Log in

View Full Version : Native Blocks Pre-Alpha


Daniel Pistelli
June 30th, 2009, 10:18
Hello, I wanted to show you my new tool. I called it Native Blocks. It's a re-assembler basically. Since a written presentation would take me too much time I prepared a video presentation.

http://www.youtube.com/watch?v=pDlwStN3KZY
http://www.youtube.com/watch?v=ene6hvE5qVQ

Again, this is a pre-alpha. This tool will soon support other technologies such as java, actionscript and maybe even x86. Right now it only supports .NET (and even .NET support will be hugely improved, like for instance supporting the direct modification of assemblies without having to use Rebel.NET).

The development of this tool depends mainly on the interest of people.

As I can be considered a student from now on, I would like to earn some extra money by writing tools such as this one. I have still my job as consultant, but it's a very limited partime, because I just became a student.

This tool is in my opinion pretty good, it is not only good for deobfuscation purposes but also patching and assembling on the fly.

If this tool can be sold, then the support of technologies will depend on requests. I think I'll add Java immediately and after that maybe x86/x64. Again it depends.

Suggestions and comments are welcome.

dELTA
June 30th, 2009, 10:48
Haha, damn, that's some mean stuff Daniel! (as usual though )

Can't wait to see the support for Java and X86/x64 too, then it will be REALLY mean, as if the current state wouldn't be enough!

No download link so that we can play with it our selved though? (I can't reach ntcore.com to check for myself for some reason eother, is it down?)

EDIT:
Can reach ntcore.com now, and can't find it there either.

Daniel Pistelli
June 30th, 2009, 10:51
NTCore is down? this is interesting...

Thanks.

EDIT: I refreshed and it works now. Strange...
Sorry delta, as I mentioned it is a pre-alpha and I sure would like to make a version for people like you to test it, but as said I would like to see if it has a possible commercial future, so I won't provide direct downloads.

dELTA
June 30th, 2009, 10:53
Temporary network problem maybe, I can reach it again, as per my edit above.

EDIT:
Ok, I see about the download. Just let us know when there's something to play with.

Tora
July 1st, 2009, 05:34
Wow, nice video ^^ Just one question... you said about the scripting feature that "in this case we're going to use javascript". That means more languages are (going to be) supported?

Daniel Pistelli
July 1st, 2009, 06:36
I thought eventually to implement python, the problem is that it's going to cost me a bit more of work. Javascript was faster to emebed as it is provided by the fx. However, I don't think JS is the worst option, it resembles IDA's idc.


I forgot to mention one thing: this application can be compiled on every operating system (win, osx, linux etc.) in theory, I didn't bother since I think most rev goes on on windows.

arc_
July 1st, 2009, 15:29
The video doesn't work for me, but I guess the tool is like Hiew, only generic. Which sounds very promising indeed.

Daniel Pistelli
July 2nd, 2009, 05:45
I'm sorry, I don't know what happened with the video there, it just was removed from megavideo without giving me a reason. I split it in two parts and uploaded it to youtube.

BanMe
July 5th, 2009, 08:39
this is a excellent tool and looks to hold much promise, not for just reversing but for other applications as well.. congratulations on a great piece of work

regards BanMe

Daniel Pistelli
July 6th, 2009, 08:12
Thanks BanMe, this is encouraging. But still this tool needs lots of work. However, I have some neat ideas even for x86-64.

evilcry
July 6th, 2009, 13:23
as usual great work Daniel!

with some addition will be also an handy tool for professionals!