Tuts 4 You

Latest Downloads

(OllyDbg Plugins:)

OllySymbolServer 0.0
Author: suburban_user
Enable Microsoft symbol server download compatablilty in OllyDbg v1.10 (with no fussing around).
Date: 23 April 2012 - 03:43
Filesize: 453.23 kb
Total Downloads: 196

(OllyDbg Plugins:)

NameChanger 1.1
Author: Marcin 'Icewall' Noga
I recently returned to an idea of an OllyDbg plug-in which would provide functionality similar like in an IDA related with inter alia :changing name of functions or setting more readable form for global variables.
Date: 22 April 2012 - 20:09
Filesize: 221.94 kb
Total Downloads: 191

(OllyDbg Plugins:)

CPU Initialization Patch 1.0.0.1
Author: Blurcode
This is a plugin for OllyDbg 1.10, which hot-patches Olly's code to resolve the issue of OllyDbg taking 100% CPU time as soon as the debugged process is running (i.e. after having pressed F9 inside OllyDbg). If nothing else, this problem caus [more...]
Date: 22 April 2012 - 19:34
Filesize: 47.85 kb
Total Downloads: 193

(OllyDbg Engines / Modifications:)

OllyDbg - Windows 7 (Virtualized) 0.2
Author: DarkElf
Some beloved plugins for Olly stopped working when used with Windows 7, among these are OllyAdvanced and Conditional Branch Logger just to name two of them. To overcome this issue I virtualized Olly and now the plugins are working again :) You can [more...]
Date: 22 April 2012 - 19:32
Filesize: 1.74 mb
Total Downloads: 561

(OllyDbg2 Plugins:)

Advanced Labels 1.2.0.0
Author: Oleh Yuschuk, Icegood
Advanced labels with user datatypes support. Compiled in Borland C++ builder 6.0 10.166 w/o addons.
Date: 22 April 2012 - 17:50
Filesize: 307.97 kb
Total Downloads: 130

(Unpacking Tutorials:)

Enigma Protector 1.x - 3.x Vol.1 (Unpacking)
Author: Silence
Today I release - finally - the series of unpacking tutorials about manually unpacking The Enigma Protector. I will discuss all protections of Enigma which are fully detailed as possible. I have to say thanks to LCF-AT, she helped me alot with thi [more...]
Date: 22 April 2012 - 17:46
Filesize: 105.09 mb
Total Downloads: 816

(OllyDbg Plugins:)

VMSweeper 1.5 Beta 0
Author: Vam
VMSweeper helps you to decompile VM code. * VMSweeper decompiles functions, virtualized in: - Code Virtualizer (Oreans Technology) - VMProtect (VMProtect Software) * Recovers import * Finds different types of VM, including not suppor [more...]
Date: 15 April 2012 - 16:50
Filesize: 381.97 kb
Total Downloads: 2263

(OllyDbg Extra Tools & Utilities:)

Win32api and x86 Opcodes
Author: Microsoft
The Win32.hlp file for OllyDbg "Help on symbolic name" containing information on some Win32 API's. Archive includes OpCodes.hlp for a list of some x86 hex opcodes and mnemonics with descriptions.
Date: 15 April 2012 - 08:07
Filesize: 4.6 mb
Total Downloads: 673

(Inline Patching:)

Enigma Protector 2.x - 3.x (HWID + Inline Patching)
Author: Pertic@n
Video tutorials on bypassing the HWID and inline patching of Enigma Protector protected files from version 2.x to 3.x.
Date: 15 April 2012 - 07:35
Filesize: 54.02 mb
Total Downloads: 542

(Keygenning / Serial Fishing:)

Keygenning Encrypto's KeygenMe #5
Author: NewHitman
A tutorial on how to reverse a challenge from an old pal Encrypto that I have found lately and I have never reversed until now. The ultimate goal of the challenge is to code a standalone keygen and this is what I have done. The tutorial is a little b [more...]
Date: 15 April 2012 - 07:30
Filesize: b
Total Downloads: 180

(Keygenning / Serial Fishing:)

Keygenning pDriLl CrackMe #2
Author: hepL3r
Here is my tutorial for pDriLl's KeygenMe#2. It is using RSA, I hope it will be useful for you and of course this tutorial is not for complete newbies.
Date: 15 April 2012 - 07:28
Filesize: 452.9 kb
Total Downloads: 106

(OllyDbg Plugins:)

OllyMSDN 1.0
Author: Mario Vilas
This plugin will replace WIN32.HLP with online help from the MSDN website. To install: 1) Copy OllyMSDN.dll to OllyDbg's or ImmDbg's plugin directory. 2) Start the debugger. 3) If you haven't done so already, go to He [more...]
Date: 15 April 2012 - 07:25
Filesize: 6.96 mb
Total Downloads: 318

(OllyDbg Plugins:)

OllyWow64 0.1
Author: Waliedassar
Here is an OllyDbg v1.10 plugin to remove the annoying single-step break while debugging in Windows 7, Wow64.
Date: 15 April 2012 - 07:24
Filesize: 2.68 kb
Total Downloads: 164

(Process Explorers / Monitors:)

Virtual Section Dumper 2.0
Author: +NCR/CRC!
VSD (Virtual Section Dumper) is intented to be a tool to visualize and dump the memory regions of a running 32 bits or a 64 bits process in many ways. For example, you can dump the entire process and fix the PE Header, dump a given range of memory or [more...]
Date: 15 April 2012 - 07:24
Filesize: 83.27 kb
Total Downloads: 179

(Miscellaneous Tools:)

SyserExt 0.95
Author: Ferrit
SyserExt is a plugin for Syser debugger. The intention is similar to IceExt and it has mainly the following features: - Advanced hide engine - Conditional branch logger
Date: 20 March 2012 - 08:19
Filesize: 44.31 kb
Total Downloads: 153

(Virtualization / Virtual Machines:)

RISC Machine Documentation
Author: Deathway
I present this time a documentation about RISC machines. The content about this document is detailed enough to give an overview of RISC machines, how they are constructed, how they deal with virtual opcodes, and how they virtualize them.
Date: 12 March 2012 - 02:02
Filesize: 360.67 kb
Total Downloads: 349

(Reverse Code Engineering:)

Reverse Engineering Techniques - Part 1
Author: Kingstaa
The whole tutorial is about playing with a target and implementing new things into it. The tutorial is not for newbies, you must know how the tools given in this tutorial works. The entire article is based on exploring the calibre of a reverse engine [more...]
Date: 10 March 2012 - 21:21
Filesize: 2.25 mb
Total Downloads: 915

(OllyDbg Plugins:)

Oreans UnVirtualizer 1.5
Author: Deathway
This tool will help conversion VirtualOpcodes -> Assembly Instruction. Restoring the original code of your virtualized application, the basic engine was from CodeUnvirtualizer, my other tool. [Features] - Supports WinLicense/Themida/CodeVirtual [more...]
Date: 10 March 2012 - 21:16
Filesize: 301.5 kb
Total Downloads: 1232

(Keygenning / Serial Fishing:)

Keygenning pDriLl CrackMe #1
Author: hepL3r
In this tutorial I will show you how we can keygen this easy keygenme from pDriLl.
Date: 08 March 2012 - 05:06
Filesize: 171.61 kb
Total Downloads: 423

(OllyDbg Plugins:)

TLSCatch 0.2
Author: Waliedassar
This plugin simply intercepts any new module loaded into the current process address space, searches it for TLS callbacks and sets a one-shot breakpoint on every callback found. It lets the malware analyst catch any TLS callback in OllyDbg. 1) Use [more...]
Date: 08 March 2012 - 05:06
Filesize: 698.47 kb
Total Downloads: 416

(Keygenning / Serial Fishing:)

Reversing a Keygenme Challenge
Author: lfozia0
This tutorial is intended for beginners in RCE but it might contain something for more advanced ones. Those of you which are more advanced you can start from Part 2 as this tutorial is split into two parts. The target and objective for both parts [more...]
Date: 06 March 2012 - 07:38
Filesize: 16.41 mb
Total Downloads: 936

(Disassembling:)

BIOS Disassembly Ninjutsu Uncovered
Author: Darmawan Salihun
For many years, there has been a myth among computer enthusiasts and practitioners that PC BIOS (Basic Input Output System) modification is a kind of black art and only a handful of people can do it or only the motherboard vendor can carry out such a [more...]
Date: 04 March 2012 - 01:42
Filesize: 7.53 mb
Total Downloads: 636

(Obfuscation / Deobfuscation:)

Deobfuscation of Packed and Virtulazation-Obfuscated Protected Binaries
Author: Kevin Patrick Coogan
Code obfuscation techniques are increasingly being used in software for such reasons as protecting trade secret algorithms from competitors and deterring license tampering by those wishing to use the software for free. However, these techniques have [more...]
Date: 04 March 2012 - 01:40
Filesize: 623.1 kb
Total Downloads: 328

(OllyDbg Plugins:)

ImmSoftice 0.1
Author: Deroko
Who has ever used SoftICE will, and probably still finds OllyDbg and ImmunityDebugger key mapping confusing. Guess what, I'm one of them. For Olly we have Crudd[RET] modification which has SoftICE keys, and I'm using this Olly version for a [more...]
Date: 04 March 2012 - 01:37
Filesize: 32.36 kb
Total Downloads: 140

(Keygenning / Serial Fishing:)

Kao’s “Toy Project” and Algebraic Cryptanalysis
Author: Dcoder
In “Toy Project” Kao presents us with a tiny, yet perverse, piece of code to reverse. Given two 32-byte strings A and B, and the 32-bit integers x and y that were used to produce B from A with the following function: [code]void expand(u8 B[32 [more...]
Date: 04 March 2012 - 01:32
Filesize: 496.05 kb
Total Downloads: 98

(OllyDbg Plugins:)

RemoveCriticality 0.2
Author: Waliedassar
An OllyDbg plugin that allows malware analysts to safely debug processes that call the "RtlSetProcessIsCritical" function.
Date: 04 March 2012 - 01:30
Filesize: 690.28 kb
Total Downloads: 141

(OllyDbg Plugins:)

Calculator 0.1
Author: Waliedassar
Fast access to Windows Calculator from OllyDbg, just press Alt+F11. Tested with OllyDbg v1.10 on XP SP2 and Windows 7.
Date: 22 February 2012 - 08:03
Filesize: 700.57 kb
Total Downloads: 256

(OllyDbg Plugins:)

AttachTo 0.1
Author: Waliedassar
Processes with manipulated PEB.LoaderData don't show in the OllyDbg "Select process to attach" dialogue box. The plugin first checks for the integrity of the target process's _PEB_LDR_DATA structure. If a manipulated structure [more...]
Date: 22 February 2012 - 07:57
Filesize: 720.81 kb
Total Downloads: 151

(OllyDbg Plugins:)

ICanAttach 0.2
Author: Waliedassar
This plugin enables you to bypass anti-attach techniques e.g. Hooked DbgUiRemoteBreakin, DbgBreakPoint, and NtContinue functions.
Date: 22 February 2012 - 07:57
Filesize: 153.92 kb
Total Downloads: 403

(OllyDbg Plugins:)

MarkAllAsSystem 0.1
Author: Waliedassar
This tiny OllyDbg plugin marks all loaded DLLs as system. This is very useful only when tracing over system DLLs in an application with large number of loaded non-system DLLs.
Date: 22 February 2012 - 07:55
Filesize: 2.7 kb
Total Downloads: 103

(OllyDbg Plugins:)

OllyVB 0.1
Author: Waliedassar
A tiny plugin that resolves the "DllFunctionCall" function calls.
Date: 22 February 2012 - 07:54
Filesize: 3.95 kb
Total Downloads: 162

(OllyDbg Plugins:)

StrongOD 0.4.6.816
Author: 海风月影
Make your OllyDbg Strong! This plug-in provides three kinds of ways to initiate the process: 1, Normal - And the same manner as the original start, the STARTUPINFO inside unclean data 2, CreateAsUser - User with a mandate to initiate the proc [more...]
Date: 14 February 2012 - 06:12
Filesize: 289.21 kb
Total Downloads: 17137

(Unpacking Tutorials:)

PC Guard 5.07 (Unpacking)
Author: PassingThrough
A video tutorial showing a method of unpacking PC Guard 5.07 on Windows XP.
Date: 14 February 2012 - 06:05
Filesize: 5.84 mb
Total Downloads: 709

(IDA Plugins:)

VirusTotal v0.1
Author: Elias Bachaalany
A VirusTotal reporting and file submission plugin for IDA Pro. The plugin will allow you to get reports from VirusTotal based on the input file MD5 or a file of your choice. The plugin will offer to upload the file if the file was not analyzed before [more...]
Date: 14 February 2012 - 05:52
Filesize: 5.81 kb
Total Downloads: 61

(OllyDbg Plugins:)

DetachMe 0.1
Author: Waliedassar
One of the new interesting features of OllyDbg v2.0 is the "Detach" functionality, which enables you to detach debuggees from OllyDbg at anytime and let them run freely outside control of OllyDbg. Unfortunately, OllyDbg v1.10, the widely [more...]
Date: 08 February 2012 - 06:44
Filesize: 4.51 kb
Total Downloads: 202

(OllyDbg Plugins:)

Ariadne Optimizer 0.1 (OllyDbg)
Author: Group-IB
The Ariadne framework makes it possible for anyone who is involved in reverse engineering to save a time when reversing a code or creating new products. Using Ariadne, you can read and modify executable files, disassemble them, and even decompile a p [more...]
Date: 07 February 2012 - 08:47
Filesize: 57.3 kb
Total Downloads: 339

(IDA Plugins:)

Ariadne Optimizer 0.1 (IDA)
Author: Group-IB
The Ariadne framework makes it possible for anyone who is involved in reverse engineering to save a time when reversing a code or creating new products. Using Ariadne, you can read and modify executable files, disassemble them, and even decompile a p [more...]
Date: 07 February 2012 - 08:45
Filesize: 57.3 kb
Total Downloads: 159

(Immunity Plugins:)

Ariadne Optimizer 0.1 (Immunity)
Author: Group-IB
The Ariadne framework makes it possible for anyone who is involved in reverse engineering to save a time when reversing a code or creating new products. Using Ariadne, you can read and modify executable files, disassemble them, and even decompile a p [more...]
Date: 07 February 2012 - 08:34
Filesize: 57.3 kb
Total Downloads: 92

(OllyDbg Plugins:)

ODBGPluginConv 0.1b
Author: Thunder
A utility to convert our OllyDbg plugins to use them on any modified version thereof Features: -Automatic plugin conversion -Supported versions: OllyDbg, Defixed, SND, RAMODBG, diablo2oo2, Shadow, ICE, CiM. -Advanced plugin conversion -C [more...]
Date: 07 February 2012 - 08:31
Filesize: 408.85 kb
Total Downloads: 159

(Packers / Protectors:)

Armadillo - ECDSA Patching
Author: Mr. eXoDia
I had a lot of free time to spend and therefore I created a full tutorial about Armadillo ECDSA Public Parameter replacing. I will start from the beginning and put hardware breakpoints and stuff to show you the time-consuming process which reversing [more...]
Date: 04 February 2012 - 21:43
Filesize: 22.03 mb
Total Downloads: 654