[prev in list] [next in list] [prev in thread] [next in thread] 

List:       full-disclosure
Subject:    [FD] immhooktmpl.py - Immunity template plugin for function hooking
From:       Levon Kayan <noptrix () nullsecurity ! net>
Date:       2014-03-31 16:20:44
Message-ID: ED1D7B4E-8BA3-4CD8-96C6-F44CC866D7D5 () nullsecurity ! net
[Download RAW message or body]

[Attachment #2 (multipart/signed)]


Wa Salamu Alaikum,

we wanted to warn you and released new code and is wanted to bother you on FD is thanks for your attention.

DESCRIPTION
============
Due to the lack of documentation for Immnunity API this is an easy template for function hooking while RE.
Howto:
	1. set API names or addresses to hook
	2. define routine to run when hook reached - Hook class

FILE
====
immhooktmpl.py @ http://nullsecurity.net/tools/reversing.html 


*** GREETS TO MustLive - You IZ our her0. ***


Cheers,
--
Name: Levon 'noptrix' Kayan
E-Mail: noptrix@nullsecurity.net
GPG key: 0xDCA45D42
Key fingerprint: 250A 573C CA93 01B3 7A34  7860 4D48 E33A DCA4 5D42
Homepage: http://www.nullsecurity.net/

["signature.asc" (signature.asc)]

-----BEGIN PGP SIGNATURE-----
Comment: ><iframe src=a onload=alert('pwned') <

iQIcBAEBAgAGBQJTOZXcAAoJEE1I4zrcpF1CYfMQALXGLusdngc5OMuagw4eSR9Q
IphlNGyr6UY3MiE7Xb+/uYJI5j7WyfB8nQPEHqNAOTTw6iH4vIchp4aEmWyubRfU
9i5MMFW7cgokFuECOS/7p1HKi0ZxbKEpwRwtYQ4gUZtzUb0SlN/WYit28gVJPSGg
Ty5y0lXXye+tQ9x/j8ZJ5bLcrQtoK1gYNhs94124jfNzwawzNon2cf6ErRohtnaN
eWKmhiLUjIZQfZv/vkO4/eDdfNCsBualQUysCctlYyWsfFpVqhykUgkRAwaINZHO
eVcT174lpi987qqL33IiNTw/uh8yAhPptTFHZRMqiKjBRjhS7dPc1NTq4Xv1OA/d
IW06+3PXZjfDO1a7QIPPOqkB5G31KvIfTrOfTXf769EnH+E31YgY1fC5xqtTebQ6
7UkHd13SSC9c1RNhqQ3seWFPUsYbzlRumXbIa7UpJrg+Lf6he6cM3b95PJWbHy+Y
q9ydGUE8Q0E5o47Mlq6lrbHSaw3sETQauZey1JWc3NFN/9ymsj/09f0nOl5MIliZ
COfI1Whh8Rgqskv4WXbQHzDojBJByTJHVGUXHQvd/Qt2Br42uOGtk0izlPVY26sg
/xaSETxUJM+sEmFTXxj3GVWd599ee0GCylfnKZ4zoK0jldGydJ/eq2g7GI0gWsf5
ohuF6kmLIEI1DW/4z5Nv
=XPr3
-----END PGP SIGNATURE-----


_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

[prev in list] [next in list] [prev in thread] [next in thread]