Page 1 of 2 12 LastLast
Results 1 to 15 of 21
  1. #1
    Jason's Avatar
    Join Date
    Apr 2010
    Gender
    male
    Location
    /dev/null
    Posts
    5,704
    Reputation
    918
    Thanks
    7,676
    My Mood
    Mellow

    Basic PE Explorer (v1.0 BETA)

    Hey guys, been working with PE for quite a few weeks now and decided to actually make an application using the libraries I create during that time. It is a relatively basic mimic of the "PE Explorer" application, however it also lets you parse PEs from modules loaded in processes and shit, which I thought was handy..

    Here's some screenshots (Yeah, the GUI is yucky, I was lazy)

    Opening process modules...


    Characteristics and shit


    Imports Table


    Credits to the boice


    It's pretty basic as you can see.

    This is by no means complete, the export table is only a partial parse, because I got frustrated at it. There are still 14 other sections in a standard PE file that I will probably never get around to doing.

    Common errors:
    Can't see a process you think should be open?
    At this stage I only made it extract processes that have a window, longer lists would take a while to extract all the icons and create the list...etc. Also, can't parse 64-bit processes due to protection problems.

    Planned future features
    Hopefully I end up finishing the export table, I'm probably going to rethink and rework the process module selection ergonomics 'cos at the moment it's a touch laggy for a MenuStrup.

    Credits (though they are in the screenshot)

    The fantastic documentation of the PE structure by Microsoft (97 pages of pure sex)
    David
    Hell_Demon

    Has been a good learning experience.

    Scans:

    [x][x]

    Enjoy,
    Jason

    Quote Originally Posted by Jeremy S. Anderson
    There are only two things to come out of Berkley, Unix and LSD,
    and I don’t think this is a coincidence
    You can win the rat race,
    But you're still nothing but a fucking RAT.


    ++Latest Projects++
    [Open Source] Injection Library
    Simple PE Cipher
    FilthyHooker - Simple Hooking Class
    CLR Injector - Inject .NET dlls with ease
    Simple Injection - An in-depth look
    MPGH's .NET SDK
    eJect - Simple Injector
    Basic PE Explorer (BETA)

  2. The Following 30 Users Say Thank You to Jason For This Useful Post:

    ♪~ ᕕ(ᐛ)ᕗ (06-20-2011),'Bruno (06-19-2011),Afro_ (06-28-2015),Blubb1337 (06-19-2011),cmc5414 (08-24-2012),decomodo (09-18-2015),FUKO (07-28-2011),GerCode (05-22-2013),GicuPiticu (05-07-2016),Hassan (08-24-2011),HeavenlyRage (08-16-2011),Hellix (09-22-2015),Hell_Demon (06-19-2011),kafilee (08-15-2011),killer250 (07-05-2013),Lyoto Machida (06-20-2011),[MPGH]master131 (06-19-2011),medievil17 (01-08-2014),Mohd Syahmie (05-08-2012),Morgaandu76700 (09-14-2014),Muhammad Danish2 (10-29-2012),ParkII (09-08-2011),pionkjeffery (11-22-2012),qet123 (03-13-2013),tarunongalam (04-26-2012),Tombas (03-19-2014),warcraff123456 (07-01-2012),WeedWeedWeed (05-04-2018),ziziou (04-15-2014),___guilherme___ (08-30-2011)

  3. #2
    Hell_Demon's Avatar
    Join Date
    Mar 2008
    Gender
    male
    Location
    I love causing havoc
    Posts
    3,976
    Reputation
    343
    Thanks
    4,320
    My Mood
    Cheeky
    I guess auto-approve is back on in this section, and lolpenis I only blocked you for a day <:
    Ah we-a blaze the fyah, make it bun dem!

  4. The Following User Says Thank You to Hell_Demon For This Useful Post:

    HeavenlyRage (08-16-2011)

  5. #3
    'Bruno's Avatar
    Join Date
    Dec 2009
    Gender
    male
    Location
    Portugal
    Posts
    2,883
    Reputation
    290
    Thanks
    1,036
    My Mood
    Busy
    Good job jason.
    Light travels faster than sound. That's why most people seem bright until you hear them speak.

  6. #4
    Jason's Avatar
    Join Date
    Apr 2010
    Gender
    male
    Location
    /dev/null
    Posts
    5,704
    Reputation
    918
    Thanks
    7,676
    My Mood
    Mellow
    Quote Originally Posted by Brinuz View Post
    Good job jason.
    OMG THANKS MEN.

    Quote Originally Posted by Jeremy S. Anderson
    There are only two things to come out of Berkley, Unix and LSD,
    and I don’t think this is a coincidence
    You can win the rat race,
    But you're still nothing but a fucking RAT.


    ++Latest Projects++
    [Open Source] Injection Library
    Simple PE Cipher
    FilthyHooker - Simple Hooking Class
    CLR Injector - Inject .NET dlls with ease
    Simple Injection - An in-depth look
    MPGH's .NET SDK
    eJect - Simple Injector
    Basic PE Explorer (BETA)

  7. The Following User Says Thank You to Jason For This Useful Post:

    HeavenlyRage (08-16-2011)

  8. #5
    ♪~ ᕕ(ᐛ)ᕗ's Avatar
    Join Date
    Jun 2010
    Gender
    male
    Location
    Uterus
    Posts
    9,117
    Reputation
    1096
    Thanks
    1,970
    My Mood
    Doh
    GUI ain't yucky. In my opinion it is amazing!
    VB .NET or C# ?

  9. #6
    Jason's Avatar
    Join Date
    Apr 2010
    Gender
    male
    Location
    /dev/null
    Posts
    5,704
    Reputation
    918
    Thanks
    7,676
    My Mood
    Mellow
    Quote Originally Posted by Horatio Caine View Post
    GUI ain't yucky. In my opinion it is amazing!
    VB .NET or C# ?
    C#, of course . Ditched VB a while ago.

    Quote Originally Posted by Jeremy S. Anderson
    There are only two things to come out of Berkley, Unix and LSD,
    and I don’t think this is a coincidence
    You can win the rat race,
    But you're still nothing but a fucking RAT.


    ++Latest Projects++
    [Open Source] Injection Library
    Simple PE Cipher
    FilthyHooker - Simple Hooking Class
    CLR Injector - Inject .NET dlls with ease
    Simple Injection - An in-depth look
    MPGH's .NET SDK
    eJect - Simple Injector
    Basic PE Explorer (BETA)

  10. The Following User Says Thank You to Jason For This Useful Post:

    HeavenlyRage (08-16-2011)

  11. #7
    Hell_Demon's Avatar
    Join Date
    Mar 2008
    Gender
    male
    Location
    I love causing havoc
    Posts
    3,976
    Reputation
    343
    Thanks
    4,320
    My Mood
    Cheeky
    This section is more dead then the hooker in jasons closet(don't worry, it was a natural death)
    Daum 1 whole download o.o
    Ah we-a blaze the fyah, make it bun dem!

  12. The Following User Says Thank You to Hell_Demon For This Useful Post:

    HeavenlyRage (08-16-2011)

  13. #8
    Jason's Avatar
    Join Date
    Apr 2010
    Gender
    male
    Location
    /dev/null
    Posts
    5,704
    Reputation
    918
    Thanks
    7,676
    My Mood
    Mellow
    Quote Originally Posted by Hell_Demon View Post
    This section is more dead then the hooker in jasons closet(don't worry, it was a natural death)
    Daum 1 whole download o.o
    If by "natural death" you mean choked on my massive wang, then yeah it was a "natural death".

    But yeah, whole programming section is pretty much dead.

    Quote Originally Posted by Jeremy S. Anderson
    There are only two things to come out of Berkley, Unix and LSD,
    and I don’t think this is a coincidence
    You can win the rat race,
    But you're still nothing but a fucking RAT.


    ++Latest Projects++
    [Open Source] Injection Library
    Simple PE Cipher
    FilthyHooker - Simple Hooking Class
    CLR Injector - Inject .NET dlls with ease
    Simple Injection - An in-depth look
    MPGH's .NET SDK
    eJect - Simple Injector
    Basic PE Explorer (BETA)

  14. The Following 2 Users Say Thank You to Jason For This Useful Post:

    HeavenlyRage (08-16-2011),Hell_Demon (06-20-2011)

  15. #9
    'Bruno's Avatar
    Join Date
    Dec 2009
    Gender
    male
    Location
    Portugal
    Posts
    2,883
    Reputation
    290
    Thanks
    1,036
    My Mood
    Busy
    I blame Jason obv
    Light travels faster than sound. That's why most people seem bright until you hear them speak.

  16. #10
    ♪~ ᕕ(ᐛ)ᕗ's Avatar
    Join Date
    Jun 2010
    Gender
    male
    Location
    Uterus
    Posts
    9,117
    Reputation
    1096
    Thanks
    1,970
    My Mood
    Doh

    Post 10 year old child's porn and it will attract ppl from general.

  17. #11
    'Bruno's Avatar
    Join Date
    Dec 2009
    Gender
    male
    Location
    Portugal
    Posts
    2,883
    Reputation
    290
    Thanks
    1,036
    My Mood
    Busy
    Quote Originally Posted by Horatio Caine View Post

    Post 10 year old child's porn and it will attract ppl from general.
    No thanks...

    Personally I prefer Empty instead of trolls and leechers.
    Light travels faster than sound. That's why most people seem bright until you hear them speak.

  18. The Following User Says Thank You to 'Bruno For This Useful Post:

    Hell_Demon (06-20-2011)

  19. #12
    Jason's Avatar
    Join Date
    Apr 2010
    Gender
    male
    Location
    /dev/null
    Posts
    5,704
    Reputation
    918
    Thanks
    7,676
    My Mood
    Mellow
    Quote Originally Posted by Brinuz View Post
    No thanks...

    Personally I prefer Empty instead of trolls and leechers.
    Not to mention child porn.

    Quote Originally Posted by Jeremy S. Anderson
    There are only two things to come out of Berkley, Unix and LSD,
    and I don’t think this is a coincidence
    You can win the rat race,
    But you're still nothing but a fucking RAT.


    ++Latest Projects++
    [Open Source] Injection Library
    Simple PE Cipher
    FilthyHooker - Simple Hooking Class
    CLR Injector - Inject .NET dlls with ease
    Simple Injection - An in-depth look
    MPGH's .NET SDK
    eJect - Simple Injector
    Basic PE Explorer (BETA)

  20. The Following User Says Thank You to Jason For This Useful Post:

    HeavenlyRage (08-16-2011)

  21. #13
    ♪~ ᕕ(ᐛ)ᕗ's Avatar
    Join Date
    Jun 2010
    Gender
    male
    Location
    Uterus
    Posts
    9,117
    Reputation
    1096
    Thanks
    1,970
    My Mood
    Doh
    Quote Originally Posted by Jason View Post


    Not to mention child porn.
    Then mention 20 years old peeps porn.

  22. #14
    Lyoto Machida's Avatar
    Join Date
    Jan 2011
    Gender
    male
    Location
    Far away with girls
    Posts
    3,734
    Reputation
    133
    Thanks
    1,621
    My Mood
    Aggressive
    Jason is Epic as always

  23. #15
    Jason's Avatar
    Join Date
    Apr 2010
    Gender
    male
    Location
    /dev/null
    Posts
    5,704
    Reputation
    918
    Thanks
    7,676
    My Mood
    Mellow
    Quote Originally Posted by Horatio Caine View Post


    Then mention 20 years old peeps porn.
    If you want to talk about porn, go to a pornsite, we don't need stupid shit here.

    Quote Originally Posted by Jeremy S. Anderson
    There are only two things to come out of Berkley, Unix and LSD,
    and I don’t think this is a coincidence
    You can win the rat race,
    But you're still nothing but a fucking RAT.


    ++Latest Projects++
    [Open Source] Injection Library
    Simple PE Cipher
    FilthyHooker - Simple Hooking Class
    CLR Injector - Inject .NET dlls with ease
    Simple Injection - An in-depth look
    MPGH's .NET SDK
    eJect - Simple Injector
    Basic PE Explorer (BETA)

  24. The Following 3 Users Say Thank You to Jason For This Useful Post:

    'Bruno (06-20-2011),Geomatrical 0 (12-25-2012),Hell_Demon (06-20-2011)

Page 1 of 2 12 LastLast