首页
社区
课程
招聘
[ZT]Oepfind 1.5 + src by Human
发表于: 2007-1-29 11:51 1949

[ZT]Oepfind 1.5 + src by Human

2007-1-29 11:51
1949
From:EXETOOLS


1.57
well well new oepfind and a lot of new things:
1.added restore_guard on illegal_instruction exception
2.added comandline passing to target, you can also write or mod commandline in edit window
3.added GetTickCount +1 hook on every call
4.added ZwSetInformationThread hook
5.added unhook of hooks before detach
6.recoded calculcate of hooks lenght, shit masm makes jokes of size when using in invoke offset2-offset1
for example offset end_gettickcount-offset hook_gettickcount is 15 bytes, in invoke masm calculates it as 20 bytes
7.now we can reach oep of securom 7.29+ with another process spawn when you get params
just debug game and break on CreateProcessA and commandline is param for spawning right target

for example rainbow six vegas 1.02 patch
use:
oep.exe R6Vegas_Game.exe /Sonydadc /05f0612d /05f0612d /3F3A8A87 /1

/1 is value from GetTickCount but due we hooked it and count +1 from 0 we have 1 instead of /DEADC0DE for example
and we reach 117C0036 as oep

[课程]Android-CTF解题方法汇总!

上传的附件:
收藏
免费 1
支持
分享
最新回复 (0)
游客
登录 | 注册 方可回帖
返回
//