Collaborative RCE Tool Library - Packers

Tool Updated: Crinkler

Thu, 04 Mar 2010 17:57:55 GMT

Listed in categories: Packers, Tiny Executables Packers

Most recent version:
1.2

Most recent release date:
September 5, 2009

Description:
Crinkler is an executable file compressor (or rather, a compressing linker) for Windows specifically targeted towards compressing 4k intros.

Tool Updated: WinUPack 3.99 and UPack 3.999

Sun, 19 Jul 2009 05:03:41 GMT

Listed in categories: Packers

Most recent version:
3.999

Most recent release date:
July 18, 2009

Description:
One of the first "breakthrough" PE packers.

Also uses nice trick with twisted load address (many of the powerful commercial tools fall on their knees).

Tool Updated: EXPressor

Sun, 19 Jul 2009 05:03:16 GMT

Listed in categories: Packers

Most recent version:
1.7.0.1

Most recent release date:
July 18, 2009

Description:
eXPressor - Software Protection System and PE Compressor
Used as a compressor this tool can compress EXE files to half their normal size. Once compressed, the files execute just like normal. As a protector It is designed to protect applications against crackers; also can help developers in creation of uncrackable registration keys, and implementation of trial version for protected software.

Features:
-excelent compression ratios ~70%
(this is - tighter than .rar, .zip, upx etc.);
-multilevel packing (over and over the same file);
-support for various 32bit PE files like .exe, .dll, .net, .ocx, .scr;
-customizable resource compression;
-password protection for applications;
-counteraction to classical memory dumping tools;
-detection of cracking tools like file or registry monitors, debuggers;
-application integrity check (agains viruses, resource modifications);
-anti-debugging and anti-disassembling;
-anti memory patching techniques;
-protection of application's imported functions using different methods (emulation etc.);
-eXPressor offers a set of APIs for interaction betweend decompressing routines and protected applications;
-registration keys system using RSA based encryption/decryption algorithm; -keys can be generated using specific hardware ID; say STOP to your application keygenerators;
-"stolen" registration keys management, integration of stolen keys in new protected versions of the application;
-eXPressor offers the possibility of creating "trial" versions of the application, with limited functionality, and limited evaluation time or number of executions;
-reminder message in unregistered version of protected programs;
-shell integration, project file saving, command line support and more

Tool Updated: SecurePE

Wed, 25 Feb 2009 21:05:23 GMT

Listed in categories: Packers

Most recent version:
1.6

Most recent release date:
October 22, 2008

Description:
SecurePE is a user friendly freeware utility coded in 32bit assembly language that protects Microsoft Windows® PE files with a password, strong RC4 encryption and checksum while leaving them totally functional.

Tool Added: Phoenix Protector

Tue, 03 Jun 2008 15:18:53 GMT

Listed in categories: .NET Packers, Packers

Most recent version:
1.3.0.1

Most recent release date:
June 2, 2008

Description:
The Phoenix Protector was created to protect .NET assemblies and it's the ideal solution for every .NET developer, due to its support of every kind of project and compatibility with every version of the .NET framework. It has all common obfuscation features to secure your code. It provides obfuscation features like Name, String and Control Flow Obfuscation. The last feature is particularly important since it prevents the .NET assembly from being decompiled into an understandable language. The Name Obfuscation is provided with an exclusion list.

I first wrote the core of the Phoenix Protector for a company when I was 19. That project didn't work out for internal reasons not related to the quality of the product itself. I then wrote the Phoenix Protector, which was basically a new GUI for the now improved core. However, during the years (one has to consider that I was quite young when I developed the .NET obfuscator) I became ever more conscious that I didn't want to spend my life writing protections and also that I was not convinced by protections for the .NET technology in the first place. That's partly why I wrote Rebel.NET. By combining Rebel.NET with the DisasMSIL engine it is very easy to write a code obfuscator for .NET assemblies. The only thing which would be missing is name obfuscation and string encryption, which are even easier as protections. That's why I'm releasing the Phoenix Protector for free: nowadays, writing a commercial obfuscator doesn't make much sense to me. The code obfuscation provided by the Phoenix Protector is quite good when compared to other commercial obfuscators. I noticed that most obfuscators provide a very easy to reverse code obfuscation scheme. I'm not saying that the Phoenix Protector's code obfuscation can't be reversed. Every .NET code obfuscation scheme can be reversed somehow and the rebuilding task becomes very easy through Rebel.NET.

Tool Updated: RLPack

Tue, 01 Jan 2008 12:21:13 GMT

Listed in categories: Packers

Most recent version:
1.20

Most recent release date:
November 30, 2007

Description:
RLPack is a software that gives you the power to compress your executables and dynamic link libraries in a way that keeps them small and has no effect on compressed file functionality. Further more RLPack protects your files from modification and has several protection options which help protecting your files from being changed or cracked. But compression and protection does not stop there. RLPack with iBox module can pack your dynamic link libraries and place them inside the main executable so they can not be modified. They are extracted directly to memory (or optionally to disk) hiding their presence and enabling you to keep your dynamic link libraries safe from being used by third party programs or users.

Tool Updated: FSG

Sat, 29 Dec 2007 00:58:23 GMT

Listed in categories: Packers

Most recent version:
2.0

Most recent release date:
Long time ago

Description:
Still kicking around... again like with aND's pack, if the depack routine survives, you can expect solid compression results. And a lot of false positives (AVG and Avira).

Tool Updated: AND's pakk2

Sat, 29 Dec 2007 00:57:04 GMT

Listed in categories: Packers

Most recent version:
0.18

Most recent release date:
July 16, 2007

Description:
This guy is from the scene gang :)
That means he needs something that will squeeze his code that is never bigger than 200KB.
If you have something like that, and the depacker survives depacking without crashing, you can expect better results than with LZMA. Only if it survives.

Tool Updated: Burneye

Fri, 07 Dec 2007 08:55:49 GMT

Listed in categories: Linux Packers, Packers

Most recent version:
1.0.1

Most recent release date:
December 24, 2002

Description:
Burneye ELF encryption program, with full source and docs.