Results 1 to 11 of 11

Thread: Native Blocks Pre-Alpha

  1. #1
    Registered User
    Join Date
    Jan 2008
    Posts
    163
    Blog Entries
    19

    Native Blocks Pre-Alpha

    Hello, I wanted to show you my new tool. I called it Native Blocks. It's a re-assembler basically. Since a written presentation would take me too much time I prepared a video presentation.

    http://www.youtube.com/watch?v=pDlwStN3KZY
    http://www.youtube.com/watch?v=ene6hvE5qVQ

    Again, this is a pre-alpha. This tool will soon support other technologies such as java, actionscript and maybe even x86. Right now it only supports .NET (and even .NET support will be hugely improved, like for instance supporting the direct modification of assemblies without having to use Rebel.NET).

    The development of this tool depends mainly on the interest of people.

    As I can be considered a student from now on, I would like to earn some extra money by writing tools such as this one. I have still my job as consultant, but it's a very limited partime, because I just became a student.

    This tool is in my opinion pretty good, it is not only good for deobfuscation purposes but also patching and assembling on the fly.

    If this tool can be sold, then the support of technologies will depend on requests. I think I'll add Java immediately and after that maybe x86/x64. Again it depends.

    Suggestions and comments are welcome.
    Last edited by Daniel Pistelli; July 2nd, 2009 at 05:44.

  2. #2
    Administrator dELTA's Avatar
    Join Date
    Oct 2000
    Location
    Ring -1
    Posts
    4,206
    Blog Entries
    5
    Haha, damn, that's some mean stuff Daniel! (as usual though )

    Can't wait to see the support for Java and X86/x64 too, then it will be REALLY mean, as if the current state wouldn't be enough!

    No download link so that we can play with it our selved though? (I can't reach ntcore.com to check for myself for some reason eother, is it down?)

    EDIT:
    Can reach ntcore.com now, and can't find it there either.
    "Give a man a quote from the FAQ, and he'll ignore it. Print the FAQ, shove it up his ass, kick him in the balls, DDoS his ass and kick/ban him, and the point usually gets through eventually."

  3. #3
    Registered User
    Join Date
    Jan 2008
    Posts
    163
    Blog Entries
    19
    NTCore is down? this is interesting...

    Thanks.

    EDIT: I refreshed and it works now. Strange...
    Sorry delta, as I mentioned it is a pre-alpha and I sure would like to make a version for people like you to test it, but as said I would like to see if it has a possible commercial future, so I won't provide direct downloads.
    Last edited by Daniel Pistelli; June 30th, 2009 at 10:54.

  4. #4
    Administrator dELTA's Avatar
    Join Date
    Oct 2000
    Location
    Ring -1
    Posts
    4,206
    Blog Entries
    5
    Temporary network problem maybe, I can reach it again, as per my edit above.

    EDIT:
    Ok, I see about the download. Just let us know when there's something to play with.
    "Give a man a quote from the FAQ, and he'll ignore it. Print the FAQ, shove it up his ass, kick him in the balls, DDoS his ass and kick/ban him, and the point usually gets through eventually."

  5. #5
    Tora
    Guest
    Wow, nice video ^^ Just one question... you said about the scripting feature that "in this case we're going to use javascript". That means more languages are (going to be) supported?
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  6. #6
    Registered User
    Join Date
    Jan 2008
    Posts
    163
    Blog Entries
    19
    I thought eventually to implement python, the problem is that it's going to cost me a bit more of work. Javascript was faster to emebed as it is provided by the fx. However, I don't think JS is the worst option, it resembles IDA's idc.


    I forgot to mention one thing: this application can be compiled on every operating system (win, osx, linux etc.) in theory, I didn't bother since I think most rev goes on on windows.

  7. #7
    The video doesn't work for me, but I guess the tool is like Hiew, only generic. Which sounds very promising indeed.

  8. #8
    Registered User
    Join Date
    Jan 2008
    Posts
    163
    Blog Entries
    19
    I'm sorry, I don't know what happened with the video there, it just was removed from megavideo without giving me a reason. I split it in two parts and uploaded it to youtube.

  9. #9
    |< x != '+' BanMe's Avatar
    Join Date
    Oct 2008
    Location
    Farmington NH
    Posts
    510
    Blog Entries
    4
    this is a excellent tool and looks to hold much promise, not for just reversing but for other applications as well.. congratulations on a great piece of work

    regards BanMe

  10. #10
    Registered User
    Join Date
    Jan 2008
    Posts
    163
    Blog Entries
    19
    Thanks BanMe, this is encouraging. But still this tool needs lots of work. However, I have some neat ideas even for x86-64.

  11. #11
    Registered User
    Join Date
    Aug 2005
    Location
    Italy
    Posts
    133
    Blog Entries
    31
    as usual great work Daniel!

    with some addition will be also an handy tool for professionals!

    http://evilcry.netsons.org (Repository)
    http://evilcodecave.blogspot.com
    http://evilcodecave.wordpress.com

Similar Threads

  1. Writing a pure Native DLL
    By cpuZ in forum Advanced Reversing and Programming
    Replies: 2
    Last Post: January 31st, 2012, 16:17
  2. Guidance Needed on finding Alpha
    By Aimless in forum Off Topic
    Replies: 1
    Last Post: October 30th, 2011, 00:38
  3. .NET Internals and Native Compiling
    By Daniel Pistelli in forum Blogs Forum
    Replies: 13
    Last Post: July 25th, 2008, 20:55
  4. OllyDbg 2 Alpha - March 11 2008
    By Irwin in forum OllyDbg Support Forums
    Replies: 1
    Last Post: March 13th, 2008, 04:31
  5. Remotesoft's Salamander 1.1.6.0 (Native Compiling)
    By Ntoskrnl in forum Advanced Reversing and Programming
    Replies: 6
    Last Post: May 23rd, 2006, 06:15

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •