Collaborative RCE Tool Library - Relocation Tools (including sub-categories)

Tool Updated: ReloX

Sun, 23 Aug 2009 21:48:22 GMT

Listed in categories: Relocation Tools

Most recent version:
1.0

Most recent release date:
August 23, 2009

Description:
The only relocation tool worth its bytes. Perfect for that 'final step' in unpacking those pesky dynamic link libraries.

{ from included readme.txt }

ReloX v1.0 * by MackT/uCF2000 in 2003

Disclaimer:
-----------
This program may crash, or in a worse case it may even reboot your computer, so please use it with caution. (Do not run it 3 hours into an unsaved coding session for example)

I am *NOT* responsible for any damage caused by the use of it.

Purpose:
--------
ReloX is a Win32 relocations rebuilder. It will create a .reloc section from different
based images.

What does it need?
------------------
- At least 2 different based images of a module. The more you have images, the more
your relocations will be reliable.

How does it work?
-----------------
1) - Select the first based image with the "..." button on the "Original" line.

The imagebase will be put automatically. If it is not right, modify it.

2) - Select the second based image with the "..." button on the "Compare to" line.

The imagebase will be put automatically. If it is not right, modify it.

3) - Click on "Select Sections" to select all sections which contain code for
comparison (default is all).

4) - Click on "Compare" to start comparison between the modules.

The result will be in the list control.

5) - If you have other based images, redo the same thing from 2) for all of them

6) - Click on "Fix PE Module" to select a pe file and fix with the new ".reloc" section.

(no backup needed just like ImpREC(tm))

Limitations
-----------
- It will only support 32 bits relocations of type (3).
(IMAGE_REL_BASED_HIGHLOW : The fixup applies the delta to the 32-bit field at Offset)

Thanks to
---------
Muffin and Snacker for testing.

Greetings to
------------
Michelle Branch, Jackie Chan and Jet Li.

Tool Added: RelocEditor

Thu, 24 Jul 2008 01:12:35 GMT

Listed in categories: Relocation Tools

Most recent version:
1.0

Most recent release date:

Description:
RelocEditor allows you to directly edit the Relocation table inside of the PE file and individual relocations. You can change the VA of individual relocations, edit or delete the whole table, individual blocks, etc.

Tool Updated: PE1

Fri, 28 Dec 2007 23:52:05 GMT

Listed in categories: Relocation Tools

Most recent version:
1.0

Most recent release date:
Who knows

Description:
Little GUI tool useful for:

- Image rebase (if relocs are present, for now :)
- Recalc checksum
- Realign sections
- Strip section names
- Checksum fixing
- Excessive image directory cutoff (aggressive)

This one is my personal tool, so if something crashes, I have debugger (and you don't :)

P.S. This little thing is packed by RLPack by ap0x ("štitimo domaće, koristimo DOMAĆE exe-packere :)")
Pozdrav za vrlo talentovanu mladu ekipu koja je već do sada iza sebe ostavila dosta lepih stvari :)

Tool Added: PE32 Relocate

Sun, 21 Oct 2007 01:10:07 GMT

Listed in categories: Relocation Tools

Most recent version:
0.1

Most recent release date:

Description:
PE32.Relocate 0.1
--------------------
How to use:
reloc.exe -f<FILE> -b<IMAGEBASE>

<FILE> = Path to PE32 file to relocate
<IMAGEBASE> = New ImageBase for relocated file [hex]

Example:
reloc.exe -fCrackme.exe -b00410000