioning. This

                prevents crashes for programs that are already wrapped. It's

                not sure that the output works, though.



28/10 -01        Multilanguage support! You can create your own tranlations too,

                using Language.exe. Install your languagefile (*.plf) by dragging

                and dropping it on polyene.exe. English and Swedish included.

                Released as v0.01 beta 1.



29/10 -01        Finally found the bug that caused some programs to result in a

                0xc0000078 under Win2k.

                Improved documentation a bit.



31/10 -01         Languagefiles now uses compression.



5/11 -01        Languagefiles may be installed during runtime by dragging and 

                dropping the .plf-file in PolyEnE's mainwindow.



7/11 -01        Removes relocations if found.



8/11 -01        Fixed Win2k-related bug.



10/11 -01        Removed CMOVx-instructions for Pentium Plain compability.

                (CMOVx's were not supported until the Pentium Pro-series).

                Improved import-handling a bit for better compression. Support

                for ordinal imports are only included in the loader of needed.

                Released as v0.01 beta 2.



22/11 -01        Variable windowsize for compression.

                Disabled "Scramble loader"-checkbox.



23/11 -01        Fixed some bugs that the news in the compressionalgorithms

                caused.

                Released as v0.01! First non-beta version!



3/12 -01        Started to write on new polymorphic engine.. Will probably be

                used in v0.02..



16/12 -01        Improved compression, especially for small windowsizes..

                Released as v0.01+.



Known bugs:

                Files that are already wrapped by another wrapper will probably

                not run after PolyEnE tried to wrap it. This is a common

                problem that most wrappers have. PolyEnE is at least compatible

                with itself. ;)



                "Scramble loader" is disabled since it crashes the program most

                times. No use to fix that now since I plan to rewrite the whole

                polymorphic engine someday.



                PolyEnE always removes all overlays from the programs. Only the

                header and the sections described in the sectiontable are

                included. This is mostly a problem with setupprograms and some

                "data-to-executeable"-programs.



                Compression is not very impressive. That's because I'm 

                using my own LZ-based algorithm, called QPC ("Quite Poor

                Compression"). Maybe it'll be improved someday..