Page 1 of 2 12 LastLast
Results 1 to 15 of 22

Thread: RLPack by ap0x

  1. #1
    me :)
    Join Date
    Mar 2006
    Location
    Croatia
    Posts
    25

    RLPack by ap0x

    Reversing Labs Packer is a small open source .exe packing project written in MASM. It is designed to pack all common compiler executables (tested with VC++, VB, Delphi, MASM,...). Please note that RLPack is a packer and will not protect executables from cracking since it doesn`t use any anti* tricks. RLPack has following features:

    + Packs sections (ratio goes upto 60%)
    + Packs resources
    + Strips relocations
    + Preserves main icon and manifest
    + Packs import table
    + Preserves TLS (optional stripping)
    - Does not support overlays!
    - Does not support .exe files with export tables!

    Program uses aPLib 0.42 by Jorgen Ibsen
    download: http://ap0x.jezgra.net/RLPack.rar

  2. #2
    me :)
    Join Date
    Mar 2006
    Location
    Croatia
    Posts
    25
    10/20/2006 RLPack 1.13 Basic Edition/Full Edition



    + Added error handleing for non .exe files
    + Added Fake signature option [Full version]
    + Added documentation [help.chm]
    + Added unique watermark option [Full version]
    + Added AntiCracking protection option [Full version]
    + Added API redirect protection option [Full version]
    download: http://rlpack.jezgra.net/RLPack.zip

  3. #3
    me :)
    Join Date
    Mar 2006
    Location
    Croatia
    Posts
    25
    10/21/2006 RLPack 1.14 Basic and Full Edition



    + Fixed IAT ordinal processing inside STUB
    + Added export table packing and optional export table stripping
    + Added documentation [help.chm]
    + Added Projects [1.14 Full version]
    + Added error handleing for non .exe files [1.13 Basic and Full version]
    + Added Fake signature option [1.13 Full version]
    + Added unique watermark option [1.13 Full version]
    + Added AntiCracking protection option [1.13 Full version]
    + Added API redirect protection option [1.13 Full version]



    Code:
    http://rlpack.jezgra.net/

  4. #4
    Now we should start to see unpacking attempts. Who's first?

  5. #5
    me :)
    Join Date
    Mar 2006
    Location
    Croatia
    Posts
    25
    Who's first?
    me :P

    here's crackme ( and dumped and unpacked) and signature for peid (crackme packed with v1.14)

    Code:
    [RLPack v1.14 beta -> ap0x]
    signature = 60 E8 00 00 00 00 8B 2C 24 83 C4 04 8D B5 67 02 00 00 8D 9D 2E 01 00 00 33 FF EB 0F FF 74 37 04 FF 34 37 FF D3 83 C4 08 83 C7 08 83 3C 37 00 75 EB 8D 74 37 04 53 6A 40 68 00 10 00 00 68 3B 00 
    ep_only = true
    packed oep: 004050CD

    unpacked: 00401000

    unpacking is not problem just use esp trick if someone needs i can write a tutorial..
    Attached Files Attached Files
    Last edited by Vrane; October 21st, 2006 at 17:31.

  6. #6
    Check File CRC
    AntiCracking protection
    API redirect protection
    Protect from unpacking
    Enforce memory protection
    But did you unpack one with those protections? Without those protections it's no fun - becomes a banal unpacking like UPX. That's why I didn't post at first when I saw
    Please note that RLPack is a packer and will not protect executables from cracking since it doesn`t use any anti* tricks.
    The unpackme says to write a tutorial once it's unpacked... so here:
    1. Open the file in any debugger
    2. Scroll down and BP on the retn after the popad followed by a push xxxxxx.
    3. Run - it'll break on the retn after unpacking.
    4. Step once, there is OEP.
    5. Dump cut useless packer stub, restore imports and OEP, done.
    Easy as UPX.
    Last edited by LLXX; October 21st, 2006 at 22:40.

  7. #7
    me :)
    Join Date
    Mar 2006
    Location
    Croatia
    Posts
    25
    Easy as UPX.
    yes because this is packed with basic edition.. I'll kontakt ap0x can i pack crackme with private version so maybe i upload it

  8. #8

    RLPack - New Year challenge

    RLPack - New Year challenge

    This is the official RLPack unpackme. Unpacking is considered correct if the unpacked Unpack.exe can unpack crackme.fsg.exe. You can not add ap0x unpacking engine .dll files to unpackme to make it work. You can only use things located inside the challenge archive. Due to the fact that unpack.exe uses psapi.dll challenge will work only on NT systems.
    The first one to unpack the official unpackme will get RLPack Full Edition Personal license!

    Download: http://www.yousendit.com/transfer.php?action=download&ufid=81EA4EE319B772DE
    Contact email: ap0x.rce@gmail.com

    Happy cracking
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  9. #9
    me :)
    Join Date
    Mar 2006
    Location
    Croatia
    Posts
    25
    The first one to unpack the official unpackme will get RLPack Full Edition Personal license!
    so people hurry

  10. #10
    : Code Injector : nikolatesla20's Avatar
    Join Date
    Apr 2002
    Location
    :ether:
    Posts
    815
    Quote Originally Posted by ap0x View Post
    RLPack - New Year challenge

    This is the official RLPack unpackme. Unpacking is considered correct if the unpacked Unpack.exe can unpack crackme.fsg.exe. You can not add ap0x unpacking engine .dll files to unpackme to make it work. You can only use things located inside the challenge archive.


    Um hello, this is the most stupid challenge I have read. Got any more restrictions? Why should I bother doing all this work when I can simply add a DLL to a real world app that is protected with this?

    A challenge that actually simulated a real world condition, rather than your safe little bubble, would be more pertinent.

    -niko

  11. #11
    Well one of the new features is .dll file bundleing and that is added to this packed application. So if I have not published those .dll files on my web site you would have the problem since application will not work without them. And since they are in memory you would have to dump and fix them aswell. So this is a real life situation for all application packed with PeBundle, Thinstall or MoleBox.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  12. #12
    nice chalange, and nice coding there
    Last edited by deroko; December 31st, 2006 at 11:22.

  13. #13
    NO NEED 2 UNPACK PROGGY F U CAN PATCH PROGGY

    PACKING MAKE PROGGY ( SMALL + PROTECTED )

    SO UNPACK IZ CONSIDERED CORRECT F UR PATCH

    MAKE THE PROGGYZ CODER CRY
    [ each day pass , we learn more ]

  14. #14
    kamal20
    Guest
    it show pack with aspack but pack with RLPack
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  15. #15
    seven, we are not blind.
    Please consider donating to help Woodmann.com staying online (here is why).
    Any amount greatly appreciated. Thank you.

Similar Threads

  1. ap0x Unpack Engine SDK v1.5
    By LaBBa in forum Tools of Our Trade (TOT) Messageboard
    Replies: 5
    Last Post: September 5th, 2009, 12:53

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •