Tools Zone

[kolorado]

Da malo osvjezimo ex-yu sekciju sa novim thread-ovima...

Za pocetak evo jedan koristan alat IDA Pro Disassembler



IDA Pro is a Windows or Linux or Mac OS X hosted multi-processor disassembler and debugger that offers so many features it is hard to describe them all. Just grab an evaluation version if you want a test drive. An executive summary is provided for the non-technical user.

Contains:
Hex-Rays.IDA.Pro.Advanced.v6.1.Windows.incl. Hex-Rays.x86.Decompiler.v1.5.READ.NFO-RDW
Hex-Rays.IDA.Pro.Advanced.SDK.v6.1-RDW
Hex-Rays.IDA.Pro.Advanced.FLAIR.v6.1-RDW
Hex-Rays.IDA.Pro.Advanced.IDS.Utilities.v6.1-RDW
Hex-Rays.IDA.Pro.Advanced.LOADINT.v6.1-RDW
Hex-Rays.IDA.Pro.Advanced.TILIB.v6.1-RDW
Hex-Rays.IDA.Pro.Advanced.v6.1.TVision.v2009 b.Source-RDW

Download:

http://www.filesonic.com/file/1434802001

[kolorado]

DeDe.3.50

DeDe is a very fast application that allows you to analyze executables compiled with Delphi 2,3,4,5,6 Builder,Kylix and Kol and gives you the following:

Here are some key features of "DeDe":

· All .dfm files of the target. You will be able to open and edit them with Delphi.
· All published methods in well commented ASM code with references to strings, imported function calls, classes methods calls, components in the unit, Try-Except and Try-Finally blocks.
(By default DeDe retrieves only the published methods sources, but you may also process another procedure in a executable if you know the RVA offset using the Tools|Disassemble Proc menu.)
· A lot of additional informationon the files.
· You can create a Delphi project folder with all dfm,pas, dpr files. Note: pas files contains the mentioned above well commented ASM code. They can not be recompiled !


You can also:
· View the PE Header of all PE Files and change/edit the sections flags.
· Use the opcode-to-asm tool for translating intel opcode to assembler.
· Use RVA-to-PhysOffset tool for fast converting physical and RVA addresses.
· Use the DCU Dumper (view dcu2int.txt for more details) to retrieve near to
pascal code of your DCU files.
· Use BPL(DPL) Dumper to see BPL exports and create symbol files to use with DeDe disassembler.
· Disassemble a target EXE directly from memory in case of a packed exe

Download:
http://www.megaupload.com/?d=54VMTBKR

[kolorado]

PEiD-0.95

PEiD detects most common packers, cryptors and compilers for PE files and currently it can detect more than 470 different signatures in PE files.

PEiD is special in some aspects when compared to other identifiers already out there!

Here are some key features of "PEiD updated":

· It has a superb GUI and the interface is really intuitive and simple.
· Detection rates are amongst the best given by any other identifier.
· Special scanning modes for *advanced* detections of modified and unknown files.
· Shell integration, Command line support, Always on top and Drag'n'Drop capabilities.
· Multiple file and directory scanning with recursion.
· Task viewer and controller.
· Plugin Interface with plugins like Generic OEP Finder and Krypto ANALyzer.
· Extra scanning techniques used for even better detections.
· Heuristic Scanning options.
· New PE details, Imports, Exports and TLS viewers
· New built in quick disassembler.
· New built in hex viewer.
· External signature interface which can be updated by the user.

http://www.megaupload.com/?d=8O6CUZYR