Friday, August 7, 2009

chapljaVM - my own x86-like assembler/virtual machine

I have no idea if these are the right terms to name something like this, but I call it my own virtual machine/assembler.

I work on a lot of stuff that relies on security-through-obscurity and also own legal licenses for some commercial protection tools, but I always wanted to make something on my own. I believe that home made protection is usually better than anything else, even if it's technically weaker.

Basically this is an assembler that gets "compiled" into an executable image that can be loaded using appropriate runtime library.

This archive contains an example assembler source code and a "compiler" plus code required to execute binaries.

More information available in the readme.

Download: chapljaVM.rar

Browsing vBulletin mysql database dumps

If you have a mysql dump of a vBulletin forum, you don't have to install the entire forum package to read it, you can instead use this simple script I made.

Download: vb_reader.rar

Parsed metasploit windows syscall table

Someone on game-deception is working on something based on this, so I shared what I did a while ago, but also posting it here for anyone interested.

I am of course talking about the following website:
http://www.metasploit.com/users/opcode/syscalls.html

... this file is basically a C (and C++) header based on information on that webpage. It does not include all syscalls, only those that are available on all listed versions of windows. Windows 7 is not included. It contains a table of syscall numbers sorted per windows version and also function prototypes.

Download: Parsed_Syscalls.h

MassImport - Import tons of WINAPIs to create confusion

Just a small code snippet that will reference (import) many WINAPIs at compile time.

This is pretty lame, but I often don't want people to know exactly which WINAPIs I use and feel lazy for importing them manually, so I made something that will import many APIs and it won't be obvious which ones exactly I use. :P

Download: MassImport.rar