المشاركات : 205
المواضيع : 22
الإنتساب : Aug 2019
السمعة :
11
الإعجاب المعطى : 591
الإعجاب المحصل : 461
(02-09-2023, 04:37 PM)ROZBUD كتب : share with me a link to your target packed file & note that FIXIT may not work with STRONG Crypted/Packed files
Well, the application name is "AML Pages" and here is a link to download the installer if you can try patch it using your tool it would be perfect.
http://amlpages.com/Source/amlpages_en.zip
your tool is very promissing in the RCE world, thanks again for your efforts on releasing such a tool
أعضاء أعجبوا بهذه المشاركة :
المشاركات : 163
المواضيع : 28
الإنتساب : Apr 2019
الإعجاب المعطى : 90
الإعجاب المحصل : 394
FIXIT Work, comes after you crack the program, by creating a proxy DLL that includes the patch code
AML Pages' software is protected with VMPROTECT where I'm unable to crack it'
Send me the patched bytes information, so I use FIXIT to create the Proxy DLL, or send me another easy packed sample file (i.e. packed with UPX )
أعضاء أعجبوا بهذه المشاركة :
المشاركات : 205
المواضيع : 22
الإنتساب : Aug 2019
السمعة :
11
الإعجاب المعطى : 591
الإعجاب المحصل : 461
(03-09-2023, 04:06 PM)ROZBUD كتب : AML Pages' software is protected with VMPROTECT where I'm unable to crack it'
Indeed as I said before here exactly :
https://www.at4re.net/f/thread-3655-post...l#pid18122
the software is virtualized in some parts of the code and then compressed with UPX I know it's a hard target.
ok let me check for other software and I'll give you the whole information
أعضاء أعجبوا بهذه المشاركة :
المشاركات : 163
المواضيع : 28
الإنتساب : Apr 2019
الإعجاب المعطى : 90
الإعجاب المحصل : 394
04-09-2023, 09:24 AM
(آخر تعديل لهذه المشاركة : 04-09-2023, 09:27 AM بواسطة ROZBUD.)
Gents
As promised, here is my first FIXIT Tutorial
FIXIT Tutorial #1
E@sy Dupl1cate F1nder (EDM) v7.xx (@=a, 1=i)
EDF is protected with a modified UPX (CRC/MD5/File-size check). In this tutorial I will show you how ‘FIXIT’ can help you produce a tiny Proxy DLL, which can be dropped into EDM folder to perform a complete clean patch
I divided this tutorial into 2 parts, the first one is the classic way of patching & the second with FIXIT
Patching EDM, using Inline Patching: The link below, shows you, the classic way, were we used the Inline Patching to modify EDM (protected with a ‘UPX Modified Packer)
https://www.mediafire.com/file/8wxylgoe1...t.pdf/file
Patching EDM, using FIXIT
In the first tutorial, we changed many bytes and used Inline Patching to patch EDM. Well, you don’t need to do these stuff with FIXIT. Please follow the second tutorial to know how we do this
https://www.mediafire.com/file/76ww2wz4q...t.pdf/file
EDM (Target)
https://www.mediafire.com/file/frk09qazj...M.rar/file
المشاركات : 163
المواضيع : 28
الإنتساب : Apr 2019
الإعجاب المعطى : 90
الإعجاب المحصل : 394
FIXIT (Pre-Release) has been Updated
New Updates
No More Delay at Startup
Include both RVA and Memory Address
Code Correction and UI Enhancement
Remove Un-Necessary Creation Method
Note
The next release will include DLL Detection and Much more, however, if NO Participation, this release will be the last one and it will be removed
https://www.mediafire.com/file/ikrgawr8a...t.rar/file
المشاركات : 564
المواضيع : 40
الإنتساب : Nov 2020
السمعة :
12
الإعجاب المعطى : 1052
الإعجاب المحصل : 1558
شكرا لك
الباس للملف المضغوط مطلوبه
إقتباس :FIXIT (Pre-Release) has been Updated
New Updates
https://www.mediafire.com/file/ikrgawr8a...t.rar/file
أعضاء أعجبوا بهذه المشاركة :
المشاركات : 163
المواضيع : 28
الإنتساب : Apr 2019
الإعجاب المعطى : 90
الإعجاب المحصل : 394
Password is written in the first page
المشاركات : 205
المواضيع : 22
الإنتساب : Aug 2019
السمعة :
11
الإعجاب المعطى : 591
الإعجاب المحصل : 461
(07-09-2023, 03:16 PM)ROZBUD كتب : The next release will include DLL Detection and Much more, however, if NO Participation, this release will be the last one and it will be removed
Your project is very promising, please keep up the good work
it happens some times that everyone is busy with real life but this doesnt mean that they are not interested
talking about myself, I want to try your project with so many applications but I cant find the time to do so.
Thank you for your hard work.
أعضاء أعجبوا بهذه المشاركة : ROZBUD
المشاركات : 163
المواضيع : 28
الإنتساب : Apr 2019
الإعجاب المعطى : 90
الإعجاب المحصل : 394
08-09-2023, 11:08 PM
(آخر تعديل لهذه المشاركة : 08-09-2023, 11:11 PM بواسطة ROZBUD.)
FIXIT Tutorial #2
o1o Edit0r (Latest Version 14.0)
We all know this famous program, which help us edit almost every file on earth…
Today, I will show you how to use FIXIT to create a Tiny Proxy DLL that you can drop it in its folder to perform a Clean Complete Patch
This tutorial is not intended to show you how to Patch it, but to show you how FIXIT will be an alternative to all the swords, Knives & Guns, you usually use when you patch a program
Watch this Video
https://www.mediafire.com/file/goviamhqe...l.mp4/file
Target
https://www.mediafire.com/file/nvmrp031n...r.rar/file
المشاركات : 104
المواضيع : 17
الإنتساب : Nov 2020
السمعة :
2
الإعجاب المعطى : 120
الإعجاب المحصل : 179
Thank you for the helpful tutorial, ROZBUD. It's now clear to everyone how to patch simple bytes. I believe it's more stable in Windows 11, which is a great improvement for its users. Your project has a lot of potential, as my friend Samoray mentioned earlier. However, when dealing with hard protection, there are two things that I couldn't find in Baymax or didn't work as expected. If it's possible, could you add the shfolder dll proxy library to your tool? Additionally, it would be amazing if there was an ability to patch registers in runtime based on hardware breakpoints and RVA. hope I'm not asking for anything complex, just these two features would be greatly appreciated.
|