2025.04 updates

2025-05-01 02:54:47 -03:00
parent bde6996212
commit f5c5f127f2
52 changed files with 16576 additions and 14177 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,15 @@
 # retoolkit Changelog

+## 2025.04
+
+* Added:
+    * YARA-X.
+
+* Changes:
+    * pev was renamed to readpe.
+    * Setup program now is split into multiple files.
+   
+
 ## 2023.10

 * Added:
--- a/CHECKSUMS.txt
+++ b/CHECKSUMS.txt
--- a/README.md
+++ b/README.md
@@ -1,5 +1,3 @@
-__English__ || [Türkçe](./README_tr_TR.md) || [Français](./README_fr_FR.md) || [中文简体](./README_zh_CN.md) || [日本語](./README_jp_JP.md)
-
 # Reverse Engineer's Toolkit

 ## What?
@@ -39,5 +37,7 @@ See [CHANGELOG.md](CHANGELOG.md).

 We're happy retoolkit inspired other people to create their own forks:

-* https://github.com/indetectables-net/toolkit is also focused on RE tools and include a nice autoupdater program.
 * https://github.com/cristianzsh/forensictools is focused on forensic tools.
+
+* https://github.com/indetectables-net/toolkit is also focused on RE tools and include a nice autoupdater program.
+
--- a/src/installer/cobaltstrike/1768.iss
+++ b/src/installer/cobaltstrike/1768.iss
@@ -1,4 +1,4 @@
-; v0.0.20
+; v0.0.23
 ; https://blog.didierstevens.com/programs/cobalt-strike-tools/

 [Components]
--- a/src/installer/debuggers/hyperdbg.iss
+++ b/src/installer/debuggers/hyperdbg.iss
@@ -1,4 +1,4 @@
-; v0.6-beta
+; v0.13.1
 ; https://github.com/HyperDbg/HyperDbg

 [Components]
--- a/src/installer/debuggers/x64dbg.iss
+++ b/src/installer/debuggers/x64dbg.iss
@@ -41,8 +41,8 @@ Name: "debuggers\x64dbg\plugins\mapoanalyzer"; Description: "MapoAnalyzer"; Type
 Source: "{#MySrcDir}\debuggers\x64dbg\plugins\32\mapoanalyzer\*"; DestDir: "{app}\debuggers\x64dbg\release\x32\plugins"; Components: "debuggers\x64dbg\plugins\mapoanalyzer"; Flags: ignoreversion recursesubdirs createallsubdirs
 Source: "{#MySrcDir}\debuggers\x64dbg\plugins\64\mapoanalyzer\*"; DestDir: "{app}\debuggers\x64dbg\release\x64\plugins"; Components: "debuggers\x64dbg\plugins\mapoanalyzer"; Flags: ignoreversion recursesubdirs createallsubdirs

-; Multiline Ultimate Assembler v2.3.6
-; https://github.com/m417z/Multiline-Ultimate-Assembler
+; Multiline Ultimate Assembler v2.3.7
+; https://ramensoftware.com/multimate-assembler
 [Components]
 Name: "debuggers\x64dbg\plugins\multiasm"; Description: "Multiline Ultimate Assembler"; Types: full compact;
 [Files]
@@ -52,7 +52,7 @@ Source: "{#MySrcDir}\debuggers\x64dbg\plugins\64\multiasm\*"; DestDir: "{app}\de
 [Icons]
 Name: "{app}\sendto+\sendto\Documentation\Multiline Ultimate Assembler"; Filename: "{app}\documentation\multiasm.chm"; Components: "debuggers\x64dbg\plugins\multiasm"

-; OllyDumpEx v1.84
+; OllyDumpEx v1.86
 ; http://low-priority.appspot.com/ollydumpex/
 [Components]
 Name: "debuggers\x64dbg\plugins\ollydumpex"; Description: "OllyDumpEx"; Types: full compact;
--- a/src/installer/decompilers/cutter.iss
+++ b/src/installer/decompilers/cutter.iss
@@ -1,4 +1,4 @@
-; v2.3.2
+; v2.3.4
 ; https://cutter.re/

 [Components]
--- a/src/installer/decompilers/ghidra.iss
+++ b/src/installer/decompilers/ghidra.iss
@@ -1,4 +1,4 @@
-; v10.4
+; v11.3.2
 ; https://github.com/NationalSecurityAgency/ghidra/

 [Components]
--- a/src/installer/dotnet/dnspyex.iss
+++ b/src/installer/dotnet/dnspyex.iss
@@ -1,4 +1,4 @@
-; v6.4.1
+; v6.5.1
 ; https://github.com/dnSpyEx/dnSpy

 [Components]
--- a/src/installer/dotnet/ilspy.iss
+++ b/src/installer/dotnet/ilspy.iss
@@ -1,4 +1,4 @@
-; v8.1.1
+; v9.0.0.7889
 ; https://github.com/icsharpcode/ILSpy

 [Components]
--- a/src/installer/go/gftrace.iss
+++ b/src/installer/go/gftrace.iss
@@ -1,4 +1,4 @@
-; v3.1
+; v3.3
 ; https://github.com/leandrofroes/gftrace

 [Components]
--- a/src/installer/go/goresym.iss
+++ b/src/installer/go/goresym.iss
@@ -1,4 +1,4 @@
-; v2.6.2
+; v3.0.2
 ; https://github.com/mandiant/GoReSym

 [Components]
--- a/src/installer/go/redress.iss
+++ b/src/installer/go/redress.iss
@@ -1,4 +1,4 @@
-; v1.1.1
+; v1.2.24
 ; https://github.com/goretk/redress

 [Components]
--- a/src/installer/hexeditors/fhex.iss
+++ b/src/installer/hexeditors/fhex.iss
@@ -1,4 +1,4 @@
-; v3.0.4
+; v3.0.5
 ; https://github.com/echo-devim/fhex/

 [Components]
--- a/src/installer/hexeditors/imhex.iss
+++ b/src/installer/hexeditors/imhex.iss
@@ -1,4 +1,4 @@
-; v1.31.0
+; v1.37.4
 ; https://github.com/WerWolv/ImHex

 [Components]
--- a/src/installer/hexeditors/rehex.iss
+++ b/src/installer/hexeditors/rehex.iss
@@ -1,4 +1,4 @@
-; v0.60.1
+; v0.62.1
 ; https://github.com/solemnwarning/rehex

 [Components]
--- a/src/installer/java/jadx.iss
+++ b/src/installer/java/jadx.iss
@@ -1,4 +1,4 @@
-; v1.4.7
+; v1.5.1
 ; https://github.com/skylot/jadx

 [Components]
--- a/src/installer/java/recaf.iss
+++ b/src/installer/java/recaf.iss
@@ -1,4 +1,4 @@
-; v2.21.13
+; v2.21.14
 ; https://github.com/Col-E/Recaf

 [Components]
--- a/src/installer/network/fakenet.iss
+++ b/src/installer/network/fakenet.iss
@@ -1,4 +1,4 @@
-; v1.4.11
+; v3.5
 ; https://github.com/mandiant/flare-fakenet-ng

 [Components]
--- a/src/installer/network/nmap.iss
+++ b/src/installer/network/nmap.iss
@@ -1,4 +1,4 @@
-; v7.94
+; v7.95
 ; https://nmap.org/

 [Components]
@@ -9,8 +9,8 @@ Source: "{#MySrcDir}\network\nmap\*.exe"; DestDir: "{app}\network\nmap"; Compone

 ; nmap needs npcap, which doesn't support silent install mode, hence we prompt the user to interactively install it first
 [Run]
-Filename: "{app}\network\nmap\npcap-1.75.exe"; Components: "network\nmap"
-Filename: "{app}\network\nmap\nmap-7.94-setup.exe"; Parameters: "/S /D={app}\network\nmap"; Components: "network\nmap"
+Filename: "{app}\network\nmap\npcap-1.81.exe"; Components: "network\nmap"
+Filename: "{app}\network\nmap\nmap-7.95-setup.exe"; Parameters: "/S /D={app}\network\nmap"; Components: "network\nmap"

 ; create a Zenmap shortcut under Network folder
 [Icons]
--- a/src/installer/ole/lessmsi.iss
+++ b/src/installer/ole/lessmsi.iss
@@ -1,4 +1,4 @@
-; v1.10.0
+; v2.7.0
 ; https://github.com/activescott/lessmsi

 [Components]
--- a/src/installer/ole/oledump.iss
+++ b/src/installer/ole/oledump.iss
@@ -1,4 +1,4 @@
-; v0.0.75
+; v0.0.79
 ; https://blog.didierstevens.com/programs/oledump-py/

 [Components]
--- a/src/installer/pdf/pdf-parser.iss
+++ b/src/installer/pdf/pdf-parser.iss
@@ -1,4 +1,4 @@
-; v0.7.8
+; v0.7.11
 ; https://blog.didierstevens.com/programs/pdf-tools/

 [Components]
--- a/src/installer/pdf/pdfid.iss
+++ b/src/installer/pdf/pdfid.iss
@@ -1,4 +1,4 @@
-; v0.2.8
+; v0.2.10
 ; https://blog.didierstevens.com/programs/pdf-tools/

 [Components]
--- a/src/installer/pe/4n4ldetector.iss
+++ b/src/installer/pe/4n4ldetector.iss
@@ -1,4 +1,4 @@
-; v2.4
+; v3.0
 ; https://github.com/4n0nym0us/4n4lDetector

 [Components]
--- a/src/installer/pe/capa.iss
+++ b/src/installer/pe/capa.iss
@@ -1,4 +1,4 @@
-; v6.1.0
+; v9.1.0
 ; https://github.com/mandiant/capa

 [Components]
--- a/src/installer/pe/die.iss
+++ b/src/installer/pe/die.iss
@@ -1,4 +1,4 @@
-; v3.0.8
+; v3.10
 ; https://github.com/horsicq/DIE-engine

 [Components]
--- a/src/installer/pe/exeinfope.iss
+++ b/src/installer/pe/exeinfope.iss
@@ -1,4 +1,4 @@
-; v0.0.8.0
+; v0.0.8.8
 ; https://github.com/ExeinfoASL/ASL

 [Components]
--- a/src/installer/pe/floss.iss
+++ b/src/installer/pe/floss.iss
@@ -1,4 +1,4 @@
-; v2.3.0
+; v3.1.1
 ; https://github.com/mandiant/flare-floss

 [Components]
--- a/src/installer/pe/peanatomist.iss
+++ b/src/installer/pe/peanatomist.iss
@@ -1,5 +1,5 @@
-; v0.2
-; https://rammerlabs.alidml.ru/peanatomist.html
+; v0.2.13616.1740
+; https://rammerlabs.alidml.ru/download/peanatomist/current

 [Components]
 Name: "pe\peanatomist"; Description: "PEAnatomist"; Types: full;
--- a/src/installer/pe/pebear.iss
+++ b/src/installer/pe/pebear.iss
@@ -1,4 +1,4 @@
-; v0.6.5.2
+; v0.7.0.4
 ; https://github.com/hasherezade/pe-bear

 [Components]
--- a/src/installer/pe/pestudio.iss
+++ b/src/installer/pe/pestudio.iss
@@ -1,4 +1,4 @@
-; v9.55
+; v9.61
 ; https://www.winitor.com

 [Components]
--- a/src/installer/pe/pev.iss
+++ b/src/installer/pe/pev.iss
@@ -1,12 +0,0 @@
-; v0.82
-; https://github.com/mentebinaria/readpe
-
-[Components]
-Name: "pe\pev"; Description: "pev"; Types: full;
-
-[Files]
-Source: "{#MySrcDir}\pe\pev\*"; DestDir: "{app}\pe\pev"; Components: "pe\pev"; Flags: ignoreversion recursesubdirs createallsubdirs
-
-[Icons]
-Name: "{group}\pev"; Filename: "{app}\pe\pev\run.bat"; WorkingDir: "{app}\pe\pev"; Components: "pe\pev"
-Name: "{app}\sendto+\sendto\PE\pev"; Filename: "{app}\pe\pev\run.bat"; WorkingDir: "{app}\pe\pev"; Components: "pe\pev"
--- a/src/installer/pe/reshack.iss
+++ b/src/installer/pe/reshack.iss
@@ -1,4 +1,4 @@
-; v5.2.3
+; v5.2.8
 ; http://www.angusj.com/resourcehacker/

 [Components]
--- a/src/installer/pe/uwpspy.iss
+++ b/src/installer/pe/uwpspy.iss
@@ -1,4 +1,4 @@
-; v1.1.1
+; v1.3
 ; https://github.com/m417z/UWPSpy

 [Components]
--- a/src/installer/processinspection/hollowshunter.iss
+++ b/src/installer/processinspection/hollowshunter.iss
@@ -1,4 +1,4 @@
-; v0.3.6
+; v0.4.1
 ; https://github.com/hasherezade/hollows_hunter

 [Components]
--- a/src/installer/processinspection/pesieve.iss
+++ b/src/installer/processinspection/pesieve.iss
@@ -1,4 +1,4 @@
-; v0.3.6
+; v0.4.1
 ; https://github.com/hasherezade/pe-sieve/

 [Components]
--- a/src/installer/processinspection/systeminformer.iss
+++ b/src/installer/processinspection/systeminformer.iss
@@ -1,4 +1,4 @@
-; v3.0.7270
+; v3.2.25011.2103
 ; https://systeminformer.sourceforge.io/

 [Components]
--- a/src/installer/programming/fasm.iss
+++ b/src/installer/programming/fasm.iss
@@ -1,4 +1,4 @@
-; v1.73.31
+; v1.73.32
 ; https://flatassembler.net

 [Components]
--- a/src/installer/programming/winpython.iss
+++ b/src/installer/programming/winpython.iss
@@ -1,4 +1,4 @@
-; v7.0.20230928
+; Winpython64-3.12.9.0dot.7z
 ; https://github.com/winpython/winpython

 [Components]
--- a/src/installer/retoolkit.iss
+++ b/src/installer/retoolkit.iss
@@ -1,5 +1,5 @@
 #define MyAppName "retoolkit"
-#define MyAppVersion "2023.10"
+#define MyAppVersion "2025.04"
 #define MyAppPublisher "Mente Binária"
 #define MyAppURL "https://github.com/mentebinaria/retoolkit"
 #define MySrcDir "d:\ret\"
@@ -18,10 +18,11 @@ DefaultGroupName={#MyAppName}
 ; PrivilegesRequired=lowest
 OutputBaseFilename={#MyAppName}_{#MyAppVersion}_setup
 WizardStyle=modern
-; Compression=none
+; Compression=lzma2/ultra
+DiskSpanning=yes
 SetupIconFile="..\..\assets\retoolkit.ico"
 UninstallDisplayIcon="{app}\sendto+\retoolkit.ico"
-ArchitecturesInstallIn64BitMode=x64
+ArchitecturesInstallIn64BitMode=x64os
 UsePreviousTasks=yes
 ChangesEnvironment=yes

@@ -121,7 +122,7 @@ Name: "pe"; Description: "PE Tools"; Types: full;
 #include "pe\peanatomist.iss"
 #include "pe\pebear.iss"
 #include "pe\pestudio.iss"
-#include "pe\pev.iss"
+#include "pe\readpe.iss"
 #include "pe\reshack.iss"
 #include "pe\stud_pe.iss"
 #include "pe\winapisearch.iss"
@@ -146,6 +147,7 @@ Name: "programming"; Description: "Programming"; Types: full;
 [Components]
 Name: "signature"; Description: "Signature"; Types: full;
 #include "signature\yara.iss"
+#include "signature\yarax.iss"

 [Components]
 Name: "systeminformation"; Description: "System Information"; Types: full;
--- a/src/installer/signature/yara.iss
+++ b/src/installer/signature/yara.iss
@@ -1,4 +1,4 @@
-; v4.3.2
+; v4.5.2
 ; https://github.com/VirusTotal/yara

 [Components]
--- a/src/installer/systeminformation/winobjex64.iss
+++ b/src/installer/systeminformation/winobjex64.iss
@@ -1,4 +1,4 @@
-; v2.0.3
+; v2.0.6
 ; https://github.com/hfiref0x/WinObjEx64

 [Components]
--- a/src/installer/unpacking/mal_unpack.iss
+++ b/src/installer/unpacking/mal_unpack.iss
@@ -1,4 +1,4 @@
-; v0.9.7
+; v0.9.9
 ; https://github.com/hasherezade/mal_unpack

 [Components]
--- a/src/installer/unpacking/upx.iss
+++ b/src/installer/unpacking/upx.iss
@@ -1,4 +1,4 @@
-; v4.2.0
+; v5.0.0
 ; https://github.com/upx/upx

 [Components]
--- a/src/installer/utilities/7zip.iss
+++ b/src/installer/utilities/7zip.iss
@@ -1,4 +1,4 @@
-; v23.01
+; v24.09
 ; https://www.7-zip.org

 ; We don't extract the main executable form the original installer because 7-Zip installs many a few libraries
@@ -11,8 +11,8 @@ Name: "utilities\7zip"; Description: "7-Zip"; Types: full;
 Source: "{#MySrcDir}\utilities\7zip\*.exe"; DestDir: "{app}\utilities\7zip"; Components: "utilities\7zip"; Flags: ignoreversion recursesubdirs createallsubdirs

 [Run]
-Filename: "{app}\utilities\7zip\7z2301-x64.exe"; Parameters: "/S /D={app}\utilities\7zip"; Components: "utilities\7zip"; Check: Is64BitInstallMode
-Filename: "{app}\utilities\7zip\7z2301.exe"; Parameters: "/S /D={app}\utilities\7zip"; Components: "utilities\7zip";  Check: not Is64BitInstallMode
+Filename: "{app}\utilities\7zip\7z2409-x64.exe"; Parameters: "/S /D={app}\utilities\7zip"; Components: "utilities\7zip"; Check: Is64BitInstallMode
+Filename: "{app}\utilities\7zip\7z2409.exe"; Parameters: "/S /D={app}\utilities\7zip"; Components: "utilities\7zip";  Check: not Is64BitInstallMode

 [Icons]
 Name: "{app}\sendto+\sendto\Utilities\7-Zip"; Filename: "{app}\utilities\7zip\7zFM.exe"; WorkingDir: "{app}\utilities\7zip"; Components: "utilities\7zip"
--- a/src/installer/utilities/cyberchef.iss
+++ b/src/installer/utilities/cyberchef.iss
@@ -1,4 +1,4 @@
-; v10.5.2
+; v10.19.4
 ; https://gchq.github.io/CyberChef/

 [Components]
@@ -8,5 +8,5 @@ Name: "utilities\cyberchef"; Description: "CyberChef"; Types: full;
 Source: "{#MySrcDir}\utilities\cyberchef\*"; DestDir: "{app}\cyberchef"; Components: "utilities\cyberchef"; Flags: ignoreversion recursesubdirs createallsubdirs

 [Icons]
-Name: "{group}\{#MyAppName}\CyberChef"; Filename: "{app}\cyberchef\CyberChef_v10.5.2.html"; WorkingDir: "{app}\cyberchef"; Components: "utilities\cyberchef"
-Name: "{app}\sendto+\sendto\Utilities\CyberChef"; Filename: "{app}\cyberchef\CyberChef_v10.5.2.html"; WorkingDir: "{app}\cyberchef"; Components: "utilities\cyberchef"
+Name: "{group}\{#MyAppName}\CyberChef"; Filename: "{app}\cyberchef\CyberChef_v10.19.4.html"; WorkingDir: "{app}\cyberchef"; Components: "utilities\cyberchef"
+Name: "{app}\sendto+\sendto\Utilities\CyberChef"; Filename: "{app}\cyberchef\CyberChef_v10.19.4.html"; WorkingDir: "{app}\cyberchef"; Components: "utilities\cyberchef"
--- a/src/installer/utilities/errorlookup.iss
+++ b/src/installer/utilities/errorlookup.iss
@@ -1,4 +1,4 @@
-; v2.4.2
+; v2.6.1
 ; https://github.com/henrypp/errorlookup

 [Components]
--- a/src/installer/utilities/forcetoolkit.iss
+++ b/src/installer/utilities/forcetoolkit.iss
@@ -1,4 +1,4 @@
-; v1.2.0.1
+; v1.2.0.3
 ; https://autoclose.net/forcetoolkit.html

 ; We extract the main executable form the original installer to make things easier
--- a/src/installer/utilities/npp.iss
+++ b/src/installer/utilities/npp.iss
@@ -1,4 +1,4 @@
-; v8.5.8
+; v8.7.9
 ; https://notepad-plus-plus.org/

 [Components]
@@ -8,8 +8,8 @@ Name: "utilities\npp"; Description: "Notepad++"; Types: full;
 Source: "{#MySrcDir}\utilities\npp\*"; DestDir: "{app}\utilities\npp"; Components: "utilities\npp"; Flags: ignoreversion recursesubdirs createallsubdirs

 [Run]
-Filename: "{app}\utilities\npp\npp.8.5.8.Installer.x64.exe"; Parameters: "/S /D={app}\utilities\npp"; Components: "utilities\npp"; Check: Is64BitInstallMode
-Filename: "{app}\utilities\npp\npp.8.5.8.Installer.exe"; Parameters: "/S /D={app}\utilities\npp"; Components: "utilities\npp"; Check: not Is64BitInstallMode
+Filename: "{app}\utilities\npp\npp.8.7.9.Installer.x64.exe"; Parameters: "/S /D={app}\utilities\npp"; Components: "utilities\npp"; Check: Is64BitInstallMode
+Filename: "{app}\utilities\npp\npp.8.7.9.Installer.exe"; Parameters: "/S /D={app}\utilities\npp"; Components: "utilities\npp"; Check: not Is64BitInstallMode

 [Icons]
 Name: "{app}\sendto+\sendto\Utilities\Notepad++"; Filename: "{app}\utilities\npp\notepad++.exe"; WorkingDir: "{app}\utilities\npp"; Components: "utilities\npp"
--- a/src/installer/utilities/openhashtab.iss
+++ b/src/installer/utilities/openhashtab.iss
@@ -1,4 +1,4 @@
-; v3.0.4
+; v3.0.5
 ; https://github.com/namazso/OpenHashTab

 ; We don't extract the main executable form the original installer because OpenHashTab
--- a/src/installer/utilities/vt.iss
+++ b/src/installer/utilities/vt.iss
@@ -1,4 +1,4 @@
-; v0.14.0
+; v1.0.1
 ; https://github.com/VirusTotal/vt-cli

 [Components]