Register or login to be able to download hacks and view attachments

Author Topic: CrySearch Memory Scanner  (Read 5397 times)

Offline Zeno

  • Head Developer
  • *
  • Posts: 783
  • Thanked: 4997 times
    • View Profile
  • Gender: Male
CrySearch Memory Scanner
« on: January 06, 2016, 06:13:57 PM »
Note: To use this on Wolfteam you need Plat Bypass

Features

    Accessing processes remotely, also system processes when running as Administrator;
    Memory scanning for primitive types, strings and byte sequences;
    Filtering scan results (a.k.a. Next scan);
    Supports relative addresses and offsets;
    Creating, saving and reusing address tables containing scan results.
    Changing values at memory addresses and freeze them;
    Viewing PE (Portable Executable) information about the opened process;
    Viewing and dumping sections;
    Viewing threads, change priority, suspend, resume and create threads remotely;
    Viewing, injecting, ejecting, dumping and hiding modules, and restore PE headers from a file on the disk;
    Allocating memory blocks remotely;
    Generating code snippets from address tables;
    Hotkeys to automate actions that do not require user input;
    Viewing import address table of loaded process and its modules;
    Settings hooks on the IAT of a process and its modules and restoring export addresses;
    Viewing PEB and TEB's for loaded process and its threads, including manipulation of certain associated information;
    Viewing and closing handles in the loaded process;
    Disassembling executable pages in a process to provide memory view and program flow control;
    Walking heaps in the opened process as side feature of the disassembler;
    Debugging executable code and data to find out what the flow of a program is;
    Plugin system featuring CrySearch extensions to be written in MASM, C or C++;
    Generate signatures and byte-arrays from selected disassembly;
    Create memory dissections of specific parts of the process' memory and save them to the address table.

ScreenShot


FAQ
Q: What OS's does CrySearch support?
A: Windows XP and higher. CrySearch is coded on Windows 8.1, and also tested on Windows XP. However, due to limitations of the OS, some features might not work on Windows XP.

Q: I have an issue that is not described in the FAQ. What do I have to do?
A: Refer to CrySearch's Wiki page linked on top of the first post. If you still haven't found a solution to your issue, feel free to post a message. If you do so, please write down your issue as detailed as possible.

Q: Why does the CrySearch user interface have some parts contain oversized buttons and largely spaced text?
A: When you set your windows font size to 125% or 150% the text will outgrow the controls. @Geertje123 made note of this, and ever since I decided to keep the user interface functional for everybody, also those who increased their font size.

Q: I just updated CrySearch and it crashes in random places. What can I do?
A: Some settings CrySearch saves to the xml file it creates may have changed. The structure of the XML file is not correct. This results in undefined behavior. Delete the XML file and restart CrySearch.

Q: Where can I find documentation about writing plugins for CrySearch?
A: The wiki page contains some information: CrySearch:Plugins

Credits
evolution536


Register or Login to Download CrySearch.rar
 
The following users thanked this post: Glossybr

Offline ☣H4xor☠

  • Full Member
  • *
  • Posts: 118
  • Thanked: 433 times
  • < PlagueHacks Team >
    • h4xor_help
    • View Profile
  • Gender: Male
Re: CrySearch Memory Scanner
« Reply #1 on: January 06, 2016, 06:43:01 PM »
Good Job Again gonna come handy ^^
 
The following users thanked this post: bodyahmed08

Offline ○☠iTzDent♥

  • Full Member
  • *
  • Posts: 205
  • Thanked: 683 times
  • < ColdHack VIP > Ask for help anytime :)
    • itzdent
    • View Profile
  • Gender: Male
Re: CrySearch Memory Scanner
« Reply #2 on: January 06, 2016, 07:37:57 PM »
Thanks :D. Totally going to use this ;)

#SuperNova~
 

Offline Test00

  • Jr. Member
  • *
  • Posts: 14
  • Thanked: 2 times
    • View Profile
Re: CrySearch Memory Scanner
« Reply #3 on: January 16, 2016, 10:09:41 PM »
Guys if u could post some tutorials on how to onvert the addresses in VB would help us so much :) THanks
 

Offline xP0WN3D

  • Full Member
  • *
  • Posts: 115
  • Thanked: 117 times
  • Need help? Just ask :)
    • imatrix.wt
    • View Profile
  • Gender: Male
Re: CrySearch Memory Scanner
« Reply #4 on: January 16, 2016, 10:22:36 PM »
Guys if u could post some tutorials on how to onvert the addresses in VB would help us so much :) THanks

there are a lot of tutorials just look in youtube. as a hit you can check for the ReadWriteMemory.vb file.
Mod is watching you ( ͡ ͜ʖ ͡)
 
The following users thanked this post: Test00

Offline Test00

  • Jr. Member
  • *
  • Posts: 14
  • Thanked: 2 times
    • View Profile
Re: CrySearch Memory Scanner
« Reply #5 on: January 17, 2016, 10:21:17 AM »
Thank you for that, i thought maybe you guys a have a more professional way od conerting them in VB, because some tutorials have errors and may not work.

Thanks
 

Offline gpa

  • New Member
  • *
  • Posts: 1
    • Bavly Ayman
    • View Profile
  • Gender: Male
Re: CrySearch Memory Scanner
« Reply #6 on: February 12, 2016, 11:44:35 PM »
Is this like cheat engine ?
 

Offline Zeno

  • Head Developer
  • *
  • Posts: 783
  • Thanked: 4997 times
    • View Profile
  • Gender: Male
Re: CrySearch Memory Scanner
« Reply #7 on: February 12, 2016, 11:46:47 PM »
 

Offline alexhax

  • New Member
  • *
  • Posts: 1
    • View Profile
  • Gender: Male
Re: CrySearch Memory Scanner
« Reply #8 on: February 29, 2016, 10:54:13 AM »
is there any good bypasser ? its not working now
 

Offline barock122

  • Jr. Member
  • *
  • Posts: 16
    • View Profile
  • Gender: Male
Re: CrySearch Memory Scanner
« Reply #9 on: March 01, 2016, 06:29:46 PM »
PLEASE UPDATE !!! crashed allways
in Wolfteam   :-\  :'(

Windows 7   SP 1

Edit: Sometimes is no crash, but it cant find adresses.
« Last Edit: March 01, 2016, 06:31:37 PM by barock122 »
 

Offline barock122

  • Jr. Member
  • *
  • Posts: 16
    • View Profile
  • Gender: Male
Re: CrySearch Memory Scanner
« Reply #10 on: March 03, 2016, 08:14:07 PM »
CrashReport
System Information:

OS Version:         Windows 7
Architecture:      x64
CrySearch:         x64 (2.0)


Exception Information:

Exception:         Access violation reading location 0

Stack Trace:

CrySearch64.exe!13F53862B
CrySearch64.exe!13F538B7E
CrySearch64.exe!13F51186D
CrySearch64.exe!13F5118FC
CrySearch64.exe!13F511A05
CrySearch64.exe!13F5CB4F5