• Welcome to Valhalla Legends Archive.
 

iago's lockdown source (100% C)

Started by iago, June 03, 2007, 02:24 AM

Previous topic - Next topic

iago

I was beat to it by a day! I was going to release mine tomorrow! :(++

http://www.skullsecurity.org/wiki/index.php/Lockdown
http://www.javaop.com/~ron/code/lockdown

Pure C.

Not as pretty as Warz's code, but it's complete :P
This'll make an interesting test for broken AV:
QuoteX5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*


l2k-Shadow

why all the sudden releases?

damn, loading is back. :(
Quote from: replaced on November 04, 2006, 11:54 AM
I dunno wat it means, someone tell me whats ix86 and pmac?
Can someone send me a working bot source (with bnls support) to my email?  Then help me copy and paste it to my bot? ;D
Já jsem byl určenej abych tady žil,
Dával si ovar, křen a k tomu pivo pil.
Tam by ses povídaj jak prase v žitě měl,
Já nechci před nikym sednout si na prdel.

Já nejsem z USA, já nejsem z USA, já vážně nejsem z USA... a snad se proto na mě nezloběj.

iago

Quote from: l2k-Shadow on June 03, 2007, 02:36 AM
why all the sudden releases?

damn, loading is back. :(
I always release my code. And I just finished it a couple days ago, and was testing it this weekend. I was going to release it tomorrow or Monday, but there's no sense in waiting now that it's out there.
This'll make an interesting test for broken AV:
QuoteX5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*


Hdx

So, who wants to help convert it to java?
The cool thing about ron's code is that it dosen't use the lockdown dlls in any way (Aside from a pure data form) It dosen't have the dlls do the hard parts.
~Hdx

Proud host of the JBLS server www.JBLS.org.
JBLS.org Status:
JBLS/BNLS Server Status

warz

not sure if hard parts is the right phrase - more like the large parts. :P

iago

Quote from: betawarz on June 03, 2007, 03:28 AM
not sure if hard parts is the right phrase - more like the large parts. :P
No, those were the hardest functions by far. Although I admit it's mainly because of their length. If you make one mistake, it could take you an hour to find it. And I pretty much make several mistakes per function as a rule :(
This'll make an interesting test for broken AV:
QuoteX5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*


warz

well, yeah, they were easily the hardest, but the main reason that we didn't have a C++ conversion was due to their length. i mean, already have a working implementation on windows... what was the point in reversing a rather large function? that thought was always lurking. hehe.

Rob

I saw no good reason to reverse the large functions, for an implementation that was solely for windows. 
Rob@USEast

Hero


Warrior

Here, after reversing lockdown in it's entirety it will be eventually more easily understood. It could help with documentation and with implementations across other platforms. Additionally, it is in a sense future proof if the lockdown dlls were ever to even slightly change.
Quote from: effect on March 09, 2006, 11:52 PM
Islam is a steaming pile of fucking dog shit. Everything about it is flawed, anybody who believes in it is a terrorist, if you disagree with me, then im sorry your wrong.

Quote from: Rule on May 07, 2006, 01:30 PM
Why don't you stop being American and start acting like a decent human?

iago

Quote from: Rob on June 03, 2007, 04:07 AM
I saw no good reason to reverse the large functions, for an implementation that was solely for windows. 
Because it's fun and rewarding! :P
This'll make an interesting test for broken AV:
QuoteX5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*


vuther.de

Good job iago, but I don't know why you released this for..

Warrior

So people (like you) who can't reverse it themselves can use it? Why else?

Stop being such a damn elitist just because Rob let you use his implementation. Before his you were QQing about it just like every other "programmer"
Quote from: effect on March 09, 2006, 11:52 PM
Islam is a steaming pile of fucking dog shit. Everything about it is flawed, anybody who believes in it is a terrorist, if you disagree with me, then im sorry your wrong.

Quote from: Rule on May 07, 2006, 01:30 PM
Why don't you stop being American and start acting like a decent human?

Barabajagal

So does this work with DRTL/DSHR/JSTR/SSHR as well? And if so, how do I find out what memory locations to read from? Is there a beginning and ending byte sequence to look for perhaps?

brew

if you had read the first link, iago made a screen dumper. go make them yourself.
<3 Zorm
Quote[01:08:05 AM] <@Zorm> haha, me get pussy? don't kid yourself quik
Scio te esse, sed quid sumne? :P