Spoof Call and Spoof SMS set any caller ◆ Private Crypter - Unique Private Stubs ◆ Cheap KYC Verifications & Openups ◆ Traffic service & campaign optimization ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Tech Coding Software Development › [C#] PEToolkit || Module Dumper || PE Viewer || RunPE Check

New Reply 
C# 

PEToolkit || Module Dumper || PE Viewer || RunPE Check
BahNahNah
BahNahNah Offline
Yikes, too edgy bro
***
HF Ub3r
Posts:
3,214
Threads:
102
Credibility:
000
Popularity:
221
βytes:
β 0
Game XP:
749
Oct 16, 2015 01:05 AM (This post was last modified: Dec 2, 2015 05:17 PM by BahNahNah.)
I needed a PE viewer because the one i was using told me i had to pay for it >.<

Download: Github

Gif:
Spoiler (Click to View)

Screenshots:
[Image: GNEIW7a.png]

[Image: 56JCBrU.png]

[Image: U92zlcZ.png]
Lotta blood to let, peace to make, give a fuk about a check
ProtectNull™
ProtectNull™ Offline
Software and Hardware Enthusiast
****
HF Ub3r
Posts:
6,436
Threads:
574
Credibility:
1000
Popularity:
297
βytes:
β 0
Game XP:
0
Oct 16, 2015 01:17 AM
Nice program BahNahNah :)
STOP WASTING TIME! GET THE REAL METHODS NOW!
/2Omrq0Q][Image: HDEJvpa.png]
Multibyte
Multibyte Offline
C9H13N
**
HF Ub3r
Posts:
370
Threads:
7
Credibility:
000
Popularity:
21
βytes:
β 0
Game XP:
0
Oct 16, 2015 01:19 AM
I'm gonna check it out, thanks for the release Sir 🙂.
[Image: ezgif-2-dcabfc0d37ae.gif]
DisguiserNET
DisguiserNET Offline
Beeing busy
***
HF Ub3r
Posts:
606
Threads:
24
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Oct 16, 2015 02:18 AM
cff explorer or dnspy would have already offered all this, but well done anyway!
Barthezz
Barthezz Offline
[n00b@HF:]
*
Registered
Posts:
86
Threads:
5
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Oct 16, 2015 10:37 AM
Thanks for this, and vouch for BahNahNah
BahNahNah
BahNahNah Offline
Yikes, too edgy bro
***
HF Ub3r
Posts:
3,214
Threads:
102
Credibility:
000
Popularity:
221
βytes:
β 0
Game XP:
749
Dec 2, 2015 05:16 PM
1.0.0.2

Added extra PE structures for .net folds and processes. (COR20, MetaData, Table Stream Headers, Data Streams)

[Image: Yx75V4H.png]

Storage Streams:
Spoiler (Click to View)

To do
-Add hex viewer for storage streams
-Parse text from "US" storage stream (mabe)
-Add support for table stream rows
Lotta blood to let, peace to make, give a fuk about a check
Only3
Guest
 
Dec 3, 2015 08:47 AM
To Do : Import Export Resource Diretorys
at the end u understand him 😁
Hoody
Hoody Offline
[closed@HF:]
Posts:
807
Threads:
51
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Dec 7, 2015 05:54 PM (This post was last modified: Dec 7, 2015 05:58 PM by Hoody.)
Hey BahNahNah, whats up bro?

Just thought I'd bug you, technically the 'MZ' signature at the beginning of a DOS header is not a "String" as you say in your program. It is a WORD orrr uint16. A string needs to be null terminated...

EDIT: annndddd for the RunPE check, you should exclude the ImageBase value. Because in the file, it points to the base in the file. And in memory (the process) it points to where the Image was mapped in memory, which is not the same offset from the pointer as in the executable file.
BahNahNah
BahNahNah Offline
Yikes, too edgy bro
***
HF Ub3r
Posts:
3,214
Threads:
102
Credibility:
000
Popularity:
221
βytes:
β 0
Game XP:
749
Dec 7, 2015 07:31 PM
(Dec 7, 2015 05:54 PM)Hoody Wrote:  Hey BahNahNah, whats up bro?

Just thought I'd bug you, technically the 'MZ' signature at the beginning of a DOS header is not a "String" as you say in your program. It is a WORD orrr uint16. A string needs to be null terminated...

EDIT: annndddd for the RunPE check, you should exclude the ImageBase value. Because in the file, it points to the base in the file. And in memory (the process) it points to where the Image was mapped in memory, which is not the same offset from the pointer as in the executable file.

Thanks for the heads up on the RunPE checker, fixed.
I know that the magic numbers are 2 byte unassigned numbers, but i prefer to display the DOS one as a string. I have changed the type display from "String" to "char[]" though.
Lotta blood to let, peace to make, give a fuk about a check
Hoody
Hoody Offline
[closed@HF:]
Posts:
807
Threads:
51
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Jan 7, 2016 05:20 PM
For how much work you put into this you received so little credit :/
Lijpee
Lijpee Offline
[n00b@HF:]
*
Registered
Posts:
21
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 3, 2016 03:04 PM
Beautiful BahNahNah, as always. Keep up the good work! Beudiful.
KillaMuvz_temp
Guest
 
Feb 22, 2016 05:27 AM
I saw this a while ago, but didn't expect it to only have 2 pages of replies. Excellent job.
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
[.NET] by revtorusJan 9, 2018 06:59 PM 13 2,921 Jan 9, 2018 06:59 PM
Last Post: ๖ۣۜchαmєllєσ
[C#] by cyberdogMay 28, 2017 04:34 AM 7 692 May 28, 2017 04:34 AM
Last Post: ubbelol
[C#] by debugApr 29, 2017 02:25 PM 21 3,767 Apr 29, 2017 02:25 PM
Last Post: EZLib