Hi All,

In the virus research arena, code added to a file is usually considered 'payload delivery' or 'infection'. If using an RPC mechanism such as netcat (and placing code directly in memory without a host file or executable), this is usually referred to as injection. At times, when one does not desire a derogatory overtone, one would simply use 'patch'.

Has any one else come across the term X-Code (meaning patched code)? Two of the books I have recently read on Cracking techniques uses it frequently (both by the same author). I'm not convinced it's worth mentioning, but I wanted to check with folks who are more active in the cracking scene than I am...

Jeff
Jeffrey Walton

and what's the thing that author named X-Code?

Hi dereko,


The patch. It is the same technique (the best I can tell) demonstrated by Razzia in his modification of Notepad (http://www.woodmann.com/fravia/razzcripp.htm). But the author's technique includes a very detailed explaination of the modifications to the PE header (which may or may not be required), where Razzia required no modifications if I recall correctly.

He (the author) also makes references to Neo and his epic battles in the Matrix Trilogy, which leads me to believe he may watch too much television.

Jeff

Hi dereko,


Just my point... Taking from Wikipedia, "The use of neologisms should be avoided in Wikipedia articles because they are not well understood, are not clearly definable, and will have different meanings to different people." Reference http://en.wikipedia.org/wiki/Wikipedia:Avoid_neologisms.

Jeff

ah so he calls this way of patching X-code. I call it adding code to the image. What are you going to do with added code is your choice, it can be vx, patcher, loader etc.

Why ppl call you dereko? (like: http://forums.accessroot.com/?showtopic=6197&hl=dereko# ) :P

well X code iirc was the name given to inserting extra code in pe executable by kris kaspersky in his hacker disassembling uncovered book he recently posted some draft papaer on openrce which talks about this x code thingy

http://www.openrce.org/forums/posts/625

@blurcode: I have no idea

Hi blabberer,


Yep... He is the one to whom I am referring. I did not want to name hime directly.

Why? Are you afraid he's going to come after you?


I haven't seen "X-code" in this context either, the only thing that comes to mind is this: http://en.wikipedia.org/wiki/Xcode