TOOLS
|
HEX Editors |
||
| A.X.E. Version 2.1 | axe.zip (288kb) |
A.X.E.
is a Hex Editor for Windows 95/98/NT. A.X.E. offers advanced features such
as the ability to mark non-contiguous areas of a file, the ability to automatically
perform arithmetic on areas of bytes, storable lists of bookmarks, serious
Undo, and versatile search and navigation commands. The most powerful feature
of A.X.E. is the ablility it gives the user to define their own structures
and view and edit data in a spreadsheet-like way using a structure rather
than raw hex. Author: Benjamin Peterson http://www.kahei.com |
| BIEW Version 5.2.0 | WIN
version biew520.zip (211kb) DOS32
version Source
code: |
Biew
is Binary vIEWer with built-in editor for binary, hexadecimal and disassembler
modes. Features:
Author:
Nick Kurshev |
| HackMan v4.02 | hack402.zip (3.7mb) |
HackMan
is a powerful tool for debugging and editing source code. Its purpose is
to enable you to edit, modify or monitor the source code of your applications. Features:
Authors:
Fotis Fotopouos, Aristotelis Charalampakis |
| HackMan v4.04 (upgrade) | hack404u.zip (1,1mb) |
|
| HackMan v5.0 beta 4 | hack5b4.zip (4,54mb) |
|
| HexIt v1.55 | hexit155.zip (139kb) |
HexIt is a binary editor. Main features:
Author:
Mikael Klasson |
| HIEW
6.50 (Hacker's view) |
hiew650.zip (726kb) |
One
of the *best* hexeditors. Features:
Author:
Eugene Suslikov (SEN) |
| QView ver 2.69.03 | qview269.rar (158kb) |
*Very
good* hexeditor similar to HIEW. Features:
Author:
Alexandr Gazko |
| qv28005.zip (80kb) |
QView update to version 2.80.05. | |
| Hex Workshop v3.11 | hw32v31.zip (1,7mb) |
Hex
Workshop, is a set of hexadecimal development tools for 95, and NT, combining
advanced binary editing with the ease and flexibility of a word processor.
With Hex Workshop you can edit, insert, delete, cut, copy, and paste hex,
print high quality customizable hex dumps, and export to RTF or HTML for
publishing. Additionally you can goto, find, replace, compare, and calculate
checksums within a file. Producer: BreakPoint Software http://www.bpsoft.com |
| WinHex 9.72 | winhex.zip (551kb) |
Hexadecimal
File, Disk & RAM Editor. Features:
Author: Stefan
Fleischmann |
| winhex.pdf (121kb) |
WinHex manual. | |
|
Resource Browsers/Editors |
||
| Borland Resource Workshop 4.5 | brw45.zip (933kb) |
Good
old tool to view/modify resources (menus, dialogs, strings, icons, etc.) Producer: Inprise (Borland) |
| eXeScope 6.10 | exesc610.lzh (551kb) |
Very
useful resource browser/editor. Features:
Author:
Toshi |
| Resource Builder 1.0 Update pack 1 | rbsetup.zip (1,5mb) |
Powerful tool for visual building RC scripts and resource files for your applications. Features:
Producer:
SiComponents |
| Resource-Grabber v2.68c | ResGrabr.zip (1,106mb) |
Resource-Grabber
is an utility for programmers who need images, button glyphs, icons etc.
for their programs. It will analyze the .DLL,.EXE and other files on your
computer and extract all bitmaps, glyphs, icons, cursors, JPG images, AVI
video clips, WAVE and RMI sound files it finds in these files to a directory
of your choice. It also retrieves dialog forms, strings, fonts, program
menus and other embedded stuff. Producer: Inner-Smile.com http://Inner-Smile.com Support@Inner-Smile.com |
| Restorator 2.50 | restorator25.zip (1mb) |
Restorator
allows you to modify the user interface of any Windows 32-bit program and
create your own UCA's (User-styled custom application). You can view, extract
and change images, icons, text, menus, dialogs, sounds, animations, and
many more. It can be seen as a skin-editor, mod-maker or just resource editor. Author: Florian Bomers http://www.bome.com/Restorator/ |
| Symantec ResourceStudio32 1.0 | resedit.zip (1,855kb) |
This
tool is similar to Resource Workshop. Producer: Symantec |
|
File Analyzers |
||
| ChkEXE v1.17 | chkex117.rar (72kb) |
Identifies
almost any DOS EXE/COM packer, crypter or protector. Author: Hann0 Boeck http://www.xoom.com/hanno hanno@gmx.de |
| EXESCAN v3.21 | es321.zip (70kb) |
EXESCAN
is an executable file analyzer which detects the most famous EXE/COM protectors,
packers, converters and compilers.
Author:
ST!LLS0N |
| File Analyzer v1.6.01.09.2000 | fa.zip (139kb) |
File
Analyzer written for files recognition. FA recognize many file packers,
compilers, encruptors etc. Also FA can recognize many non-exectable files,
for example: archives, graphic files, music modules and much more. FA can
also list contents of archives. Supported file formats:
Author:
Vadim Tarasov |
| FileInfo v2.42 | fi.zip (134kb) |
FileInfo
is a mighty tool to analyze of any file.
Author:
M.Hering |
| File Scanner 04-01-2001 | fs.zip (156kb) |
File
Scanner is a freeware program for identifying differrent file formats. Now
it can do something more, such as unpacking or decrypting DOS executable
files, calculating sizes of directories, handle headers of executables,
playing sounds, edit binary files in hex, ascii or asm mode and displaying
ANSI pictures. Author: SMT http://smf.chat.ru/ mail4smt@yahoo.com |
| GetEQExe 3.27 | gee327.zip (24kb) |
GetEQExe
is a program to compare the startup code of COM files, DOS executables or
Windows PE executables or normal files. Very useful tool. Author: PHaX http://surf.to/phax phax@writeme.com |
| GetTyp 2.60 |
DOS version gt260.zip (170kb) |
GetTyp
is a file format detection program. It detects several formats without looking
at the filename. It searches the code for special strings and byte code
to identify the fileformat. Features:
Author:
Philip Helger |
| WIN
version gtw260.zip (179kb) |
||
| GetTyp 2000 for Windows 0.24 | gt024.zip (187kb) |
|
| GTUI v1.14 (GetTyp User Interface) | gtui114.zip (17kb) |
GTUI
is a user interface for GetTyp for Windows. Author: Philip Helger http://surf.to/phax phax@writeme.com |
| PE-Sniffer 1.06 | pesniff106.zip (136kb) |
This
tool is intended to determine if a scanned PE file is compressed/encrypted
by one of the encryptors/compressors which Pe-Sniffer is abble
to recognize. Author: SkymarShall http://start.at/skymarshall skymarshall@ifrance.com |
| ScanEXE/COM v2.00 | ucfscan2.zip (72kb) |
ScanEXE/COM
is an Executable File Scner, that checks if an EXE/COM is crypted or packed
with an EXE/COM-Crypter/Packer. This program is written for Crackers/Hackers
to find this nasty protection in no time. Author: DarK-MaN http://www.ucf2000.com |
|
Executable Info/Browsers |
||
| PEBrowse Professional 1.18.2 | PEBrowse.zip (842kb) |
PEBrowsePro
is a GUI-substitute for Microsoft's DUMPBIN and Borland's TDUMP utilities.
Information is displayed in a handy MDI interface. Information on imports,
exports, and resources is just a mouse-click away. You can disassemble any
part of an executable that follows the Portable Executable (Win32) specification,
including EXE, DLL, OCX, SYS, etc. files. You can also extract resources
in their raw format and/or as resource compiler statements. In addition,
PEBrowsePro has the ability to display ANY file of any size and perform
searching by hex-values, ANSI string, or UNICODE string values. Optional
integrated API help added. Start disassemble at a selected address. Disassembly
listings enhanced (object code display optional, jumptable references added).
Supports PEBrowsePro session creation/restore. Author: Russel Osterlund http://www.smidgeonsoft.com |
| PEBrowse Professional Interactive 1.4 | PEBrowseDbg.zip |
Author:
Russel Osterlund |
| Turbo Dump Version 4.2.16.1 | tdump.zip (85kb) |
Turbo
Dump is a command line application that display internal informations about
executable (MZ, PE, LE, NE etc...) Producer: Borland (Inprise) |
|
Executable Tools |
||
| Function Replacer Version 1.0 | ex-fr.zip (83kb) |
This
tool allows you to replace any export from a DLL with another DLL's export.
It performs an automatic loading of the DLL + getting the function's address,
then calling it. Author: DEATH ab4ds@hotmail.com |
| IID King v1.0 | iidking.zip (9kb) |
IID
King allows you to add imports to ANY PE file's import table, thereby eliminating
the need to have to do LoadLibrary then GetProcAddress and all that other
bull to get functions added. Author: SantMat http://www.ImmortalDescendants.org |
| Imagebase Changer | ex-relc.zip (104kb) |
This
tool is able to change to Imagebase of Win32 files. Author: Predator NLS |
| Imhotep v1.2.0.15 | imhotep.zip (183kb) |
You
can use this program to remove the junk from PE sections (i.e. useless jumps).
The Safedisc protection (for example) use this scheme to make reversing
harder. Author: ArthaXerXes xerxes@altern.org http://www.altern.org/xerxes/ |
| Import/Export viewer | imp-exp.zip (19kb) |
Import/Export
viewer is a util which reads the imported as well as the exported functions
of the specified file and shows them to you. Author: alpine http://www.ImmortalDescendants.org alpine@gmx.at |
| MakePE v1.30 | mkpe130.zip (27kb) |
MakePE
is a PE structure rebuilder. From a dump, made with ProcDump(TM) or with
GTR95(TM) or one you did under SoftICE (TM), it will try to rebuild the
PE header, import section (when possible) and can reoptimize your dump to
reduce it. It can load too a standard PE file and will try to reduce it. Author: G-RoM g-rom@innocent.com |
| PEBundle v1.02 | pebsetup.zip (336kb) |
PEBundle
is a revolutionary tool that allows for DLLs or other files to be bundled
with an executable, therefore removing the requirement to distribute the
bundled files separately from the application. With two operational modes,
one that uses advanced techniques to resolve dependencies on a bundled DLL
in memory without ever extracting to disk, and another that extracts bundled
files to disk at runtime, PEBundle is a great tool to optimize software
distributions. As an added benefit, bundled files may be compressed when
using the Write-To-Disk module Author: Jeremy Collake http://www.collakesoftware.com collake@charter.net |
| PEditor 1.7 | PEditor.zip (417kb) |
PE
executable file editor. Features:
Authors:
M.o.D. and yoda |
| PE Fixer v1.0 | bpef10.zip (8kb) |
This
utility is for when you are unpacking an app and you need to fix the section
data so that the PSize = VSize and Offset = RVA. Instead of having to go
through each and every section in Procdump, just fire up this util, click
on the button, select the file, and you're done. Author: Bonkers bonker_@hotmail.com |
| PE Rebuilder v0.96b | pereb095.zip (73kb) |
This
tool has been made for following aims: realign PE file, fix section sizes,
rebuild import table, restructure resource directory, fix section RAW offsets,
super-align, wipe the .reloc section. Sources included. Authors: TiTi & Virogen http://titiasm.cjb.net, titi@thedorm.com http://virogen.cjb.net, vgen@hotmail.com |
| update: perebuilder.zip (30kb) |
||
| PE Validator 1.0 - BETA | pevalid.zip (7kb) |
PE
Validator is a small tool that adjusts PE headers of EXE files that don't
run under Win2K (this file is not a valid Win32 Executable) so that they
run under Win2K. It is still a - nearly untested - BETA version, so you
better make backups of the files you patch with it ;) Author: LaZaRuS http://hello.to/lazarus lazarus_hf@hotmail.com |
| PESum v0.02 | pesum2.zip (51kb) |
PESum
will check if a PE file has a correct checksum in its header. If it does
not have, PESum will compute the checksum and update the PE file. Author: eGIS! egis@163.net |
| PEUtils v1.0 | peutils.zip (45kb) |
Utilities
for manipulating PE-format executables. You can split a PE file up into
sections or join them back into a PE file. Source included. Author: Andrew de Quincey http://www.tardis.ed.ac.uk/~adq adq@tardis.ed.ac.uk |
| PEWizard v1.10 beta | pew110.zip (72kb) |
PEWizard
is an Win32 executables' manipulating tool. It can split/join PE sections,
disassembly PE file, detect known compiler/packer/protector. Author: ST!LLS0N stills0n@writeme.com |
| Pextor 2.0 | ucfpext2.zip (72kb) |
Pextor
can be used to extract PE Objects from the address space of a running file.
It can also dump the whole EXE Header and the Main Module. In the last case,
some fields of the PE header are updated so the file keeps runable. Asm
source included. Author: Net Walker! lnwalker@hotmail.com |
| QBIND v1.00b | qbind.zip (28kb) |
Add/Remove/Extract
DOS extenders from LE images. Author: Peter Quiring http://qforce.home.ml.org sub_death@geocities.com |
| PE Realinger v0.41 | vgalgn041.zip (10kb) |
This
is a simple little utility to make PEs smaller by rebuilding them, changing
the file alignment to 200h (if it was 1000h) and removing other unnecessary
space in the PE. It works on both PE (win32) EXE and DLLs. Author: Virogen http://virogen.cjb.net vgen@hotmail.com |
| PE tinystub v1.10 | tinystub110.zip (5kb) |
This
tiny utility is for replacing the PE file's dos stub. It doesn't really
make the file smaller, but after aligning it with my wipe.reloc its size
can be slightly decreased. Author: crayzee http://crayzee1.cjb.net crayzee@mailbox.sk |
| RVA converter | rva.zip (8kb) |
RVA
converter is a nice tool which converts memory addresses to file offsets
and the other way. It allows you to find bytes you saw in a debugger in
few seconds. Author: LaZaRuS http://hello.to/lazarus lazarus_hf@hotmail.com |
| SantMat's Import Searcher | imp-srch.zip (8kb) |
The
program searches through your computer's files using some search info and
finds the files that import the dll and/or the functions within the dll
you specified in the search info. Author: SantMat santmat@immortaldescendants.org |
| Stone's Relocaction Nopper | stnreloc.zip (34kb) |
Using
this program you can remove unnecessary (or unwanted) relocatrons from PE
file. Author: Stone http://www.cracking.net stone@one.se |
| StripReloc Version 1.02 | StripReloc102.zip (35kb) |
StripReloc
is a command line utility that removes the relocation (".reloc")
section from Win32 PE EXE files, reducing their size. Most compilers/linkers
put a relocation section in EXE files, but this is actually not necessary
since EXEs never get relocated. Hence, a relocation section only wastes
space. Author: Jordan Rusell http://www.jordanr.dhs.org/striprlc.htm jordanr@iname.com |
| STUBEXE v1.055 | exe_win.zip (18kb) |
Executable
optimizer. Features: support MZ, PE, LE (beta NE), optimizes stubs (minimum
as could be), optimizes zero pages, object table, detects & destroys
header of packers. Author: Void Dweller http://members.xoom.com/VoidDweller/ void.vsc@usa.net |
| ToPo V1.2 | topo.zip (189kb) |
An
utility to modify PE files. It can add new section, redirect entry point,
make code writable, change length of existing sections. Author: Mr.Crimson http://i.am/MrCrimson mrcrimson@bigfoot.com |
| wipe.reloc v1.33 | wipereloc133.zip (9kb) |
This
utility makes PE files smaller by aligning them (like virogen's vgalign)
and (if processing a non-DLL PE) by removing the .reloc section. It also
removes empty waste above and below PE headers and at the end of the file,
sets the correct PE checksum and finally recovers the previous times of
the file. Author: crayzee http://crayzee1.cjb.net crayzee@mailbox.sk |
|
Password Crackers |
||
| Advanced RAR Password Recovery 1.10 | arpr.zip (584kb) |
This
program can be used to recover the lost password for a RAR archive. At the
moment, there is no known method to extract the password from the compressed
file, so the only available methods are "brute force" and dictionary-based
attacks. Author: I.Golubev, Elcom Ltd http://www.elcomsoft.com/arpr.html |
| Advanced ZIP Password Recovery 3.51 | azpr.zip (800kb) |
This
utility may help you to guess forgotten ZIP password. The program uses the
"brute-force" attack, based on the options you set (minumum/maximum password
len, character set, password mask); dictionary-based attack is also available.
All ZIP versions and methods are supported. The performance is more than
one million passwords per second (on Pentium II). Authors: Elcom Ltd (V.Katalov, A.Malyshev, I.Golubev) http://www.elcomsoft.com/azpr.html |
| cRARk v2.3 | crark23.rar (116kb) |
cRARk
is intended for the determination of "forgotten" password for RAR archives.
It works with RAR archives versions 2.0 - 2.04. Brute force attack. Author: Pavel Semjanov http://www.ssl.stu.neva.ru/psw/crack.html Psw@ssl.stu.neva.ru |
| FZC 1.05 | fzc105.zip (110kb) |
Fast
ZIP Cracker v1.05 is a brute force & wordlist based password cracker
for ZIP archives. Author: Fernando Papa Budzyn http://www.bokler.com/bsw_crak.html |
| PackageForTheWeb Password Xtractor v2.01 | ucfpfwp2.zip (39kb) |
This util will let you extract or create a suitable password needed for
some installations created with InstallShield's PackageForTheWeb versions
2.03 and 2.04. Author: fOSSiL |
| PackageForTheWeb 2.1 Password Recovery | pftwpr10.zip (6kb) |
PFTW
v2.1 password extractor. Author: Mr.Crimson http://i.am/MrCrimson |
| PFTW 3.00 files pwd extractor | uc_pftw300dec.zip (21kb) |
Utility
to get passwords from password protected self extract .CAB files generated
by InstallShield PackageForTheWeb v3.00. Author: WiseAcre http://ucol.iscool.net wise@softhome.net |
| PackageForTheWeb Password Xtractor v3.0 | PftwPX30.zip (26kb) |
Support
for versions from 1.0 up to 3.0. Author: fOSSiL |
| pkcrack 1.2.1 |
pkcrack.zip (235kb) |
This
ZIP cracker is *very* useful if you know at least 13 (a whole lot more is
much better) unencrypted bytes from one of the encrypted files. It's much
more faster method than brute-force approach. Author: Peter Conrad http://www.unix-ag.uni-kl.de/~conrad/krypto/pkcrack.html conrad@unix-ag.uni-kl.de |
| Ultra Zip Password Cracker v3.61 | uzpc.zip (134kb) |
This
program may help you to recover a password for zip archive. It works with
archives that contains only one file and works with archives that contains
files with different passwords. Program supports four types of attack: brute-force,
dictionary based, mix of brute-force and dictionary based called template
attack and, finally, "known plaintext" attack - if you have one non-encrypted
file from encrypted archive you're need only 10-20 min. to recover all files
from archive. Author: Ivan Golubev http://www.golubev.com |
| YACC v1.0 | yaac10.arj (111kb) |
Yet
Another ARJ Cracker. Cracks ARJ 2.30-2.70 passwords up to 1000000 pass/s on Pentium II/333. Includes Password Cracking Library (PCL) v. 2.0 with many features: powerful dictionary attack, brute force (with static chars) attack, misspelled password recovery, and more. Author: Pavel Semjanov http://www.ssl.stu.neva.ru/psw/crack.html Psw@ssl.stu.neva.ru |
|
Other Tools |
||
| Advanced Compare 1.13ß | ac113b.zip (16kb) |
This
program allows you to compare more than two files in the same time. It can
also compare files that have different sizes. Author: Jim Midnite |
| File Compare32 | pc_fc32b.zip (91kb) |
FC32
is a File Comparing Utility. Some of its features include:
Authors:
Plushmm & The+Q |
| File scanner | fs.zip (61kb) |
File
Scanner is a freeware program for identifying differrent file formats. Now
it can do something more, such as unpacking or decrypting DOS executable
files, calculating sizes of directories and handle headers of executables. Author: SMT http://smf.chat.ru/ smt_smf@hotmail.com |
| FileWork v2.0a | filework.zip (14kb) |
This
is small useful utility to manipulate files. It can: insert one file into
another from any offset, overwrite one file by another from any offset,
cut information from file (from any offset and length), truncate file,
delete bytes from beginning and end, copy any file to another (from any
offset and length), create new filled files (random filled or zeroed). |
| I5COMP v2.01 | i5comp.zip (100kb) |
InstallShield
5.5+ Cabinet Compression & Maintenance Util. Sources included. Author: fOSSiL |
| i6comp v1.03beta | i6comp.zip (75kb) |
This
is a utility to handle version 6 of the InstallShield cabinet files. Author: fOSSiL & Morlac |
| InstallShield File Compressor | icompx.zip (229kb) |
InstallShield
3.xx Cabinet files Compressor/Decompressor. Producer: Stirling Technologies, Inc. http://www.installshield.com |
| ISCabVu 6.21 | iscab.zip (383kb) |
The
InstallShield Cabinet File Viewer lets you select an InstallShield cabinet
file and view its compressed files, file groups, components, and setup types
and the properties of those items. It also lets you extract files from the
cabinet file. Producer: Stirling Technologies, Inc. |
| MuLTi RiPPeR 2.70 | mrip270.zip (795kb) |
Multi-purpose
File Ripper. Rips over 110 file formats including 3DS, 669, AIF, AU, AVI,
BMP, CMF, DMF, DSM, EXE, FAR, FLI, GDM,GIF, GPH, IFF, JPG, LBM, MDL, MID,
MOD, MPG, MUS, PAT, PCX, PNG, PSM, RA, RAD, RAS, RAW, S3M, SBK, STM, TGA,
TIF, VOC, WAV, XM, RTM and many more. Author: Peruch Emiliano, Baccan Matteo peruch@softway.it, baccan@isanet.it |
| NFOmakeR v1.0 | tmgndm10.zip (223kb) |
Win32
.NFO and .DIZ Generator for Release Groups. It's using templates so it's
very customizable. Author: tHE EGOiSTE http://tmg.da.ru |
| Offset Converter 1.000 | oc.zip (22kb) |
The
task of this tool is to covert the virtual offset to the matching file offset. Author: Apus http://www.go.to/apus realapus@gmx.de |
| SuperSnooper 1.0 | ss.zip (26kb) |
SuperSnooper is a Windows and DOS program that reads any file, especially binary files (with extensions like com, exe, dll, and sys), and displays the ASCII strings in the file. |
| Table Extractor 1.0 | ex-tabex.zip (12kb) |
Table
Extractor is a small tool which allows you to convert "Tables" or other
rows of bytes from any file into Arrays for the coding languages Assembler,
C++, Delphi, Javascript, Pascal, RGH-Profan and Visual Basic. So, this tool
saves quite some time the larger the tables get. Author: LaZaRuS http://hello.to/lazarus lazarus_hf@hotmail.com |