Page 1 of 3 123 LastLast
Results 1 to 15 of 36

Thread: GCB engine release.

  1. #1

    GCB engine release.

    GCBE(Control Flow Graph Creation And Build Engine) - this is the base engine for morphing(x86). To create and build the graph. Allows us to solve very complex problems associated with graphs.

    http://indy-vx.narod.ru/Bin/GCBE.zip

  2. #2
    Administrator dELTA's Avatar
    Join Date
    Oct 2000
    Location
    Ring -1
    Posts
    4,204
    Blog Entries
    5
    "Give a man a quote from the FAQ, and he'll ignore it. Print the FAQ, shove it up his ass, kick him in the balls, DDoS his ass and kick/ban him, and the point usually gets through eventually."

  3. #3
    Musician member evaluator's Avatar
    Join Date
    Sep 2001
    Posts
    1,479
    Blog Entries
    1
    hm, dELTA, so you are putting in CRECTL also tools related to virusology?
    is that safe choice?

  4. #4
    evaluator
    A knife is a weapon, but its use is not prohibited for peaceful purposes

  5. #5
    Musician member evaluator's Avatar
    Join Date
    Sep 2001
    Posts
    1,479
    Blog Entries
    1
    problem not in weapon/not-weapon, but will be you sued for that-thing.

    btw, for dld your zip, one must turn off AV. can that behavior avoided?
    Last edited by evaluator; December 7th, 2010 at 05:08. Reason: grammar

  6. #6
    Quote Originally Posted by Indy View Post
    evaluator
    A knife is a weapon, but its use is not prohibited for peaceful purposes
    Such as for instance watermarking!?....

  7. #7
    Administrator dELTA's Avatar
    Join Date
    Oct 2000
    Location
    Ring -1
    Posts
    4,204
    Blog Entries
    5
    I agree that most tools on our site could be used for malicious purposes if someone wanted to, so that's irrelevant. Code flow analysis can be very useful for "normal" reversing/unpacking/deobfuscation too.

    Indy, could you possibly provide us with a little more thorough description of the capabilities for that tool? That would be great.
    "Give a man a quote from the FAQ, and he'll ignore it. Print the FAQ, shove it up his ass, kick him in the balls, DDoS his ass and kick/ban him, and the point usually gets through eventually."

  8. #8
    Here the possibilities of this tool one can not appreciate. You do not have a sufficient level for evaluation.

  9. #9
    Administrator dELTA's Avatar
    Join Date
    Oct 2000
    Location
    Ring -1
    Posts
    4,204
    Blog Entries
    5
    First of all, if you truly believed that "no one here can appreciate the possibilities of this tool", what exactly would the point be of making a post about it here in the first place?

    Second of all, the tools in the CRCETL are not only meant for "the people here", and thus, a better description for the tool in the CRCETL would benefit everyone interested in such a tool (which would of course also imply that they would be able to "appreciate its capabilities").

    If you don't have any logically sound replies/arguments to the question and statement above, would you please supply a somewhat more detailed description of the tool? (not meaning a paper about its inner workings for that matter, just a few more key sentences about its capabilities would do just fine)
    "Give a man a quote from the FAQ, and he'll ignore it. Print the FAQ, shove it up his ass, kick him in the balls, DDoS his ass and kick/ban him, and the point usually gets through eventually."

  10. #10
    dELTA
    Interested people should study such mechanisms. Can not be otherwise - is a complex materiel opens up great opportunities. I just do not understand your position, this code as my other technology can be laid only at elite sites. What are you unhappy?

    If you have a problem that the code affects vx technology, I can give you an example. Simplified example. Need to get control after working ISR: http://indy-vx.narod.ru/Bin/Ki.zip

    For example this: http://www.woodmann.com/forum/showth...ll=1#post88363

    I thought it would be normal technical discussion
    If something does not suit you, I'll go away.

  11. #11
    Administrator dELTA's Avatar
    Join Date
    Oct 2000
    Location
    Ring -1
    Posts
    4,204
    Blog Entries
    5
    Quote Originally Posted by Indy View Post
    dELTA
    Interested people should study such mechanisms. Can not be otherwise - is a complex materiel opens up great opportunities. I just do not understand your position, this code as my other technology can be laid only at elite sites. What are you unhappy?
    Yes, all I'm saying is that in order to start and inspire such a discussion, it is very effective to give an "initial description" that will give people a little more detailed understanding about the unique capabilities and possibilities of a posted tool. Even though people might very well be able to download and analyze the source code/functionality/whatever of a posted zip-file, they will be much more likely to do so if they know a little more about it. Otherwise they will highly likely just discard it due to lack of time, because they don't know at all if it's worth the time investment to even take a look at it. There are LOTS of unknown zip files on the net to investigate, all too many actually.

    All I'm saying is that it would be a shame if people skipped it for those reasons, when you have invested time in a complex and most likely very good tool. It breaks my heart when big time investments like this aren't spread anywhere close to their potential just because of some small detail like a lacking description in the very last step. That's why I created the CRCETL, i.e. to expose and "market" all the fine tools that reversers put oceans of time into developing, but only seconds into spreading so that others could have great use of them.


    Quote Originally Posted by Indy View Post
    If you have a problem that the code affects vx technology, I can give you an example. Simplified example. Need to get control after working ISR: http://indy-vx.narod.ru/Bin/Ki.zip
    If you look above, you will see that I defended the tool from the vx accusations...


    Quote Originally Posted by Indy View Post
    I thought it would be normal technical discussion
    If something does not suit you, I'll go away.
    Sadly, people in general (and especially the smartest ones) have very little time to spare between all their other projects, so if you upload a zip file with a one sentence description, you don't exactly maximize the possibilities of such a discussion starting, because few people will take the time to download and investigate the tool just to see if it can do anything interesting to begin with. Oh, and insulting their intelligence when they ask for a few more sentences of description instead of putting an hour that they don't have into investigating the tool themselves probably won't do much for inspiration either.

    We do appreciate your skills, you input, and your tools, I just tried to help you get some more interest for your tool, that's all.
    "Give a man a quote from the FAQ, and he'll ignore it. Print the FAQ, shove it up his ass, kick him in the balls, DDoS his ass and kick/ban him, and the point usually gets through eventually."

  12. #12
    dELTA
    "initial description"
    Just one who understands what is morphing and graphs will understand how it works subj. This is very huge and complex subject, there is no sense to describe the basics. For example rebuild the graph allows you to separate the procedure entirely. Absolutely no need to describe how it happens and what can be applied. Simply because those who are familiar with these mechanisms do not need a description, for those who are not familiar with this brief description would be futile because of their complexity.

  13. #13
    Administrator dELTA's Avatar
    Join Date
    Oct 2000
    Location
    Ring -1
    Posts
    4,204
    Blog Entries
    5
    Even though again, this is not a big issue at all, I must provide a counter example just for the hell of it :

    Just because someone "knows the art of word processing", they still won't have a clue about the capabilities of a tool that is presented such as:

    Here is my word processor. It can process words. (wordprocessor.zip)
    And most of them probably won't have the time to download it just to see what it can do either. If the author would like people (that know the art of word processing of course) to do that, a description such as the following might be more efficient, while still not containing any info about "the basics of word processing":

    Word 2010 provides an array of new and improved tools that help you look like a design pro and make your important content stand out.
    * Add impressive formatting effects—such as gradient fills and reflections—directly to the text in your document. You can now apply many of the same effects to text and shapes that you might already use for pictures, charts, and SmartArt graphics.

    Use new and improved picture editing tools—including versatile artistic effects and advanced correction, color, and cropping tools—to fine-tune every picture in your document to look its absolute best.

    Choose from more customizable Office themes to coordinate colors, fonts, and graphic formatting effects throughout your documents. Customize themes to use your own personal or business branding. The same Office themes are available in Microsoft PowerPoint and Excel 2010, so it’s easy to give all your documents a consistent, professional look.

    Make a statement with a wide selection of SmartArt graphics— including many new layouts for organization charts and picture diagrams—to create impressive graphics as easily as typing a bulleted list. SmartArt graphics automatically coordinate with your chosen document theme, so great-looking formatting for all your document content is just a couple of clicks away.
    And I don't mean the marketing spin, but rather the description of some actual features, contrary to just a one-sentence classification of what kind of program it is at all.

    Finally, myself for example, know a fair bunch about graph theory and control flow analysis, but judging only from your description of the tool, I still don't have the faintest idea about what it can actually accomplish within these fields, and which main features and tools it contains to help accomplish this.

    There will be a massive difference in interest for the tool (and subsequent "technical discussion" too mind you) between these two methods of presenting it. That being said, it is in no way required that the author of a posted tool must do this, absolutely not. Insulting people's intelligence or competence when they ask for some more information about the tool while trying to decide if it's worth the time to evaluate it might be somewhat frowned upon though.
    "Give a man a quote from the FAQ, and he'll ignore it. Print the FAQ, shove it up his ass, kick him in the balls, DDoS his ass and kick/ban him, and the point usually gets through eventually."

  14. #14
    Musician member evaluator's Avatar
    Join Date
    Sep 2001
    Posts
    1,479
    Blog Entries
    1
    short-cut from me:
    THUSLeY, CRCETL entry is not required for this object.

  15. #15
    evaluator
    Why not?

Similar Threads

  1. Vulnerability fix for bTree engine
    By Hex Blog in forum Blogs Forum
    Replies: 0
    Last Post: May 17th, 2013, 05:28
  2. Looking for a light weight C/C++ debugging engine api
    By _genuine in forum The Newbie Forum
    Replies: 2
    Last Post: September 9th, 2012, 21:49
  3. serious bug in olly engine!
    By tibbar in forum Bugs
    Replies: 2
    Last Post: September 15th, 2005, 09:30
  4. Encrypted execution engine
    By tom324 in forum Off Topic
    Replies: 2
    Last Post: August 27th, 2004, 11:58

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •