Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #16  
Old 08-20-2003, 16:42
an0nymous
 
Posts: n/a
thats normal..

armadillo pimps read allmost forums too
Reply With Quote
  #17  
Old 08-21-2003, 12:55
gorge
 
Posts: n/a
Re: My, oh my...

Quote:
Originally posted by dynio
Arc: How often do I need to write the same words? Check this out: exeshield homepage . Download the file.
You are right about vxd/sys/envelope etc. The problem is You are playing with old version of ExeShield. And forget about any SoftIce hidding tools and tricks. THEY DOESN'T WORK WITH XTREME PROTECTOR. It was some fun for me to rip the ExeShield 2.8 code.
Bad news: I wouldn't write a solution for XProtector because I know they are reading this forum. As I've written in other previous posts: I don't want to learn them.
I've finished the tutorial, but it's explaining protection scheme (MD5) in ExeShield 2.8 - not the XProtector itself. All what I can tell You about XProtector is: it's not so hard to turn it off during work. The only problem was to find the incovex ideas (not these well known). I've found three methods to skip this protector.
As I would like to help as much as I can I'm open to help You all with certain applications protected with XProtector (dump, reverse, disassemble...). Also if You're interested in some fragments of XProtector feel free to ask me.

Regards.

Please tell us what the three methods are. If you do not want to post public please PM information to me. We like to know how you crack Xprotector, I can say I cracked Xprotector and keep information to myself hahahahaha



Reply With Quote
  #18  
Old 08-21-2003, 14:21
xobor xobor is offline
Friend
 
Join Date: May 2002
Location: Slovakia
Posts: 117
Rept. Given: 6
Rept. Rcvd 4 Times in 4 Posts
Thanks Given: 2
Thanks Rcvd at 23 Times in 15 Posts
xobor Reputation: 5
it looks to me like childs play - my brother is bigger , no no no my is much much bigger than yours



if dynio wrote that he break xtreme protector he knows why (s)he wrote that, everybody can take last exeshield and look if it is protected by xtreme protector

if exeshield is xtreme protected and dynio keygened it that is a proof that (s)he breaks xtreme protector

just my 2 cents
Reply With Quote
  #19  
Old 08-21-2003, 15:32
dynio
 
Posts: n/a
Gorge: You are very strange, again. As I said before, it's cracked and the protection tutorial is ready (the last thing I'm doing is cutting it as much as I can - I don't want do make You all boring during reading - it's 12kb at the moment and I think that's ok). If I say that after reading You'll be able to keygen it Yourself without touching its code, how could I know the steps if I wouldn't crack it????. I won't publish XProtector tutorial because I know they are searching the web for their protector tutorials and tools, also I know they are reading this forum (more about a so called "Xtreme Protector Team" in my tutorial). Thanks to Xobor I know there are still few serious persons. Download this attachment and see it Your self.... Intentionaly I haven't smudged anything, You can check the addresses Yourself - what do You say then, Gorge?

Regards.
Attached Files
File Type: zip checkthisout.zip (183.8 KB, 132 views)
Reply With Quote
  #20  
Old 08-21-2003, 22:51
ArC ArC is offline
VIP
 
Join Date: Jan 2003
Location: NTOSKRNL.EXE
Posts: 172
Rept. Given: 0
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 5
Thanks Rcvd at 17 Times in 12 Posts
ArC Reputation: 1
dynio please don't be angry...
I'm just confused...

I mean:
I already protected some apps with Xtreme-Protector...
So I know that you CANNOT fool the s-ice detection
by simply loading Icedump...

But that's what I did...
And the app runs....
I have a normal version of icedump...nothing is patched...

Also I have the LATEST version of ExeShield

I have attached a screen shot of my ExeShield version...
(2.8a)

I have taken this picture while Softice AND icedump were
loaded...

When I try to run a Xprot app and S-Ice/Icedump are loaded
I get at first a blue screen and afterwards the message
that a cracker's tool was detected...
(Win98 System)

But this doesn't happen when I run exeshield...
Once Icedump is loaded exeshield runs w/0 probs...
And that's REALLY strange...

Or they used a kind of insecure lite version of Xtreme Protector...
Who knows....

[Notice: I did not attach the file because it didn't work]
Reply With Quote
  #21  
Old 08-21-2003, 22:52
gorge
 
Posts: n/a
Quote:
Originally posted by dynio
Gorge: You are very strange, again. As I said before, it's cracked and the protection tutorial is ready (the last thing I'm doing is cutting it as much as I can - I don't want do make You all boring during reading - it's 12kb at the moment and I think that's ok). If I say that after reading You'll be able to keygen it Yourself without touching its code, how could I know the steps if I wouldn't crack it????. I won't publish XProtector tutorial because I know they are searching the web for their protector tutorials and tools, also I know they are reading this forum (more about a so called "Xtreme Protector Team" in my tutorial). Thanks to Xobor I know there are still few serious persons. Download this attachment and see it Your self.... Intentionaly I haven't smudged anything, You can check the addresses Yourself - what do You say then, Gorge?

Regards.
Do not need source code to crack Dynio, it uses MD5. Can bruteforce within a couple of hours, uses registration number and users name plus added string to confuse blah blah blah
I already have keygen but don't waste my time, more interested in Xprotector and how it works internally and what techniques you used. Here to learn share your knowledge



Reply With Quote
  #22  
Old 08-22-2003, 15:25
dynio
 
Posts: n/a
First: who said I've used IceDump???. I haven't used any SoftIce extension. The system I use is WinXP.
Second: "username and string"??? You miss. It's username+bios date+computername+string+.... but i suppose You know what....(?)
Third: You have keygen for 2.8??? Show us by posting it one the forum and the I'll crack any application protected by Xtreme Protector for You (once).
If You won't post it I'll assume You're laying.

Regards.
Reply With Quote
  #23  
Old 08-22-2003, 16:36
ArC ArC is offline
VIP
 
Join Date: Jan 2003
Location: NTOSKRNL.EXE
Posts: 172
Rept. Given: 0
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 5
Thanks Rcvd at 17 Times in 12 Posts
ArC Reputation: 1
dynio: read your PMs pls
Reply With Quote
  #24  
Old 08-22-2003, 16:38
dynio
 
Posts: n/a
Ok. George, I can't hide I'm pissed...
If You're judging someone then make it clear to the end. I've showed You it's registered and properly disassembled. So, now what??? You didn't anwser this subject. Also You're talking about a keygen for 2.8- does it exist??? As I said, if You'll show us durng 2-3 days this keygen, I'll crack any application, chosen by You, which is XTreme protected. Let's call it a challenge. And please, don't write things You haven't verified. The final key, is MD5 indeed (as I've written in previous post) but how the fu*k can someone reverse "within few hours" MD5 hash with input lenght of more than 20 bytes?????? , even when the collision occurs?. George, I'm disappointed. I suppose You'll learn something about that in my tutorial. Grow up, then someday, we will take seroius discussion.

Regards.
Reply With Quote
  #25  
Old 08-22-2003, 19:08
an0nymous
 
Posts: n/a
dynio my friend, dont waste ur time with these stupid lam0rs

maximize ur skills and have phun"

and discussion about public tutor? fuck that..

rspct
Reply With Quote
  #26  
Old 08-23-2003, 03:42
gorge
 
Posts: n/a
Quote:
Originally posted by dynio
Ok. George, I can't hide I'm pissed...
If You're judging someone then make it clear to the end. I've showed You it's registered and properly disassembled. So, now what??? You didn't anwser this subject. Also You're talking about a keygen for 2.8- does it exist??? As I said, if You'll show us durng 2-3 days this keygen, I'll crack any application, chosen by You, which is XTreme protected. Let's call it a challenge. And please, don't write things You haven't verified. The final key, is MD5 indeed (as I've written in previous post) but how the fu*k can someone reverse "within few hours" MD5 hash with input lenght of more than 20 bytes?????? , even when the collision occurs?. George, I'm disappointed. I suppose You'll learn something about that in my tutorial. Grow up, then someday, we will take seroius discussion.

Regards.
I usually do not send out keygens as I am not a chief, I am here to learn and increase knowledge, but I will make exception this time. I will send keygen for v2.7b . When you download keygen you will know I tell truth Dynio. My keygen is 7K written in Masm,
file is exeshield2.7b.zip. I have hidden the last byte of key with '?' so you know it is me. You can compare my keygen with Orion to test results, they are identical.

You are still the master Dynio

Regards
Reply With Quote
  #27  
Old 08-23-2003, 05:59
Satyric0n
 
Posts: n/a
Hmm.. dynio specifically said a keygen for version 2.8, not 2.7...
Reply With Quote
  #28  
Old 08-23-2003, 06:21
Lunar_Dust
 
Posts: n/a
that is sweet, dynio. Hope I can get that good eventually.

Ya skamer is right, Arma pimps frequent this board. I wont share any more latest (easy) unpacking techniques because of that. But I have DLL/OCX unpacker 98% done for newest ARma...hahahahah take that Chad.

-Lunar

Last edited by Lunar_Dust; 08-23-2003 at 06:29.
Reply With Quote
  #29  
Old 08-23-2003, 07:20
gorge
 
Posts: n/a
Quote:
Originally posted by Satyric0n
Hmm.. dynio specifically said a keygen for version 2.8, not 2.7...
I have for 2.8a, small change from 2.7b.....I do not have for latest version 2.8b as it is completely different and no longer uses MD5
as algorithm from early test or it is hidden and I am blind

Last edited by gorge; 08-23-2003 at 09:25.
Reply With Quote
  #30  
Old 08-24-2003, 22:28
uban
 
Posts: n/a
Tutorial - wassup ?

Tutorial - wassup ?

Last edited by uban; 08-24-2003 at 22:33.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Some advices on dll memory patching please Annibal General Discussion 1 08-18-2006 00:42


All times are GMT +8. The time now is 00:52.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )