From 6ee464f2c8780f750b918bbb2ff6e72de6e44696 Mon Sep 17 00:00:00 2001 From: DSR! Date: Sun, 20 Feb 2022 12:42:16 -0300 Subject: [PATCH] Update TOOLS.md --- TOOLS.md | 18 ++++++++++-------- 1 file changed, 10 insertions(+), 8 deletions(-) diff --git a/TOOLS.md b/TOOLS.md index 39d66ca..c89fc94 100644 --- a/TOOLS.md +++ b/TOOLS.md @@ -282,8 +282,8 @@ binary took while running on the system.
***Description:*** AstroGrep is a Microsoft Windows GUI File Searching (grep) utility. Its features include regular expressions, versatile printing options, stores most recent used paths and has a "context" feature which is very nice for looking at source code.
### AVFucker -***Web:*** https://marcoramilli.com/2010/01/02/avfucker-new-version/
-***Developer:*** Marco Ramilli
+***Web:*** www.indetectables.net
+***Developer:*** Sr Sombrero
***Description:*** AVFucker is a tool that helps you evade Antivirus using the “replace byte signature” techniques.
### Cool Beans NFO Creator @@ -307,8 +307,8 @@ binary took while running on the system.
***Description:*** ImpRec is a very handy tool that can be used to repair/reconstruct the import table for packed programs.
### Indetectables Offset Locator -***Web:*** https://www.indetectables.net/viewtopic.php?t=29725&sid=d42f7cab211096f4f52fef67efc9b538
-***Developer:*** Mingo, yorll, metal
+***Web:*** https://www.indetectables.net/viewtopic.php?t=29725
+***Developer:*** Mingo, Yorll & Metal
***Description:*** This is a classic, great tool to clean AV signatures in executables.
### NFO Maker @@ -365,19 +365,21 @@ binary took while running on the system.
## Rootkits Detector ### GMER -***Web:*** http://www.gmer.net
+***Web:*** www.gmer.net
***Developer:*** The GMER dev team.
-***Description:*** GMER is an application that detects and removes rootkits.
+***Description:*** GMER is an application that detects and removes rootkits. +It scans for: hidden processes, hidden threads, hidden modules, hidden services, hidden files, hidden disk sectors (MBR), hidden Alternate Data Streams, +hidden registry keys, drivers hooking SSDT, drivers hooking IDT, drivers hooking IRP calls and inline hooks
### Sysinspector ***Web:*** https://www.eset.com/int/support/sysinspector/
***Developer:*** ESET
-***Description:*** SET SysInspector scans your operating system and captures details such as running processes, registry content, startup items and network connections. ESET SysInspector is a convenient utility for the toolbox of every IT expert and first responder.
+***Description:*** SysInspector scans your operating system and captures details such as running processes, registry content, startup items and network connections. ESET SysInspector is a convenient utility for the toolbox of every IT expert and first responder.
### Windows Kernel Explorer ***Web:*** https://github.com/AxtMueller/Windows-Kernel-Explorer
***Developer:*** AxtMueller
-***Description:*** Windows Kernel Explorer (you can simply call it as "WKE") is a free but powerful kernel research tool. It supports from Windows XP to Windows 11. Compared with WIN64AST and PCHunter, WKE can run on the latest Windows 11 without updating binary files.
+***Description:*** Windows Kernel Explorer is a free but powerful kernel research tool. It supports from Windows XP to Windows 11. Compared with WIN64AST and PCHunter, WKE can run on the latest Windows 11 without updating binary files.
## UnPacking