Software Listing of Author : "Didier Stevens"

The Binary Tools package contains 2 simple binary tools:

- reverse: takes the input file, reverses it (first byte becomes last byte, ) and writes it to a new file

- middle: extracts a sequence of bytes from the input file and writes it to a new file

  • Platform: WinOther

The CASToggle application was designed to be a program to manipulate Code Access Security enforcement for an individual program, unlike caspol, which works system-wide. And its effect is immediate.

Usage: CASToggle process-id [toggle]
Use this program to read or change the SecurityState variable
of a .NET program (enables/disables Code Access Security Policies)
process-id is the ID of the running program you want to manipulate
toggle must be 0, 1 or 2 to change the SecurityState variable
0 means that the SecurityState variable is uninitialized and that the
state must be derived from the state of the mutex created by
caspol -security off
1 means that CAS Policies are disabled
2 means that CAS Policies are enabled

  • Platform: WinOther
  • Disitool
  • License: Freeware
  • Price: 0.00

Disitool was developed to be a small Python program to manipulate embedded digital signatures.

Here are some key features of "Disitool":
* delete a signature: disitool.py delete signed-file unsigned-file
* copy a signature: disitool.py copy signed-source-file unsigned-file signed-file
* extract a signature: disitool.py extract signed-file signature
* add a signature: disitool.py add signature unsigned-file signed-file
* inject data after the authenticode signature: disitool.py inject [--paddata] signed-source-file data-file signed-destination-file

  • Platform: WinOther

The OllyStepNSearch plugin will allow you to search for a given text when automatically stepping through the debugged program.

When the plugin is enabled, it will step automatically through the debugged program once a step command (like Step Into) is issued. Enabling the plugin is done with the "Optionsd-deDt menu command.

After each step, the plugin will check which registers have changed. If a changed register points to an ASCII string, it is logged. If a search string has been defined and it is contained in the ASCII string pointed to by the register or the Information pane, the stepping is paused. Comparison is case sensitive.

A search string is defined by entering it with the "Optionsd-deDt menu command. It is remembered in the OllyDbg INI file. Entering an empty string disables the break on string...

  • Platform: WinOther
  • Runasil
  • License: Freeware
  • Price: 0.00

The following command launches notepad.exe with a low integrity level, instructing notepad to open test.txt:

runasil.exe notepad.exe test.txt

To automatically launch notepad via runasil.exe, using "Image File Execution Optionsd-deDt, create this registry key HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsnotepad.exe and create a value debugger equal to "runasil.exe -dd-deDt (don't forget option -d).

You can also specify the integrity level via an option:

-l for low
-m for medium
-h for high
-s for system

By default, runasil launches the application with a low integrity level.

Don't forget you need at least Windows Vista to use integrity levels, and that a process can't create a new process with a higher integrity...

  • Platform: Windows 7, WinVista

For example, to start a cmd.exe on each USB drive you insert, you start USBVirusScan like this:

USBVirusScan cmd /k %d:

%d (or %c for legacy reasons) is a placeholder for the drive-letter of the inserted USB drive.

USBVirusScan uses a system tray icon and balloons to announce the insertion of a USB drive. If you want to hide this system tray icon, start USBVirusScan with option -i, like this:
USBVirusScan -i cmd /k %d:

You can also hide the command line console with option -c. This only works with Console applications, not with Windows applications. Option -e will disable the Exit command in the pop-up menu.

The -q switch will stop a running instance of USBVirusScan.

A new flag, -d, adds debugging support to USBVirusScan. When this flag is present, USBVirusScan will...

  • Platform: WinOther

The XORSearch application was designed to be a small program to search for a given string in an XOR, ROL or ROT encoded binary file. An XOR encoded binary file is a file where some (or all) bytes have been XORed with a constant value (the key).

A ROL (or ROR) encoded file has its bytes rotated by a certain number of bits (the key). A ROT encoded file has its alphabetic characters (A-Z and a-z) rotated by a certain number of positions. XOR and ROL/ROR encoding is used by malware programmers to obfuscate strings like URLs.

XORSearch will try all XOR keys (0 to 255), ROL keys (1 to 7) and ROT keys (1 to 25) when searching. I programmed XORSearch to include key 0, because this allows to search in an unencoded binary file (X XOR 0 equals X).

If the search string is found, XORSearch will print it until the 0...

  • Platform: WinOther

ZIPEncryptFTP is a program I developed to make off-site backups of important data. Like its name suggests, it ZIPs one or more directories, Encrypts the ZIP file with AES and uploads it to a FTP server.

ZIPEncryptFTP is a C# command-line program, you will need the .NET 2.0 framework runtime to run it. It will write to the Application eventlog, so you need to run it the first time with administrator privileges, to register ZIPEncryptFTP with the eventlog.

To backup data, use ZIPEncryptFTP with these parameters:

ZIPEncryptFTP /directory /password /url /ftpuser /ftppassword

Example:

ZIPEncryptFTP /directory:c:Data /password:Secret /url:ftp://ftp.com/backup /ftpuser:Didier /ftppassword:1234

This will compress the c:Data directory and its content (including subdirectories)...

  • Platform: WinOther
New Reviews

Print Inspector

Whether you are using a printer connected to your local desktop computer or a print server sometimes you need to see whats going on in your printer by having a close look at the print jobs sent by the users. Print Inspector is such type software ...


Disk Genius

Disk Genius was formerly known as Partition Guru which is an all-in-one solution for disk partition management, data recovery and disk repairing. It can recover lost files from partition, backup and restore partition table, clone partition or clone ...


Safe In Cloud

It is quite difficult to find any computer users nowadays who do not need to use the web, for any purpose. Whether it is for education or entertainment, the web is your best resource. You also need to use various online services for banking, ...


PictBear

Nowadays, a majority of PC users resort to digital image editing once in a while. It may be required for retouching image captured in smart phones or for creating an album in Facebook. For some people, tinkering with digital images is a pastime too. ...


Panda Cloud Cleaner

PC security has become a tricky and complicated subject both for home users and network supervisors, with complexity and risk factors multiplying over the years. Using a single antivirus app may not be enough anymore. That explains why many users ...


SnapCrab

Nearly every PC users need to take screenshots from time to time, whether it is for personal or professional needs. While using the basic Windows screenshot capture method is available, it is not adequate for everyone. When you want to capture ...


BitKiller

Dealing with various types of data efficiently holds the key to success in any computing task. Apart from generating new data and modifying existing files, it becomes necessary to delete existing files at times. While most users resort to using ...


New Downloads

PWMinder Desktop

PWMinder is a Password Manager
that is used to store
passwords and other sensitive
data in a secure encrypted
file. ...

Spool Queue Viewer++

Spool Queue Viewer++ is a
feature rich spool queue
viewer that windows should
have by default, we have taken
it to the ...

Pidro Challenge

The Pidro card game - a game
of daring and skill. You and
your computer partner play
against two computer
opponents.

VideoPad Masters Edition
for Mac

VideoPad Masters Edition for
Mac is a fully featured video
file editor for creating
professional quality videos in
...

DreamPlan Home Edition

DreamPlan Home Edition for
Windows is an easy to use
software. See your dream floor
plan with customized kitchens,
...

Devart ODBC Driver for
Oracle

Devart ODBC Driver for Oracle
is a high-performance
connectivity solution with
enterprise-level features for
accessing ...

Net Monitor for Employees
Professional

The Net Monitor for Employees
is employee monitoring
software that allows you to
see screens of remote
computers or show ...

Windows 10 Manager

An all-in-one utility for
windows 10 specially, it
includes over forty utilities
to optimize, tweak, clean up
and fix ...

RationalPlan Project Viewer

RationalPlan Project Viewer is
a free project planning
software viewer, the perfect
solution for anyone (from
project ...

Aml Maple

Aml Maple has a new kind of
view on keyboard layout
indicators: simple, modern,
flexible. In addition, you can
change the ...