+- الفريق العربي للهندسة العكسية (https://www.at4re.net/f)
+-- قسم : منتديات الهندسة العكسية - Reverse Engineering Forums (https://www.at4re.net/f/forum-4.html)
+--- قسم : البرامج و أدوات الهندسة العكسية - RCE Tools (https://www.at4re.net/f/forum-29.html)
+--- الموضوع : FIXIT (the new Proxy/Hijacked DLL Generator) (/thread-3655.html)
RE: FIXIT (the new Proxy/Hijacked DLL Generator) - ROZBUD - 09-09-2023
Gents All
Dears SAMORAY & MOUNIRSOLTAN
Thank you for your encouragement
Notes
FIXIT was getting the DATE from a Server, this made it slow at startup, however this function is removed now. I believe the Performance is the same in Win10 & Win11
shfolder.dll proxy library will be added soon...
Patching Registers may be added in future releases, however, keep in mind that this will be a duplicated feature (in my opinion) i.e. changing EAX for example from 0 to 1 is something we can do it in the current release (Address/RVA : B001)
Always use RVA with protected/crypted/packed files.
I'm currently working on a new feature, that can dynamically detect a list of "Nominated Proxy Dll's. This will give you the option to see which Dll your EXE is using... and it will make this EXE feel Happy to get Injected Code with a Smile! (I couldn't find this feature in Baymax)
Dears SAMORAY & MOUNIRSOLTAN
Thank you for your encouragement
Notes
FIXIT was getting the DATE from a Server, this made it slow at startup, however this function is removed now. I believe the Performance is the same in Win10 & Win11
shfolder.dll proxy library will be added soon...
Patching Registers may be added in future releases, however, keep in mind that this will be a duplicated feature (in my opinion) i.e. changing EAX for example from 0 to 1 is something we can do it in the current release (Address/RVA : B001)
Always use RVA with protected/crypted/packed files.
I'm currently working on a new feature, that can dynamically detect a list of "Nominated Proxy Dll's. This will give you the option to see which Dll your EXE is using... and it will make this EXE feel Happy to get Injected Code with a Smile! (I couldn't find this feature in Baymax)
RE: FIXIT (the new Proxy/Hijacked DLL Generator) - DarkDeath - 10-09-2023
Thanks Pro
nice jop
I hope to support win 10 & 11
RE: FIXIT (the new Proxy/Hijacked DLL Generator) - ROZBUD - 10-09-2023
(10-09-2023, 08:58 PM)DarkDeath كتب : I hope to support win 10 & 11
It supports both Win10 & Win11 with same Performance
FIXIT New Update
As requested, shfolder.dll proxy library is added to FIXIT
More Code Improvement
https://www.mediafire.com/file/ikrgawr8a55fstz/FixIt.rar/file
Note
This will be the last Pre-Release before moving to Version 1.00
As requested, shfolder.dll proxy library is added to FIXIT
More Code Improvement
https://www.mediafire.com/file/ikrgawr8a55fstz/FixIt.rar/file
Note
This will be the last Pre-Release before moving to Version 1.00
(09-09-2023, 12:50 AM)mounirsoltan كتب : could you add the shfolder dll proxy library to your tool?
As requested, shfolder.dll proxy library is added to FIXIT
Check the New Update in the last page
Check the New Update in the last page
RE: FIXIT (the new Proxy/Hijacked DLL Generator) - DarkDeath - 11-09-2023
In win 7 x64 OKKKK
In Win 10 x64
Compile Error!
D3d9.dll Wasn't Created.
Please Check and Try Again
RE: FIXIT (the new Proxy/Hijacked DLL Generator) - ROZBUD - 11-09-2023
(11-09-2023, 08:09 AM)DarkDeath كتب : Please Check and Try Again
Kindly share the software with patched info
RE: FIXIT (the new Proxy/Hijacked DLL Generator) - DarkDeath - 11-09-2023
إقتباس :وضع بواسطة ROZBUD - منذ 3 ساعات
Kindly share the software with patched info
Thanks
Problem my win 10
I used win 11 OKK
RE: FIXIT (the new Proxy/Hijacked DLL Generator) - mounirsoltan - 11-09-2023
thank you ROZBUD i'll check that later after this replay
notes:
don't forget to include the usual features in your version 1 we got used to them like:
???? pattern search and replace using
and the ability of targeting all the exe files in the same folder
and the ability of targeting all the exe files in the same folder
RE: FIXIT (the new Proxy/Hijacked DLL Generator) - prince12 - 11-09-2023
i havnt found password
i have many .dll protected how i can patchd or add in one file verison.dll
RE: FIXIT (the new Proxy/Hijacked DLL Generator) - mounirsoltan - 11-09-2023
There are some additional issues that require attention. The fixit tool fails to generate the proxy DLL when it is located in a drive other than C. This leads to an error message. Moreover, the current state of the tool does not allow for injection into protected applications. To address this, it is recommended to enhance the DLL proxy by utilizing a hook library.
another improvements you could make : the patch could be with spaces as well no need to remove spaces each time
RE: FIXIT (the new Proxy/Hijacked DLL Generator) - ROZBUD - 11-09-2023
(11-09-2023, 02:02 PM)DarkDeath كتب : I used win 11 OKK
Win11 is Technically similar to Win10
As it worked on Win11 then it shall work on Win10
Send me the link to this software with 'FIXIT file' that includes the patched data & then after I will help you
Note that I created this program in Win10 Environment
As it worked on Win11 then it shall work on Win10
Send me the link to this software with 'FIXIT file' that includes the patched data & then after I will help you
Note that I created this program in Win10 Environment
(11-09-2023, 04:31 PM)mounirsoltan كتب : another improvements you could make : the patch could be with spaces as well no need to remove spaces each time
I'm afraid I will not have the time add these extra features as I need to develop another commercial program that may help people more than Fixit
(11-09-2023, 03:20 PM)prince12 كتب : i havnt found password
Read the first page
(11-09-2023, 04:31 PM)mounirsoltan كتب : There are some additional issues that require attention
Please note the following
Fixit works well portable from any location C, D, or any other drive, however you need to check that your target folder is not protected
The first tutorial I made (EDF) was about protected program. I'm not sure if FIXIT can work with all protections
FIXIT works well with long paths contains SPACES
I advise everyone here to check the following options before submitting their reviews
Address Or RVA (always select RVA when working with protected files)
Patched bytes
The CORRECT name of DLL needs to be used... for this you need to read the instructions in FIXIT itself
Try all the 3 listed Methods
I will post an Advanced Tutorial very soon
Fixit works well portable from any location C, D, or any other drive, however you need to check that your target folder is not protected
The first tutorial I made (EDF) was about protected program. I'm not sure if FIXIT can work with all protections
FIXIT works well with long paths contains SPACES
I advise everyone here to check the following options before submitting their reviews
Address Or RVA (always select RVA when working with protected files)
Patched bytes
The CORRECT name of DLL needs to be used... for this you need to read the instructions in FIXIT itself
Try all the 3 listed Methods
I will post an Advanced Tutorial very soon