diff --git a/README.md b/README.md index 4e258c5..267dd6a 100644 --- a/README.md +++ b/README.md @@ -7,8 +7,8 @@ * OpenArk is an open source anti-rookit(ARK) tool for Windows. Ark is Anti-Rootkit abbreviated, it aimmed at reversing/programming helper and also users can find out hidden malwares in the OS. More and more powerful features will be supported in future. -![image](doc/resources/snapshot-en-v108.png) -![image](doc/resources/snapshot-en-v108-01.png) +![image](doc/resources/snapshot-en-v120.png) +![image](doc/resources/snapshot-en-v120-01.png) ### Features * Process - Process/Thread/Module/Handles/Memory/Window... information view, Dll Injector x86/x64. @@ -24,7 +24,7 @@ ### Distributions * Program: one exe binary, no dependence, support 32/64 bit. -* Supported OS: Windows XP ... Win7 ... Win10 20H2 ... +* Supported OS: Windows XP ... Win7 ... Win10 ... Win11 ... ### Compile * [How To Build OpenArk](doc/build-openark.md) diff --git a/doc/resources/snapshot-en-v120-01.png b/doc/resources/snapshot-en-v120-01.png new file mode 100644 index 0000000..1af4933 Binary files /dev/null and b/doc/resources/snapshot-en-v120-01.png differ diff --git a/doc/resources/snapshot-en-v120.png b/doc/resources/snapshot-en-v120.png new file mode 100644 index 0000000..b65c689 Binary files /dev/null and b/doc/resources/snapshot-en-v120.png differ diff --git a/src/OpenArk/common/qt-wrapper/qt-wrapper.cpp b/src/OpenArk/common/qt-wrapper/qt-wrapper.cpp index 17dc63d..0b1700f 100644 --- a/src/OpenArk/common/qt-wrapper/qt-wrapper.cpp +++ b/src/OpenArk/common/qt-wrapper/qt-wrapper.cpp @@ -337,6 +337,11 @@ void ShellRun(QString cmdline, QString param) ShellExecuteW(NULL, L"open", cmdline.toStdWString().c_str(), param.toStdWString().c_str(), NULL, SW_SHOW); } +void ShellRunHide(QString cmdline, QString param) +{ + ShellExecuteW(NULL, L"open", cmdline.toStdWString().c_str(), param.toStdWString().c_str(), NULL, SW_HIDE); +} + void ShellRunCmdExe(QString exe, int show) { auto cmdline = "cmd /c " + exe; diff --git a/src/OpenArk/common/qt-wrapper/qt-wrapper.h b/src/OpenArk/common/qt-wrapper/qt-wrapper.h index 971ee32..ade485e 100644 --- a/src/OpenArk/common/qt-wrapper/qt-wrapper.h +++ b/src/OpenArk/common/qt-wrapper/qt-wrapper.h @@ -229,6 +229,7 @@ bool JsonGetValue(const QByteArray &data, const QString &key, QJsonValue &val); // void ShellOpenUrl(QString url); void ShellRun(QString cmdline, QString param); +void ShellRunHide(QString cmdline, QString param); void ShellRunCmdExe(QString exe, int show = SW_SHOW); void ShellRunCmdDir(QString dir); QString PidFormat(DWORD pid); diff --git a/src/OpenArk/reverse/reverse.cpp b/src/OpenArk/reverse/reverse.cpp index 820d9fc..0bd8fa8 100644 --- a/src/OpenArk/reverse/reverse.cpp +++ b/src/OpenArk/reverse/reverse.cpp @@ -21,6 +21,7 @@ using namespace Plugin::Compressor; enum { RUN_EXE, + RUN_EXE_HIDE, RUN_EXE_BY_CMD, RUN_DIR, RUN_CMD_DIR, @@ -102,7 +103,7 @@ WINTOOL_ITEM WinAllTools[] = { { RUN_EXE, "die", "reverse/die_win32_portable/die.exe", "reverse/die_win32.zip" }, { RUN_EXE, "pebear", "reverse/PE-bear/PE-bear.exe", "reverse/PE-bear.zip" }, { RUN_EXE, "instdrv", "reverse/InstDrv.exe", "reverse/InstDrv.exe" }, - { RUN_EXE, "pdbripper", "reverse/pdbripper.exe", "reverse/pdbripper.exe" }, + { RUN_EXE, "pdbripper", "reverse/pdbripper/pdbripper.exe", "reverse/pdbripper.zip" }, { RUN_EXE, "instdrv", "reverse/InstDrv.exe", "reverse/InstDrv.exe" }, { RUN_EXE, "loadtest", "reverse/LoadTest.exe", "reverse/LoadTest.exe" }, { RUN_EXE, "notepad2", "misc/Notepad2.exe", "misc/Notepad2.exe" }, @@ -127,21 +128,23 @@ WINTOOL_ITEM WinAllTools[] = { { RUN_CMD_DIR, "adb", "android/adb/", "android/adb.zip" }, { RUN_CMD_DIR, "aapt", "android/adb/", "android/adb.zip" }, { RUN_EXE, "jadx", "android/jadx.exe", "android/jadx.exe" }, - { RUN_EXE, "jeb", "android/jeb/jeb_wincon.bat", "android/jeb.zip" }, + { RUN_EXE, "jeb", "android/jeb/bin/jeb.exe", "android/jeb.zip" }, { RUN_EXE, "gda", "android/GDA.exe", "android/GDA.exe" }, { RUN_EXE, "jd_gui", "android/jd-gui.exe", "android/jd-gui.exe" }, - { RUN_EXE, "scrcpy", "android/scrcpy-win64/scrcpy-noconsole.vbs", "android/scrcpy-win64.zip" }, + { RUN_EXE_BY_CMD, "scrcpy", "android/scrcpy-win64/scrcpy.exe", "android/scrcpy-win64.zip" }, { RUN_EXE, "xelfviewer", "android/xelfviewer/xelfviewer.exe", "android/xelfviewer.zip" }, { RUN_EXE, "uleb128", "android/ULEB128.exe", "android/ULEB128.exe" }, { RUN_EXE, "apkstudio", "android/ApkStudio-x64/ApkStudio.exe", "android/ApkStudio-x64.zip" }, { RUN_EXE, "androidkiller", "android/AndroidKiller/AndroidKiller.exe", "android/AndroidKiller.zip" }, - { RUN_EXE, "jdk11", "android/jdk11.exe", "android/jdk11.exe" }, - + { RUN_EXE, "jdk8", "android/jdk8.exe", "android/jdk8.exe" }, //WinDevKits { RUN_OPEN_URL, "jdk", "https://mirrors.huaweicloud.com/java/jdk/", "" }, + { RUN_EXE, "jdk11", "android/jdk11.exe", "android/jdk11.exe" }, { RUN_OPEN_URL, "python", "https://www.python.org/downloads/", "" }, { RUN_OPEN_URL, "golang", "https://studygolang.com/dl", "" }, + { RUN_OPEN_URL, "visualstudio", "https://visualstudio.microsoft.com/downloads/", "" }, + { RUN_OPEN_URL, "androidstudio", "https://developer.android.google.cn/studio/", "" }, { RUN_EXE, "git32", "dev/Git-32bit.exe", "dev/Git-32bit.exe" }, { RUN_EXE, "torgit32", "dev/TortoiseGit-32bit.msi", "dev/TortoiseGit-32bit.msi" }, { RUN_EXE, "torsvn32", "dev/TortoiseSVN-32bit.msi", "dev/TortoiseSVN-32bit.msi" }, @@ -162,6 +165,7 @@ WINTOOL_ITEM WinAllTools[] = { { RUN_EXE, "vc2015x86", "dev/vcredist/vcredist_2015_x86.exe", "dev/vcredist/vcredist_2015_x86.exe" }, { RUN_EXE, "vc1519x64", "dev/vcredist/vcredist_2015~2019_x64.exe", "dev/vcredist/vcredist_2015~2019_x64.exe" }, { RUN_EXE, "vc1519x86", "dev/vcredist/vcredist_2015~2019_x86.exe", "dev/vcredist/vcredist_2015~2019_x86.exe" }, + { RUN_EXE, "dotnet4", "dev/dotnet/netframework4.msi", "dev/dotnet/netframework4.msi" }, }; Reverse::Reverse(QWidget *parent, int tabid) : @@ -238,6 +242,8 @@ void Reverse::DownloadAndExecuteFile(WINTOOL_ITEM wintool) if (UNONE::FsIsExistedW(QToWStr(exe))) { if (type == RUN_EXE) ShellRun(exe, ""); + if (type == RUN_EXE_HIDE) + ShellRunCmdExe(exe, SW_HIDE); else if (type == RUN_CMD_DIR) ShellRunCmdDir(exe); else if (type == RUN_DIR) diff --git a/src/OpenArk/ui/reverse.ui b/src/OpenArk/ui/reverse.ui index 645a180..688f09a 100644 --- a/src/OpenArk/ui/reverse.ui +++ b/src/OpenArk/ui/reverse.ui @@ -6,8 +6,8 @@ 0 0 - 1147 - 747 + 1101 + 671 @@ -26,7 +26,7 @@ QTabWidget::West - 2 + 3 true @@ -1136,457 +1136,473 @@ Linux - - - - 0 - 0 - 1104 - 692 - + + + 0 - - - 0 - 0 - + + 0 - - - 16777215 - 16777215 - + + 0 - - + + 0 - - - - 10 - 10 - 101 - 24 - - - - - - - Cygwin64 - - - - :/OpenArk/revtools/cygwin64.ico:/OpenArk/revtools/cygwin64.ico - - - - - - 120 - 40 - 101 - 24 - - - - text-align: - - - RedisTool - - - - :/OpenArk/revtools/redistool.ico:/OpenArk/revtools/redistool.ico - - - - - - 10 - 70 - 101 - 24 - - - - text-align: - - - PuTTY - - - - :/OpenArk/revtools/putty.ico:/OpenArk/revtools/putty.ico - - - - - - 10 - 100 - 101 - 24 - - - - text-align: - - - ssh-win - - - - :/OpenArk/revtools/default.ico:/OpenArk/revtools/default.ico - - - - - - 10 - 40 - 101 - 24 - - - - text-align: - - - MobaXterm - - - - :/OpenArk/revtools/mobaxterm.ico:/OpenArk/revtools/mobaxterm.ico - - - - - - 120 - 10 - 101 - 24 - - - - text-align: - - - Robo3T - - - - :/OpenArk/revtools/robo3t.ico:/OpenArk/revtools/robo3t.ico - - - - - - 120 - 70 - 101 - 24 - - - - text-align: - - - SQLiteStudio - - - - :/OpenArk/revtools/sqlitestudio.ico:/OpenArk/revtools/sqlitestudio.ico - - - + + + + + 0 + 0 + + + + + 16777215 + 16777215 + + + + + + + + + 10 + 10 + 101 + 24 + + + + + + + Cygwin64 + + + + :/OpenArk/revtools/cygwin64.ico:/OpenArk/revtools/cygwin64.ico + + + + + + 120 + 40 + 101 + 24 + + + + text-align: + + + RedisTool + + + + :/OpenArk/revtools/redistool.ico:/OpenArk/revtools/redistool.ico + + + + + + 10 + 70 + 101 + 24 + + + + text-align: + + + PuTTY + + + + :/OpenArk/revtools/putty.ico:/OpenArk/revtools/putty.ico + + + + + + 10 + 100 + 101 + 24 + + + + text-align: + + + ssh-win + + + + :/OpenArk/revtools/default.ico:/OpenArk/revtools/default.ico + + + + + + 10 + 40 + 101 + 24 + + + + text-align: + + + MobaXterm + + + + :/OpenArk/revtools/mobaxterm.ico:/OpenArk/revtools/mobaxterm.ico + + + + + + 120 + 10 + 101 + 24 + + + + text-align: + + + Robo3T + + + + :/OpenArk/revtools/robo3t.ico:/OpenArk/revtools/robo3t.ico + + + + + + 120 + 70 + 101 + 24 + + + + text-align: + + + SQLiteStudio + + + + :/OpenArk/revtools/sqlitestudio.ico:/OpenArk/revtools/sqlitestudio.ico + + + + + Android - - - - 0 - 0 - 1104 - 692 - + + + 0 - - - 0 - 0 - + + 0 - - - 16777215 - 16777215 - + + 0 - - + + 0 - - - - 10 - 10 - 91 - 24 - - - - - - - ADB - - - - :/OpenArk/revtools/default.ico:/OpenArk/revtools/default.ico - - - - - - 10 - 130 - 91 - 24 - - - - text-align: - - - GDA - - - - :/OpenArk/revtools/gda.ico:/OpenArk/revtools/gda.ico - - - - - - 10 - 70 - 91 - 24 - - - - - - - Jadx - - - - :/OpenArk/revtools/jadx.ico:/OpenArk/revtools/jadx.ico - - - - - - 110 - 100 - 111 - 24 - - - - text-align: - - - ApkStudio - - - - :/OpenArk/revtools/apkstudio.ico:/OpenArk/revtools/apkstudio.ico - - - - - - 110 - 130 - 111 - 24 - - - - text-align: - - - AndroidKiller - - - - :/OpenArk/revtools/androidkiller.ico:/OpenArk/revtools/androidkiller.ico - - - - - - 110 - 70 - 111 - 24 - - - - text-align: - - - ULEB128 - - - - :/OpenArk/revtools/uleb128.ico:/OpenArk/revtools/uleb128.ico - - - - - - 110 - 40 - 111 - 24 - - - - text-align: - - - XELFViewer - - - - :/OpenArk/revtools/xelfviewer.ico:/OpenArk/revtools/xelfviewer.ico - - - - - - 10 - 100 - 91 - 24 - - - - text-align: - - - JEB - - - - :/OpenArk/revtools/nmap.ico:/OpenArk/revtools/nmap.ico - - - - - - 110 - 10 - 111 - 24 - - - - text-align: - - - Scrcpy - - - - :/OpenArk/revtools/default.ico:/OpenArk/revtools/default.ico - - - - - - 10 - 40 - 91 - 24 - - - - - - - AAPT - - - - :/OpenArk/revtools/default.ico:/OpenArk/revtools/default.ico - - - - - - 10 - 190 - 361 - 16 - - - - - 50 - false - - - - N.B: You need to install JDK before using some tools! - - - - - - 110 - 160 - 111 - 23 - - - - JDK11 - - - - :/OpenArk/devkits/jdk.ico:/OpenArk/devkits/jdk.ico - - - - - - 10 - 160 - 91 - 24 - - - - text-align: - - - jd-gui - - - - :/OpenArk/revtools/jdgui.ico:/OpenArk/revtools/jdgui.ico - - - + + + + + 0 + 0 + + + + + 16777215 + 16777215 + + + + + + + + + 10 + 10 + 91 + 24 + + + + + + + ADB + + + + :/OpenArk/revtools/default.ico:/OpenArk/revtools/default.ico + + + + + + 10 + 130 + 91 + 24 + + + + text-align: + + + GDA + + + + :/OpenArk/revtools/gda.ico:/OpenArk/revtools/gda.ico + + + + + + 10 + 70 + 91 + 24 + + + + + + + Jadx + + + + :/OpenArk/revtools/jadx.ico:/OpenArk/revtools/jadx.ico + + + + + + 110 + 100 + 111 + 24 + + + + text-align: + + + ApkStudio + + + + :/OpenArk/revtools/apkstudio.ico:/OpenArk/revtools/apkstudio.ico + + + + + + 110 + 130 + 111 + 24 + + + + text-align: + + + AndroidKiller + + + + :/OpenArk/revtools/androidkiller.ico:/OpenArk/revtools/androidkiller.ico + + + + + + 110 + 70 + 111 + 24 + + + + text-align: + + + ULEB128 + + + + :/OpenArk/revtools/uleb128.ico:/OpenArk/revtools/uleb128.ico + + + + + + 110 + 40 + 111 + 24 + + + + text-align: + + + XELFViewer + + + + :/OpenArk/revtools/xelfviewer.ico:/OpenArk/revtools/xelfviewer.ico + + + + + + 10 + 100 + 91 + 24 + + + + text-align: + + + JEB + + + + :/OpenArk/revtools/nmap.ico:/OpenArk/revtools/nmap.ico + + + + + + 110 + 10 + 111 + 24 + + + + text-align: + + + Scrcpy + + + + :/OpenArk/revtools/default.ico:/OpenArk/revtools/default.ico + + + + + + 10 + 40 + 91 + 24 + + + + + + + AAPT + + + + :/OpenArk/revtools/default.ico:/OpenArk/revtools/default.ico + + + + + + 10 + 190 + 361 + 16 + + + + + 50 + false + + + + N.B: You need to install JDK8 before using some tools! + + + + + + 10 + 160 + 91 + 24 + + + + text-align: + + + jd-gui + + + + :/OpenArk/revtools/jdgui.ico:/OpenArk/revtools/jdgui.ico + + + + + + 110 + 160 + 111 + 23 + + + + JDK 8 + + + + :/OpenArk/devkits/jdk.ico:/OpenArk/devkits/jdk.ico + + + + + @@ -1932,7 +1948,7 @@ 10 - 40 + 70 101 23 @@ -1949,7 +1965,7 @@ 10 - 70 + 100 101 23 @@ -1979,7 +1995,7 @@ :/OpenArk/devkits/androidstudio.ico:/OpenArk/devkits/androidstudio.ico - + 120 @@ -2013,6 +2029,23 @@ :/OpenArk/devkits/vcredist.ico:/OpenArk/devkits/vcredist.ico + + + + 10 + 40 + 101 + 23 + + + + JDK11 + + + + :/OpenArk/devkits/jdk.ico:/OpenArk/devkits/jdk.ico + + @@ -2044,13 +2077,6 @@ - - - - Help - - -