Web Albums(iPhone) 的蛋疼明文密码

webpicasa

一款蛮不错的的Picasa相册同步软件,并且还有个密码保护功能,看起来很帅的样子。设置密码之后习惯性的想看下密码保存在什么地方,是不是明文的,于是随便在文件夹下翻了翻,不小心就找到了。娃哈哈,蛋疼啊,如果忘记密码了去软件目录下找到这个文件:

/var/mobile/Applications/51AE867E-C284-4961-B6D6-48428404FE12/Library/Preferences/com.yourcompany.PhotoGator.plist

Continue Reading

DeIDA Package 1.4

DeDe is Excellent Delphi program analyzing tool, but I still prefer IDA for
navigation & documentation.

Exe-2-Dpr is another very useful utility (and also work with old 16-bit Delphi
programs).

I always look for way to grab as many info from this great program’s output as
possible. So, I wrote a few stupid progs just to _reformate_ Exe2dpr & DeDe
output and import into IDA by simple IDC script.

That’s all.

How to use:
———–

EDM:

> -*- EDM 1.4 * Copyright (c) Aleph 2001-2003 -*-
> Exe-2-Dpr output files reformatter
> Usage: edm.com [> ProjectName.DDM]

Apply exe2dpr.exe to analyzed proggy. Place all exe2dpr output in some
directory. Now, run edm.com in this directory and redirect edm output to some
file. edm will be scan all *.pas files in the directory and create output file
in *.ddm format. Use deida.idc script for import the *.ddm file to IDA database.

Continue Reading

IDA Create Unicode String(English)

unconvert

IDA对Unicode的处理不能说很烂,但是有的时候却比较蛋疼。例如神马中文之类的,但是除此之外,对于英文的字符串处理在部分地方也是有问题的,例如上面的内容。

同样在idb刚创建的时候对于unicode字符串的解析也存在问题,例如下面的内容:

read

真正的字符串内容应该是ReadFromRegistry。但是ida很蛋疼的把第一个R当作dw给处理掉了,于是剩下了一个眉头的身子。

在创建string之后默认是采用的当前idb数据库的字符串格式,如果想要创建正确的字符串需要用到SetAsciiStyle(http://www.hex-rays.com/products/ida/support/idadoc/613.shtml)。

Continue Reading