From Collaborative RCE Tool Library

Jump to: navigation, search

IDA FLIRT Signatures


Tool name: RE-SIGS
Rating: 5.0 (1 vote)
Author: dihux                        
Website: N/A
Current version: v0.14
Last updated: August 8, 2011
Direct D/L link: Locally archived copy
License type: Free
Description: from readme.txt:

INFO
RE-SIGS is a signature file for IDA.

RE-SIGS does not support delphi signatures anymore.
Maybe there will be a pure delphi version in the future.

Help out with the project if you want :-)


INSTALL
Copy RESIGS*.sig into IDA\sig


ADDED SIGNATURES
MATH LIBS
- MIRACL v43 v54 v72 v85 v45 v510 v474 v542 v544
- BigLib v0.01e by roy
- ECC Bignums
- Borzoilib
- BigNumberQs
- MPI
- Freelip
- GiantInt
- Mixint v0.7
- Bignum library by drizz v1.0 RC2
- Bignum library v1.0 by _ged/TKM!
- Witeg's biglib
- Pegwit v8.7
- Pegwit modified version found in software
- Slavasoft FastCRC Library v1.51
- Slavasoft QuickCrypt Library v2.51
- Slavasoft QuickHash Library v3.02
- libtomcrypt v1.16
- libtommath v0.39
- Cryptohash by drizz all versions up to v1.0 RC4
- FGInt

+ many more


OTHER
- masm32v10lib
- fpuv10lib // from masm32 pack
- datetimev10lib // from masm32 pack
- mfmplayer v?
- minifmod v?
- pnglib v?
- many user identified procedures
- many known hashes/cipher implementations
- textscroller v? lib // requested
- rceapi // precompiled

+ many more


COUNT
6522 identified functions


OTHER INFO
Requests, incorrect named functions, fake hits, contributions
tips etc. goes to me at IRC EFNet.


HISTORY
v0.14 08.08.2011 PUBLIC
v0.13 10.01.2011 INTERNAL
v0.12 14.11.2010 INTERNAL
v0.11 05.10.2010 INTERNAL
v0.10 02.07.2010 INTERNAL
v0.09 24.06.2010 INTERNAL
v0.08 30.11.2009 INTERNAL
v0.07 24.09.2009 INTERNAL
mr. anon#3 contributed with:
- Pegwit v8.7 // compiled with VC9
- Pegwit modified version found in software
- Slavasoft FastCRC Library v1.51 // precompiled
- Slavasoft QuickCrypt Library v2.51 // precompiled
- Slavasoft QuickHash Library v3.02 // precompiled
- libtomcrypt v1.16 // compiled with vs6 and vs2008
- libtommath v0.39 // compiled with vs6 and vs2008

v0.06 19.09.2009 INTERNAL
mr. anon#2 requested:
- textscroller lib // precompiled

v0.05 06.09.2009 INTERNAL
v0.04 25.08.2009 INTERNAL
v0.03 24.08.2009 INTERNAL
mr. anon#1 requested:
- masm32v10lib // precompiled
- fpuv10lib // precompiled
- datetimev10lib // precompiled
- mfmplayer // precompiled
- minifmod // precompiled
- pnglib // precompiled

v0.02 25.07.2009 INTERNAL
v0.01 09.07.2009 INTERNAL
Also listed in: (Not listed in any other category)
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)



Tool name: AsProtect Signatures for IDA
Rating: 0.0 (0 votes)
Author: hnedka                        
Website: N/A
Current version: 0.1
Last updated: November 12, 2009
Direct D/L link: http://rapidshare.com/files/301642596/AsProtect.sig
License type: freeware
Description: Signature pack for IDA, that contains many AsProtect functions (~500). Run it on dumped AsProtect.dll.
Also listed in: (Not listed in any other category)
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)



Tool name: Delphi 6 Full IDA Signatures
Rating: 0.0 (0 votes)
Author: TQN                        
Website: N/A
Current version: 1.0
Last updated: September 14, 2004
Direct D/L link: Locally archived copy
License type: Free
Description: I am very glad to say with you: Wow, at the end, I have finished creating the full IDA signatures for Delphi 6 (RTL/VCL/BDE/CLX...).
Also listed in: (Not listed in any other category)
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)



Tool name: Delphi 7 Full IDA Signatures
Rating: 0.0 (0 votes)
Author: TQN                        
Website: N/A
Current version: 1.0
Last updated: September 14, 2004
Direct D/L link: Locally archived copy
License type: Free
Description: I am very glad to say with you: Wow, at the end, I have finished creating the full IDA signatures for Delphi 7 (RTL/VCL/BDE/CLX...).
Also listed in: (Not listed in any other category)
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)



Tool name: Key-lok II C++ library IDA Signatures
Rating: 0.0 (0 votes)
Author: prt                        
Website: N/A
Current version: rev1
Last updated: July 5, 2007
Direct D/L link: Locally archived copy
License type: Free
Description: IDA Signature: Key-lok II C++ library
version: rev1
Also listed in: Dongle IDA Signatures, KEYLOK Dongle Tools
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)



Tool name: Matrix Dongle 2.6.0 IDA Signatures
Rating: 0.0 (0 votes)
Author: Sope                        
Website: N/A
Current version:
Last updated: September 13, 2008
Direct D/L link: Locally archived copy
License type:
Description: Recently, while RE an target I had to create IDA signature file for Matrix Dongle ver 2.6.0 hence uploaded here. It will help you to identify many fucntions.
Also listed in: Dongle IDA Signatures, Matrix Dongle Tools
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)



Tool name: Matrix Dongle C++ library IDA Signatures
Rating: 0.0 (0 votes)
Author: prt                        
Website: N/A
Current version: rev1
Last updated: August 5, 2007
Direct D/L link: Locally archived copy
License type: Free
Description: IDA Signature: Matrix Dongle C++ library
version: rev1

2007.08.05 rev1:
Matrix SDK v2.60
Also listed in: Dongle IDA Signatures, Matrix Dongle Tools
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)



Tool name: Rockey4 2.x Dongle C++ library IDA Signatures
Rating: 0.0 (0 votes)
Author: prt                        
Website: N/A
Current version: rev1
Last updated: July 5, 2007
Direct D/L link: Locally archived copy
License type: Free
Description: IDA Signature: Rockey4 v2.x C++ library
version: rev1

2007.07.05 rev1:
Add Rockey4 v2.05
Add Rockey4 v2.06
Also listed in: Dongle IDA Signatures, Rockey Dongle Tools
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)



Tool name: Rockey4ND 1.x Dongle C++ library IDA Signatures
Rating: 0.0 (0 votes)
Author: prt                        
Website: N/A
Current version: rev2
Last updated: October 11, 2007
Direct D/L link: Locally archived copy
License type: Free
Description: IDA Signatures: Rockey4ND v1.x C++ library

2007.07.05 rev1:
Add Rockey4ND v1.20

2007.10.11 rev2:
Add Rockey4ND v1.15
Add Rockey4ND v1.16
Also listed in: Dongle IDA Signatures, Rockey Dongle Tools
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)



Tool name: Safenet Sentinel Hardware Keys 1.x C++ library IDA Signatures
Rating: 0.0 (0 votes)
Author: prt                        
Website: N/A
Current version: rev1
Last updated: November 15, 2006
Direct D/L link: Locally archived copy
License type: Free
Description: New sentinel dongle:
http://www.safenet-inc.com/products/sentinel/hardware_keys.asp

IDA Signature: Safenet Sentinel Hardware Keys v1.x C++ library
version: rev1

2006.11.15 rev1:
Sentinel Hardware Keys v1.0.2
Also listed in: Dongle IDA Signatures, Sentinel Dongle Tools
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)



Tool name: Sentinel SuperPro 6.x Dongle C/C++ library IDA Signatures
Rating: 0.0 (0 votes)
Author: prt                        
Website: N/A
Current version: rev7
Last updated: April 17, 2007
Direct D/L link: Locally archived copy
License type: Free
Description: IDA Signature: Sentinel SuperPro v6.x C/C++ library
version: rev7

2007.04.11 rev7:
Fixed some Sentinel obfuscated functions. (Thanks to Meteo)

2007.03.01 rev6:
Fixed Sentinel obfuscated functions. (Thanks to Meteo)

2006.10.27 rev5:
Add Sentinel SuperPro v6.4.4
Add Sentinel SuperPro v6.4.3

2006.03.11 rev4:
Add Sentinel SuperPro v6.4.2
Add Sentinel SuperPro v6.4.1

2005.05.07 rev3:
Add Sentinel SuperPro v6.4

2004.12.31 rev2:
Add Sentinel SuperPro v6.3.1.9
Add Sentinel SuperPro v6.3.1.8
Add Sentinel SuperPro v6.3.1.2
Add Sentinel SuperPro v6.3.1.1

2004.12.09 rev1:
Add Sentinel SuperPro v6.3.1.10
Add Sentinel SuperPro v6.3.1.4
Add Sentinel SuperPro v6.3.1
Add Sentinel SuperPro v6.3
Add Sentinel SuperPro v6.2.1
Add Sentinel SuperPro v6.2
Add Sentinel SuperPro v6.1
Add Sentinel SuperPro v6.0
Also listed in: Dongle IDA Signatures, Sentinel Dongle Tools
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)



Tool name: SentinelLM Dongle C/C++ library IDA Signatures
Rating: 0.0 (0 votes)
Author: prt                        
Website: N/A
Current version: rev2
Last updated: June 14, 2007
Direct D/L link: Locally archived copy
License type: Free
Description: IDA Signature: SentinelLM C/C++ library
version: rev2

2007.06.14
Add SentinelLM v8.0
Add SentinelLM v8.0.2
Fixed some obfuscated functions.

2004.12.30 rev1:
inculde:
SentinelLM v7.0
SentinelLM v7.0 SP2
SentinelLM v7.1
SentinelLM v7.1.1
SentinelLM v7.1.2
SentinelLM v7.2
SentinelLM v7.2.0.1
SentinelLM v7.2.0.3
SentinelLM v7.2.0.4
SentinelLM v7.2.0.5
SentinelLM v7.2.0.6
SentinelLM v7.2.0.8
SentinelLM v7.2.0.9
SentinelLM v7.2.0.12
SentinelLM v7.2.0.18
SentinelLM v7.3.0
Also listed in: Dongle IDA Signatures, Sentinel Dongle Tools
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)


RSS feed Feed containing all updates and additions for this category.

RSS feed Feed containing all updates and additions for this category, including sub-categories.


Subcategories

There is one subcategory to this category.


Retrieved from "http://www.woodmann.com/collaborative/tools/index.php/Category:IDA_FLIRT_Signatures"



Views
Category Navigation Tree
RCE Tools
   Categorized by Target Type  (235)
   Categorized by Tool Type  (1196)
   Anti Anti Test Tools  (16)
   Assemblers  (19)
   Code Coverage Tools  (13)
   Code Injection Tools  (35)
   Code Ripping Tools  (2)
   Crypto Tools  (13)
   Data Extraction Tools  (24)
   Debuggers  (47)
   Decompilers  (27)
   Deobfuscation Tools  (16)
   Dependency Analyzer Tools  (5)
   Diff Tools  (44)
   Disassemblers  (65)
   Dongle Analysis Tools  (24)
   Exe Analyzers  (39)
   Executable File Editors & Patchers  (92)
   Firefox Extensions  (3)
   GUI Manipulation Tools  (18)
   Hardware Reversing Tools  (24)
   Helper Tools  (3)
   Hex Editors  (12)
   IDA Signature Creation Tools  (5)
   Kernel Tools  (13)
   Memory Data Tracing Tools  (7)
   Memory Patchers  (6)
   Memory Search Tools  (7)
   Monitoring Tools  (130)
   Network Tools  (19)
   Packers  (18)
   Patch Packaging Tools  (12)
   Profiler Tools  (11)
   Programming Libraries  (45)
   Regular Expression Tools  (3)
   Resource Editors  (13)
   Reverse Engineering Frameworks  (8)
   Source Code Tools  (11)
   String Finders  (5)
   Symbol Tools  (11)
   System Information Extraction Tools  (9)
   Technical PoC Tools  (8)
   Test and Sandbox Environments  (22)
   Tool Extensions  (169)
   CFF Explorer Extensions  (5)
   Filemon Extensions  (1)
   Firefox Extensions  (3)
   GDB Extensions  (1)
   Hexer Extensions  (1)
   IDA Extensions  (56)
   IDA FLIRT Signatures  (12)
   IDA IDC Scripts  (1)
   IDA Signature Creation Tools  (5)
   ImpREC Extensions  (3)
   Obsidian Extensions  (1)
   OllyDbg Custom Versions  (4)
   OllyDbg Extensions  (79)
   Regmon Extensions  (1)
   SoftICE Extensions  (6)
   WinDbg Extensions  (8)
   Tool Hiding Tools  (7)
   Tool Signatures  (17)
   IDA FLIRT Signatures  (12)
   Packer Identifier Signatures  (5)
   Tracers  (19)
   Unpacking Tools  (80)
   Needs New Category