《精通破解工具》

在安全领域，如果你不懂编程，成天只会拿着●Hacker●工具搞入侵，那么你肯定会被人称为“脚本小子”；而在破解领域，你可以不懂编程，但你不可以不懂得使用破解工具。只要你有兴趣、有热情，对各种破解工具的应用了然于心，就能成为一名破解高手。而本书的目的，就是为刚学破解的新手，和对破解有浓厚兴趣的朋友们，深入介绍各类破解相关工具的好帮手。这也是国内第一本专门介绍破解工具的书，希望借此将笔者对破解技术及在破解软件过程中总结的一些经验，和一些破解时遇见的一些常见问题总结出来和大家一起分享，推动破解技术的发展。并且让大家能在破解的过程中迅速入门，体验到破解的乐趣！

本书将各类破解工具分为不同的章节进行介绍。笔者对各类破解工具进行了相关介绍后，还附带破解实例，以便使大家可以更加深入地熟悉这些工具。对于主流的破解软件，我们做了更为详细的介绍，比如深入浅出的介绍了Ollydbg的使用、教你学会用Ollydbg下消息断点、在Ollydbg中使用宏命令，并收罗了其它Ollydbg小技巧；我们将手把手带你走入SoftICE，感受从安装到使用的一条龙服务，充分体验新版SoftICE的魅力，并且介绍了通过简单的方法让SoftICE在VMWARE中使用。
本书还以一个“新”字为准则，不把篇幅浪费在那些已经过时的破解软件上，带读者走入新一代破解软件的丛林。本书能让你认识到什么是最棒的和最快的反汇编器，体验各类反编译器的魅力，让你熟悉各类十六进制、PE、资源编辑工具，介绍可以制作具有不规则窗体的补丁程序，把目前热点讨论的各类壳统统收录，并以EncryptPE V2为脱壳实例，让你进一步学习Ollydbg强大的条件断点，并让你明白猛壳并不猛的道理。同时本书中还有实例教你如何去爆破当今流行但又缺乏相关破解资料的.net程序。

同样，本书的配套光碟除了收录书中介绍到的破解工具外，还收录了其它国内外各类加密解密工具 （更新版本截至到本书出版之前），可以称得上是一个破解工具大礼包。同时本书附赠的小手册收录了大部分破解相关的专业术语，以供破解初学者查阅。


本书适合人群：破解初学者、破解爱好者和程序开发人员。
本书导读：如果遇到不懂的概念，可以查阅小手册专业术语介绍，如果遇到不理解的地方可以跳过，先阅读后面的章节，因为各章节之间都是有关联的，同时你也可以到《黑客手册》论坛提问或与笔者探讨！在阅读本书的时候，建议一边使用工具，一边结合书中的介绍进行操作，将会让你在兴趣与实践相结合的学习中，迅速跨入破解的门槛！


第一章 调试工具

1.1 OllyDbg                                                                                  
1.1.1 Ollydbg版本的选择                                                                  
1.1.2 熟悉Ollydbg调试环境                                                                  
1.1.3 配置Ollydbg                                                                          
1.1.4 使用Ollydbg                                                                          
1.1.5 Ollydbg高级使用                                                                    
1.1.6 Ollydbg常见问题问与答                                                          
1.1.7 应用实例                                                                                  
1.2 SoftICE                                                                                  
1.2.1 SoftICE的安装                                                                          
1.2.2 配置SoftICE                                                                          
1.2.3 使用SoftICE                                                                          
1.2.4 其它SoftICE使用技巧与问题                                                  
1.2.5 结束                                                                                  
1.3 TRW 2000                                                                          
1.3.1 TRW2000的安装和使用                                                          
1.3.2 TRW2000修改版和插件                                                          
1.4 WKTVBDebugger                                                                  
1.4.1 VB P-Code简介                                                                  
1.4.2 WKT Debugger的使用                                                                  
1.4.3 应用实例                                                                                  
1.5 其它调试工具                                                                        
                                                                

第二章 反汇编工具

2.1 IDA Pro                                                                                  
2.1.1 熟悉IDA界面                                                                          
2.1.2 使用IDA                                                                                  
2.1.3 IDA的动态调试功能                                                                  
2.1.4 IDA的其它问题                                                                          
2.1.5 结尾                                                                                  
2.2 W32Dasm                                                                          
2.2.1 W32Dasm 的使用                                                                  
2.2.2 W32Dasm基本功能                                                                  
2.2.3 W32Dasm其它操作                                                                  
2.2.4 使用W32Dasm动静态结合破解软件（实例）                                
2.2.5 结尾                                                                                  
2.3 C32ASM                                                                          
2.3.1 熟悉C32ASM的功能                                                                  
2.3.2 结尾                                                                                  
2.4 PVDasm                                                                                  
2.4.1 熟悉PVDasm                                                                        
2.4.2 使用PVDasm破解程序(实例)                                                  
2.5 HDASM                                                                                  
2.5.1 Hdasm的使用                                                                          
2.5.2 结尾                                                                                  


第三章 反编译工具                  

3.1 Delphi&BCB反编译工具                                                          
3.1.1 DeDe                                                                                  
3.1.2 Source Rescuer                                                                          
3.2 VB反编译工具                                                                  
3.2.1 EXDEC                                                                                  
3.2.2 VBParser                                                                                  
3.2.3 VBDE                                                                                  
3.2.4 VB Decompiler                                                                          
3.2.5 VBExplorer                                                                          
3.2.6 GetVBResgood                                                                          
3.2.7 快速破解Tegoweb Express（实例）                                                  
3.3 java反编译工具                                                                  
3.3.1 DJ Java Decompiler                                                                  
3.4 其它反编译工具                                                                  
3.4.1 .net                                                                                  
3.4.2 Visual FoxPro                                                                        
3.4.3 PowerBuilder                                                                          
3.4.4 Flash                                                                                  
3.4.5 E-Code                                                                                  
3.5 应用实例                                                                          
3.5.1 爆破.net程序                                                                          

第四章 PE工具
4.1 LordPE                                                                                  
4.1.1 进程管理功能                                                                          
4.1.2 PE编辑功能                                                                          
4.1.3 Break&Enter                                                                          
4.1.4 PE修复功能                                                                          
4.1.5 其它                                                                                  
4.2 PETools                                                                                  
4.2.1 识别文件类型                                                                          
4.2.2 强大的进程转储功能                                                                  
4.3 Stud_PE                                                                          
4.4 PE工具的功能对比                                                                  
4.5 其它PE工具                                                                          
4.5.1 TOPO                                                                                  
4.5.2 PEview                                                                                  
4.6 应用实例                                                                          
4.6.1 集成AutoPath到ollydbg                                                          
4.6.2 为记事本增加一个消息框                                                          

第五章 编辑工具
5.1 Winhex                                                                                  
5.1.1 WinHex的基本功能操作（实例）                                                
5.1.2 WinHex的内存编辑功能                                                          
5.2 Uedit32                                                                                  
5.2.1 十六进制编辑功能                                                                  
5.2.2 强大的文件比较功能                                                                  
5.2.3 多文件查找和替换功能                                                          
5.2.4 其它功能                                                                                  
5.3 010Editor                                                                          
5.3.1 进程编辑                                                                                  

133
5.3.2 多种数据的类型查找和替换功能                                                  
5.3.3 PE模板                                                                                  
5.3.4 虚拟地址(VA)跳转                                                                  
5.3.5 其它功能                                                                                  
5.4 Hiew                                                                                  
5.4.1 Hiew的使用                                                                          
5.5 结尾                                                                                  

第六章 资源工具
6.1 freeRes&FixRes                                                                  
6.1.1 重建可编辑资源                                                                  
6.2 Resource Hacker                                                                  
6.2.1 浏览资源                                                                                  

139
6.2.2 导出资源                                                                                  

140
6.2.3 替换资源                                                                                  

140
6.2.4 编辑菜单资源                                                                          
6.2.5 编辑对话框资源                                                                  
6.3 ExeScope                                                                          
6.3.1 导出和替换资源                                                                
6.3.2 编辑对话框资源                                                                  
6.3.3 添加XP风格                                                                          
6.4 ResScope                                                                          
6.5 Restorator                                                                          
6.5.1 多文件编辑                                                                          
6.5.2 导出和替换资源                                                                  
6.5.3 多种资源查看模式                                                                  
6.5.4 编辑资源                                                                                  

146
6.5.5 添加XP风格                                                                          
6.5.6 创建资源补丁                                                                          
6.5.7 在不同文件之间的复制资源                                                          
6.5.8 其它功能                                                                                  

147
6.6 如何选择一款合适的资源编辑工具                                          

第七章 补丁工具
7.1 diablo2oo2's Universal Patcher                                          
7.1.1 设置基本信息                                                                          
7.1.2 制作补丁                                                                                  

150
7.2 Keymake                                                                          
7.2.1 制作注册机                                                                          
7.2.2 制作内存注册机                                                                  
7.2.3 制作文件补丁                                                                          
7.2.4 制作内存补丁                                                                          
7.3 Graphical-PatchMaker                                                          
7.3.1 制作不规则窗体补丁                                                                  
7.3.2 定制自己的不规则窗体                                                          
7.4 应用实例                                                                          
7.4.1 制作动画教程密码查找器                                                          

第八章 监视软件
8.1 Regmon&Filemon                                                                  
8.2 注册表监视工具                                                                  
8.2.1 RegSnap                                                                                  
8.2.2 Regshot                                                                                  
8.3 API监视工具                                                                          
8.3.1 API spy                                                                                  
8.3.2 KaKeeware Application Monitor                                                  
8.3.3 Kerberos API Spy                                                                  

第九章 加壳脱壳工具
9.1 加密壳                                                                                  
9.1.1 ASProtect                                                                                  
9.1.2 SVK Protector                                                                          
9.1.3 Armadillo                                                                                  
9.1.5 Obsidium                                                                                  
9.1.6 EncryptPE                                                                                  
9.1.7 VProtector                                                                                  
9.1.8 SoftDefender                                                                          
9.1.9 EXECryptor                                                                          
9.1.10 Hying's PE-Armor                                                                  
9.1.11 VMProtect                                                                                  
9.1.12 其它加密壳                                                                          
9.2. 压缩壳                                                                                  
9.2.1 UPX                                                                                  
9.2.2 ASPACK                                                                                  
9.2.3 FSG                                                                                          

9.2.4 MEW                                                                                  
9.2.5 Upack                                                                                  
9.2.6 nSpack                                                                                  
9.3 脱壳工具                                                                          
9.3.1 如何判断一个程序被加什么壳                                                  
9.3.2 有没有能自动脱壳的工具                                                          
9.3.3 手动脱壳需要哪些工具                                                          
9.3.4 什么是ImpREC                                                                          
9.4 应用实例                                                                          
9.4.1 yoda-Crypte 1.2 脱壳                                                          
9.4.2 EncryptPE V2.2004.8.10 脱壳手记                                                  
9.4.3 让PEID和PETools识别出更多的壳                                                  

第十章 其它破解工具
    其它破解工具                                                                        

  附录 综合实例篇
    DIY修改DePB                                                                
    Hdasm分析手记

上一篇: 【转贴】ESP定律
下一篇: 3月的windows打上了4月的补丁
文章来自: 本站原创
引用通告: 查看所有引用 | 我要引用此文章
Tags:
相关日志: