OpenRCE

📚 OpenRCE is preserved as a read-only archive. Launched at RECon Montreal in 2005. Registration and posting are disabled.

About Articles Book Store Distributed RCE Downloads Event Calendar Forums Live Discussion Reference Library RSS Feeds Search Users What's New

Customize Theme

Flag: Tornado! Hurricane!

Created: Tuesday, November 14 2006 14:01.52 CST

Modified: Thursday, November 16 2006 00:34.43 CST

Printer Friendly ...

Guess who's back, back again!

Author: Piotr

# Views: 1769

CODENAME 4514N - PRE-ANNOUNCE PROPAGANDA
----------------------------------------

Just some info for those who are interrested. I'm currently
working on my masterpiece project, a first gui oriented and
the most advanced integrating-metamorphic engine so far.
Integration engine allows user to integrate any code to any
PE binary file (x86 processors), including device drivers
etc. etc. 4514N engine can rebuild all the PE structure,
internal offsets (jumps,refferences), any type of PE
sections (relocs,imports,exports,resources...), moreover it
even can keep the align of variables. Integration means
that firstly target file is disassembled to pieces (it
creates a chain which connects the body of target file),
then we move that chain, we do everything we want (i call
this step InverseKinematics, just because i'm an 3d graphics hobbyst) and then we compile the chain again. Such horrible
modified application runs perfectly, moreover it is almost
impossible to disinfect the modified target. So tell me, do
you want to compile a rootkit inside of yours ndis.sys? :)

I'm attaching a link to flash demo, where i'm integrating
NOPS to freecell game application.

I don't want to speak much about the metamorphic engine
since it is not 100% ready yet. But the main thing you
should know it is mostly based on the emulation process
(and as far as i know it is the first metamorphic engine
which does so), and many of the muation states are based on
the Automaton Theory (which inspired me a lot). Lets
consider the rest of the features as an future surprise :)

So far project includes:
+ own x86 disassembler
+ own x86 assembler
+ own x86 emulator
+ convertor from IDA disassembly to internal 4514N databases.
+ some cool gui, written by hand :)

If you liked Z0mbie's Zmist, MentalDriller's METAPHOR (if we
consider those stuffs as an state of art), i think you will
be not disappointed.

Release time: Unknown ?? - Were you good? Will the Santa visit you this year? :)

Some links:
* Integration demo:
EDITO: (AVI version - ~7mb):
http://piotrbania.com/all/4514N/demo_integrator.avi

SWF version:
http://piotrbania.com/all/4514N/demo.swf

* Some screenshots: http://www.piotrbania.com/all/4514N/a1.jpg
http://www.piotrbania.com/all/4514N/a2.jpg
http://www.piotrbania.com/all/4514N/a3.jpg

But no matta how many fish in the sea
It'll be so empty without me!

There are 31,328 total registered users.

Recently Created Topics
[help] Unpacking VMP...	Mar/12
Reverse Engineering ...	Jul/06
let 'IDAPython' impo...	Sep/24
set 'IDAPython' as t...	Sep/24
GuessType return une...	Sep/20
About retrieving the...	Sep/07
How to find specific...	Aug/15
How to get data depe...	Jul/07
Identify RVA data in...	May/06
Question about memor...	Dec/12

Recent Forum Posts
Finding the procedur...	rolEYder
Question about debbu...	rolEYder
Identify RVA data in...	sohlow
let 'IDAPython' impo...	sohlow
How to find specific...	hackgreti
Problem with ollydbg	sh3dow
How can I write olly...	sh3dow
New LoadMAP plugin v...	mefisto...
Intel pin in loaded ...	djnemo
OOP_RE tool available?	Bl4ckm4n

Recent Blog Entries
	halsten	Mar/14
Breaking IonCUBE VM
	oleavr	Oct/24
Anatomy of a code tracer
	hasherezade	Sep/24
IAT Patcher - new tool for ...
	oleavr	Aug/27
CryptoShark: code tracer ba...
	oleavr	Jun/25
Build a debugger in 5 minutes
More ...

Recent Blog Comments
	nieo on:	Mar/22
IAT Patcher - new tool for ...
	djnemo on:	Nov/17
Kernel debugger vs user mod...
	acel on:	Nov/14
Kernel debugger vs user mod...
	pedram on:	Dec/21
frida.github.io: scriptable...
	capadleman on:	Jun/19
Using NtCreateThreadEx for ...
More ...

Imagery

SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit