News | Debuggers | Disassemblers | Monitors/Tracers | Packers/Encryptors | Unpackers/Decryptors | Patchers | Tools | Links
HEX Editors | ||
A.X.E. Version 2.1 | axe.zip (288kb) |
A.X.E. is a Hex Editor for Windows 95/98/NT.
A.X.E. offers advanced features such as the ability to mark non-contiguous areas of a file, the ability to
automatically perform arithmetic on areas of bytes, storable lists of bookmarks, serious Undo, and versatile
search and navigation commands. The most powerful feature of A.X.E. is the ablility it gives the user to
define their own structures and view and edit data in a spreadsheet-like way using a structure rather than raw
hex. Author: Benjamin Peterson http://www.kahei.com |
BIEW Version 5.2.0 | WIN
version biew520.zip (211kb) DOS32 version Source code: |
Biew is Binary vIEWer with built-in editor for binary, hexadecimal
and disassembler modes. Features:
Author: Nick Kurshev |
HackMan v8.01 | hack801.zip (3.7mb) |
HackMan is a
powerful tool for debugging and editing source code. Its purpose is to
enable you to edit, modify or monitor the source code of your
applications. Features:
Authors: Fotis
Fotopouos, Aristotelis Charalampakis |
HackMan v4.04 (upgrade) | hack404u.zip (1,1mb) |
|
HackMan v5.0 beta 4 | hack5b4.zip [hack50b4.zip - MISSING] (4,54mb) |
|
HexIt v1.57 | hexit157a.zip (139kb) |
HexIt is a binary editor. Main features:
Author: Mikael Klasson |
HIEW
6.50 (Hacker's view) |
hiew650.zip (726kb) |
One of the *best*
hexeditors. Features:
Author: Eugene Suslikov (SEN) |
QView ver 2.69.03 | qview269.rar (158kb) |
*Very good* hexeditor similar
to HIEW. Features:
Author: Alexandr Gazko |
qv28003.zip (80kb) |
QView update to version 2.80.05. | |
Hex Workshop v3.11 | hw32v22.zip (1,7mb) |
Hex Workshop,
is a set of hexadecimal development tools for 95, and NT, combining advanced
binary editing with the ease and flexibility of a word processor. With Hex Workshop you
can edit, insert, delete, cut, copy, and paste hex, print high quality customizable hex
dumps, and export to RTF or HTML for publishing. Additionally you can goto, find, replace,
compare, and calculate checksums within a file. Producer: BreakPoint Software http://www.bpsoft.com |
WinHex 9.72 | winhex.zip (551kb) |
Hexadecimal File, Disk & RAM Editor. Features:
Author: Stefan Fleischmann |
winhex.pdf (121kb) |
WinHex manual. |
Resource Browsers/Editors |
||
Borland Resource Workshop 4.5 | brw45.zip (933kb) |
Good old tool to view/modify resources
(menus, dialogs, strings, icons, etc.) Producer: Inprise (Borland) |
eXeScope 6.40 | exesc640.rar (551kb) |
Very useful resource browser/editor.
Features:
Author: Toshi |
Resource Builder 1.0 Update pack 1 | rbsetup.zip (1,5mb) |
Powerful tool for visual building RC scripts and resource files for your applications. Features:
Producer: SiComponents |
Resource-Grabber v2.68c | ResGrabr.EXE (1,106mb) |
Resource-Grabber is an utility
for programmers who need images, button glyphs, icons etc. for their programs.
It will analyze the .DLL,.EXE and other files on your computer and extract all bitmaps, glyphs, icons,
cursors, JPG images, AVI video clips, WAVE and RMI sound files it finds in these files to a directory
of your choice. It also retrieves dialog forms, strings, fonts, program menus and other embedded
stuff. Producer: Inner-Smile.com http://Inner-Smile.com Support@Inner-Smile.com |
Restorator 2.50 | restorator25.zip (1mb) |
Restorator allows you to modify the user interface of any Windows 32-bit program and create your own UCA's (User-styled custom
application). You can view, extract and change images, icons, text, menus,
dialogs, sounds, animations, and many more. It can be seen as a skin-editor, mod-maker or just resource editor. (Restorator2018_Full_1793.exe Author: Florian Bomers http://www.bome.com/Restorator/ |
Symantec ResourceStudio32 1.0 | resedit.zip (1,855kb) |
This tool is similar to Resource Workshop. Producer: Symantec |
File Analyzers |
||
ChkEXE v1.17 | chkex117.rar (72kb) |
Identifies almost any DOS EXE/COM packer,
crypter or protector. Author: Hann0 Boeck http://www.xoom.com/hanno hanno@gmx.de |
EXESCAN v3.21 | es321.zip (70kb) |
EXESCAN is an executable file
analyzer which detects the most famous EXE/COM protectors, packers, converters and compilers.
Author: ST!LLS0N |
File Analyzer v1.6.01.09.2000 | fa.zip (139kb) |
File Analyzer written for files
recognition. FA recognize many file packers, compilers, encruptors etc. Also FA can
recognize many non-exectable files, for example: archives, graphic files, music modules
and much more. FA can also list contents of archives. Supported file formats:
Author: Vadim Tarasov |
FileInfo v2.42 | fi.zip (134kb) |
FileInfo is a mighty tool to analyze of any file.
Author: M.Hering |
File Scanner 04-01-2001 | fs.zip (156kb) |
File Scanner is a freeware program for identifying differrent
file formats. Now it can do something more, such as unpacking or decrypting DOS executable files, calculating sizes of
directories, handle headers of executables, playing sounds, edit binary files in hex, ascii or asm mode and displaying ANSI pictures. Author: SMT http://smf.chat.ru/ mail4smt@yahoo.com |
GetEQExe 3.48 | gee348.zip (24kb) |
GetEQExe is a program to
compare the startup code of COM files, DOS executables or Windows PE executables or normal
files. Very useful tool. Author: PHaX http://surf.to/phax phax@writeme.com |
GetTyp 2.60 |
DOS version gt260.zip (170kb) |
GetTyp is a file format
detection program. It detects several formats without looking at the filename. It searches the code for special strings and
byte code to identify the fileformat. Features:
Author: Philip Helger |
WIN version gtw260.zip (179kb) |
||
GetTyp 2000 for Windows 0.24 | gt024.zip (187kb) |
|
GTUI v1.14 (GetTyp User Interface) | gtui114.zip (17kb) |
GTUI is a user interface for GetTyp for Windows. Author: Philip Helger http://surf.to/phax phax@writeme.com |
PE-Sniffer 1.02 | pesniff102.zip (136kb) |
This tool is intended to
determine if a scanned PE file is compressed/encrypted by one of the
encryptors/compressors which Pe-Sniffer is abble to recognize. Author: SkymarShall http://start.at/skymarshall skymarshall@ifrance.com |
ScanEXE/COM v2.00 | ucfscan2.zip (72kb) |
ScanEXE/COM is an Executable
File Scner, that checks if an EXE/COM is crypted or packed with an EXE/COM-Crypter/Packer.
This program is written for Crackers/Hackers to find this nasty protection in no time. Author: DarK-MaN http://www.ucf2000.com |
Executable Info/Browsers | ||
PEBrowse Professional 1.18.2 | PEBrowse.zip (842kb) |
PEBrowsePro is a GUI-substitute for Microsoft's DUMPBIN and Borland's TDUMP utilities. Information is displayed in a handy MDI interface. Information on imports, exports, and resources is just a mouse-click away. You can disassemble any part of an executable that follows the Portable Executable (Win32) specification, including EXE, DLL, OCX, SYS, etc. files. You can also extract resources in their raw format and/or as resource compiler statements. In addition, PEBrowsePro has the ability to display ANY file of any size and perform searching by hex-values, ANSI string, or UNICODE string values. Optional integrated API help added. Start disassemble at a selected address. Disassembly listings enhanced (object code display optional, jumptable references added). Supports PEBrowsePro session creation/restore. Author: Russel Osterlund http://www.smidgeonsoft.com |
PEBrowse Professional Interactive 1.4 | PEBrowseDbg.zip |
Author: Russel Osterlund |
Turbo Dump Version 4.2.16.1 | tdump.zip (85kb) |
Turbo Dump is
a command line application that display internal informations about
executable (MZ, PE, LE, NE etc...) Producer: Borland (Inprise) |
Executable Tools | ||
Function Replacer Version 1.0 | ex-fr.zip[ex-fr.zip - MISSING] (83kb) |
This
tool allows you to replace any export from a DLL with another DLL's
export. It performs an automatic loading of the DLL + getting the function's
address, then calling it. Author: DEATH ab4ds@hotmail.com |
IID King v1.0 | iidking.zip (9kb) |
IID King allows you to add imports to ANY PE file's import
table, thereby eliminating the need to have to do LoadLibrary then GetProcAddress and all that other bull to get functions
added. Author: SantMat http://www.ImmortalDescendants.org |
Imagebase Changer | ex-relc.zip[ex-relc.zip - MISSING] (104kb) |
This tool is able to change to Imagebase of Win32 files. Author: Predator NLS |
Imhotep v1.2.0.15 | imhotep.zip[imhotep.zip - MISSING] (183kb) |
You
can use this program to remove the junk from PE sections (i.e. useless jumps).
The Safedisc protection (for example) use this scheme to make reversing harder. Author: ArthaXerXes xerxes@altern.org http://www.altern.org/xerxes/ |
Import/Export viewer | imp-exp.zip (19kb) |
Import/Export viewer is a util which reads the imported as well as the exported
functions of the specified file and shows them to you. Author: alpine http://www.ImmortalDescendants.org alpine@gmx.at |
MakePE v1.30 | mkpe130.zip (27kb) |
MakePE is a PE structure
rebuilder. From a dump, made with ProcDump(TM) or with GTR95(TM) or one you did under
SoftICE (TM), it will try to rebuild the PE header, import section (when possible) and can
reoptimize your dump to reduce it. It can load too a standard PE file and will try to
reduce it. Author: G-RoM g-rom@innocent.com |
PEBundle v1.02 | pebsetup.zip (336kb) |
PEBundle is a revolutionary tool that allows for DLLs or other files to be ‘bundled’ with an
executable, therefore removing the requirement to distribute the bundled files separately from the
application. With two operational modes, one that uses advanced techniques to resolve
dependencies on a bundled DLL in memory without ever extracting to disk, and another that extracts
bundled files to disk at runtime, PEBundle is a great tool to optimize software distributions. As an
added benefit, bundled files may be compressed when using the Write-To-Disk module Author: Jeremy Collake http://www.collakesoftware.com collake@charter.net |
PEditor 1.7 | PEditor.zip (417kb) |
PE executable file
editor. Features:
Authors: M.o.D. and yoda |
PE Fixer v1.0 | bpef10.zip (8kb) |
This utility is for when you are unpacking an app and you need to fix the section data so that the PSize = VSize and Offset =
RVA. Instead of having to go through each and every section in Procdump, just fire up this
util, click on the button, select the file, and you're done. Author: Bonkers bonker_@hotmail.com |
PE Rebuilder v0.96b | pereb095.zip (73kb) |
This tool has been made for
following aims: realign PE file, fix section sizes, rebuild import table,
restructure resource directory, fix section RAW offsets, super-align, wipe the .reloc section.
Sources included.
Authors: TiTi & Virogen http://titiasm.cjb.net, titi@thedorm.com http://virogen.cjb.net, vgen@hotmail.com |
update: perebuilder.zip (30kb) |
||
PE Validator 1.0 - BETA | pevalid.zip (7kb) |
PE Validator is a small tool that adjusts PE headers of EXE
files that don't run under Win2K (this file is not a valid Win32 Executable) so that they run under Win2K. It is still
a - nearly untested - BETA version, so you better make backups of the files you patch with it ;) Author: LaZaRuS http://hello.to/lazarus lazarus_hf@hotmail.com |
PESum v0.02 | pesum2.zip (51kb) |
PESum will check if a PE file
has a correct checksum in its header. If it does not have, PESum will compute the checksum
and update the PE file. Author: eGIS! egis@163.net |
PEUtils v1.0 | peutils.zip (45kb) |
Utilities for manipulating
PE-format executables. You can split a PE file up into sections or join them back into a
PE file. Source included. Author: Andrew de Quincey http://www.tardis.ed.ac.uk/~adq adq@tardis.ed.ac.uk |
PEWizard v1.10 beta | pew110.zip (72kb) |
PEWizard is an Win32 executables' manipulating tool.
It can split/join PE sections, disassembly PE file, detect known compiler/packer/protector. Author: ST!LLS0N stills0n@writeme.com |
Pextor 2.0 | ucfpext2.zip (72kb) |
Pextor can be used to extract
PE Objects from the address space of a running file. It can also dump the whole EXE Header
and the Main Module. In the last case, some fields of the PE header are updated so the
file keeps runable. Asm source included. Author: Net Walker! lnwalker@hotmail.com |
QBIND v1.00b | qbind.zip (28kb) |
Add/Remove/Extract DOS extenders from LE images. Author: Peter Quiring http://qforce.home.ml.org sub_death@geocities.com |
PE Realinger v0.41 | vgalgn041.zip (10kb) |
This is a simple little
utility to make PEs smaller by rebuilding them, changing the file alignment to 200h (if it
was 1000h) and removing other unnecessary space in the PE. It works on both PE (win32) EXE
and DLLs. Author: Virogen http://virogen.cjb.net vgen@hotmail.com |
PE tinystub v1.10 | tinystub110.zip (5kb) |
This tiny utility is for replacing the PE file's dos stub. It doesn't really
make the file smaller, but after aligning it with my wipe.reloc its size can
be slightly decreased. Author: crayzee http://crayzee1.cjb.net crayzee@mailbox.sk |
RVA converter | rva.zip (8kb) |
RVA converter is a nice tool which converts memory
addresses to file offsets and the other way. It allows you to find bytes you saw in a debugger in few seconds. Author: LaZaRuS http://hello.to/lazarus lazarus_hf@hotmail.com |
SantMat's Import Searcher | imp-srch.zip (8kb) |
The program
searches through your computer's files using some search info and finds the files that import the dll
and/or the functions within the dll you specified in the search info. Author: SantMat santmat@immortaldescendants.org |
Stone's Relocaction Nopper | stnreloc.zip (34kb) |
Using this program you can
remove unnecessary (or unwanted) relocatrons from PE file. Author: Stone http://www.cracking.net stone@one.se |
StripReloc Version 1.13 | StripReloc113.zip (35kb) |
StripReloc
is a command line utility that removes the relocation (".reloc")
section from Win32 PE EXE files, reducing their size. Most
compilers/linkers put a relocation section in EXE files, but this is
actually not necessary since EXEs never get relocated. Hence, a relocation
section only wastes space. Author: Jordan Rusell https://jrsoftware.org/striprlc.php jordanr@iname.com |
STUBEXE v1.055 | exe_win.zip (18kb) |
Executable optimizer.
Features: support MZ, PE, LE (beta NE), optimizes stubs (minimum as could be),
optimizes zero pages, object table, detects & destroys header of packers. Author: Void Dweller http://members.xoom.com/VoidDweller/ void.vsc@usa.net |
ToPo V1.2 | topo.zip (189kb) |
An utility to modify PE files.
It can add new section, redirect entry point, make code writable, change
length of existing sections. Author: Mr.Crimson http://i.am/MrCrimson mrcrimson@bigfoot.com |
wipe.reloc v1.33 | wipereloc133.zip (9kb) |
This utility makes PE files smaller by aligning them (like virogen's vgalign)
and (if processing a non-DLL PE) by removing the .reloc section. It also removes
empty waste above and below PE headers and at the end of the file, sets the correct PE checksum and finally recovers the previous times of
the file. Author: crayzee http://crayzee1.cjb.net crayzee@mailbox.sk |
Password Crackers | ||
Advanced RAR Password Recovery 1.10 | arpr.zip (584kb) |
This program
can be used to recover the lost password for a RAR archive. At the moment, there is no known method to extract the password
from the compressed file, so the only available methods are "brute force" and dictionary-based
attacks. Author: I.Golubev, Elcom Ltd http://www.elcomsoft.com/arpr.html |
Advanced ZIP Password Recovery 3.51 | azpr.zip (800kb) |
This
utility may help you to guess forgotten ZIP password. The program uses the "brute-force" attack, based
on the options you set (minumum/maximum password len, character set, password mask);
dictionary-based attack is also available. All ZIP versions and methods are supported.
The performance is more than one million passwords per second (on Pentium II). Authors: Elcom Ltd (V.Katalov, A.Malyshev, I.Golubev) http://www.elcomsoft.com/azpr.html |
cRARk v2.3 | crark23.rar (116kb) |
cRARk is intended for the determination of
"forgotten" password for RAR archives. It works with RAR archives versions 2.0 - 2.04.
Brute force attack. Author: Pavel Semjanov http://www.ssl.stu.neva.ru/psw/crack.html Psw@ssl.stu.neva.ru |
FZC 1.05 | fzc105.zip (110kb) |
Fast ZIP Cracker v1.05
is a brute force & wordlist based password cracker for ZIP archives. Author: Fernando Papa Budzyn http://www.bokler.com/bsw_crak.html |
PackageForTheWeb Password Xtractor v2.01 | ucfpfwp2.zip (39kb) |
This util will let
you extract or create a suitable password needed for some installations created with InstallShield's
PackageForTheWeb versions 2.03 and 2.04. Author: fOSSiL |
PackageForTheWeb 2.1 Password Recovery | pftwpr10.zip (6kb) |
PFTW
v2.1 password extractor. Author: Mr.Crimson http://i.am/MrCrimson |
PFTW 3.00 files pwd extractor | uc_pftw300dec.zip (21kb) |
Utility to get passwords from password protected self extract .CAB files generated by InstallShield PackageForTheWeb
v3.00. Author: WiseAcre http://ucol.iscool.net wise@softhome.net |
PackageForTheWeb Password Xtractor v3.0 | PftwPX30.zip (26kb) |
Support for versions from 1.0
up to 3.0. Author: fOSSiL |
pkcrack 1.2.1 |
pkcrack.zip (235kb) |
This ZIP
cracker is *very* useful if you know at least 13 (a whole lot more is much
better) unencrypted bytes from one of the encrypted files. It's much more
faster method than brute-force approach. Author: Peter Conrad http://www.unix-ag.uni-kl.de/~conrad/krypto/pkcrack.html conrad@unix-ag.uni-kl.de |
Ultra Zip Password Cracker v3.61 | uzpc.zip (134kb) |
This program may help you to recover a
password for zip archive. It works with archives that contains only one file and works with archives that
contains files with different passwords. Program supports four types of attack:
brute-force, dictionary based, mix of brute-force and dictionary based called template
attack and, finally, "known plaintext" attack - if you have one non-encrypted file from
encrypted archive you're need only 10-20 min. to recover all files from archive. Author: Ivan Golubev http://www.golubev.com |
YACC v1.0 | yaac10.arj (111kb) |
Yet Another ARJ Cracker.
Cracks ARJ 2.30-2.70 passwords up to 1000000 pass/s on Pentium II/333. Includes Password Cracking Library (PCL) v. 2.0 with many features: powerful dictionary attack, brute force (with static chars) attack, misspelled password recovery, and more. Author: Pavel Semjanov http://www.ssl.stu.neva.ru/psw/crack.html Psw@ssl.stu.neva.ru |
Other Tools | ||
Advanced Compare 1.20 | ac120.zip (16kb) |
This program allows you to
compare more than two files in the same time. It can also compare files that have
different sizes. Author: Jim Midnite |
File Compare32 | pc_fc32b.zip (91kb) |
FC32 is a File Comparing
Utility. Some of its features include:
Authors: Plushmm & The+Q |
File scanner | fs.zip (61kb) |
File Scanner is a freeware program for identifying differrent
file formats. Now it can do something more, such as unpacking or decrypting DOS executable files, calculating sizes of
directories and handle headers of executables. Author: SMT http://smf.chat.ru/ smt_smf@hotmail.com |
FileWork v2.0a | filework.zip (14kb) |
This is small useful utility to manipulate files.
It can: insert one file into another from any offset, overwrite one file by another from any offset,
cut information from file (from any offset and length), truncate file, delete bytes from beginning and end,
copy any file to another (from any offset and length), create new filled files (random filled or zeroed). |
I5COMP v2.01 | i5comp.zip (100kb) |
InstallShield 5.5+ Cabinet
Compression & Maintenance Util. Sources included. Author: fOSSiL |
i6comp v1.03beta | i6comp.zip (75kb) |
This is a utility to handle version 6 of the InstallShield cabinet
files. Author: fOSSiL & Morlac |
InstallShield File Compressor | icompx.zip (229kb) |
InstallShield 3.xx Cabinet
files Compressor/Decompressor. Producer: Stirling Technologies, Inc. http://www.installshield.com |
ISCabVu 6.21 | iscab.zip (383kb) |
The InstallShield Cabinet File Viewer lets you select an
InstallShield cabinet file and view its compressed files, file groups, components, and setup types and the properties of those items. It also
lets you extract files from the cabinet file. Producer: Stirling Technologies, Inc. |
MuLTi RiPPeR 2.70 | mrip270.zip (795kb) |
Multi-purpose File Ripper.
Rips over 110 file formats including 3DS, 669, AIF, AU, AVI, BMP, CMF,
DMF, DSM, EXE, FAR, FLI, GDM,GIF, GPH, IFF, JPG, LBM, MDL, MID, MOD, MPG,
MUS, PAT, PCX, PNG, PSM, RA, RAD, RAS, RAW, S3M, SBK, STM, TGA, TIF, VOC,
WAV, XM, RTM and many more.
Author: Peruch Emiliano, Baccan Matteo peruch@softway.it, baccan@isanet.it |
NFOmakeR v1.0 | tmgndm10.zip (223kb) |
Win32
.NFO and .DIZ Generator for Release Groups. It's using templates so it's
very customizable. Author: tHE EGOiSTE http://tmg.da.ru |
Offset Converter 1.000 | oc.zip (22kb) |
The task of
this tool is to covert the virtual offset to the matching file offset. Author: Apus http://www.go.to/apus realapus@gmx.de |
SuperSnooper 1.0 | ss.zip (26kb) |
SuperSnooper is a Windows and DOS program that reads any file, especially binary files (with extensions like com, exe, dll, and sys), and displays the ASCII strings in the file. |
Table Extractor 1.0 | ex-tabex.zip[ex-tabex.zip - MISSING] (12kb) |
Table Extractor is a small tool which allows you to convert "Tables" or other rows of bytes from any file into Arrays for the coding languages Assembler, C++, Delphi,
Javascript, Pascal, RGH-Profan and Visual Basic. So, this tool saves quite some time the larger the tables get. Author: LaZaRuS http://hello.to/lazarus lazarus_hf@hotmail.com |
(c) 1999, 2000 by Player