Memget Project for Mobile [Android] 사용법 입니다.


DOWNLOAD SITE : https://unsigned.kr/



현재 버전(1.5.12.192)기준으로 작성하겠습니다.


*****************************************

*            Memget Project             *

*      Memget Mobile for Android        *

*       last update : 2017.02.26        *

*               by nvdark               *

*          Version : 1.5.12.192          *

*****************************************

Usage : ./mm OPTION [...]

OPTIONS :

        # 1 ######################

        -m PATH [PATH ...] : File system event Monitor

                ex) ./mm -m /data/local /system


        # 2 ######################

        -p PID  : Function using PID, Read below

                -i LIB_PATH  : Library injection

                        ex) ./mm -p [PID] -i /data/lib.so


                -s(Not yet) : SVC Monitor

                        ex) ./mm -p [PID] -s


                -d OPTIONS: Debugging mode

                        ex) ./mm -p [PID] -d

                        -m : Menu mode : Step by Step

                                ex) ./mm -p [PID] -d -m

                        -n [NUMBER] : Select syscall number With Menu mode

                                      Step by Syscall number you selected

                                ex) ./mm -p [PID] -d -n [SYSCALL NUMBER]

                        -s : Data search mode (not yet)

                                ex) ./mm -p [PID] -d -f 0x00003233


        # 3 ######################

        -t [EVENT] : Function Using Touch event

                ex) ./mm -t /dev/input/event1


        # 4 ######################

        -d [DEX FILE] : Dex file class dump

                ex) ./mm -d classes.dex


                -d : Dalvik format

                        ex) ./mm -d classes.dex -d


 - End -

PS : 한글화 버전 별도 배포


총 4가지 기능으로 되어 있으며, using을 보시면 '# [num] ####################' 으로 구분되어있습니다.


1. 파일 시스템 이벤트 모니터


 취약점 점검을 하다보면 중요정보가 파일로 저장되고 있는지 확인해야할때가 있습니다. 또는 분석 시 순간적으로 생성되어졌다가 삭제되는 파일들도 존재합니다. 해당 옵션을 쓰면 모니터링 하고자 하는 디렉토리를 기준으로 파일 시스템 이벤트를 모니터링 합니다. 

 

 사용법은 다음과 같습니다. 


./mm -m [PATH ...] 

 ex ./mm -m /data/data/abcd /data/app/abcd /data/data/eeee


  모니터링 하고자 하는 경로를 쓰시면 하위 디렉토리까지 포함하여 모니터링을 시작합니다. 단, /data/local/tmp/은 하지마세요...버그 있습니다. /system이나 / 로 해도 상관은 없으나....죽을 확율이 클거라 생각됩니다...


실행하면 다음과 같은 화면이 나타납니다. 


root@zerofltektt:/data/local/tmp # ls -al /data/data | grep line

drwxr-x--x u0_a196  u0_a196           2018-04-04 09:06 jp.naver.line.android

aver.line.android/ /data/app/jp.naver.line.android-1/                         <


[+]File system event mode

[+]start...

[+]make temp directory : /data/local/tmp/mm_cmp

[+]Initalizing...

[+]Monitoring file System event

[+]Init for accessing

[+]Allocate memory for watch descriptors

[+]Target : total 14 directorise

[+]Listening


아무 앱이나 해봣습니다. /data/data/jp.naver.line.android와 /data/app/jp.naver.line.android-1/ 을 함께 모니터링 해봤습니다.

실행하고 나면 총 하위디렉토리 포함 총 14개의 디렉토리가 발견되었고 모니터링을 시작한다고 표시됩니다.


또한, temp directory가 있습니다. 새로 생성되거나 수정된파일들은 모드 /data/local/tmp/mm_cmp 폴더로 자동 복사가 됩니다. 때문에 순간적으로 생성되는 파일들도 별도의 분석없이 다 확인이 가능합니다. 


점검 시 /data/local/tmp/mm_cmp 폴더 내 모인 파일들에서만 중요정보를 확인해보시면 될것 같습니다. 검색 기능은 추가예정이나 귀찮아서 못하고 못하고 있습니다. 추후 추가 예정이니다. 


모니터링은 다음과 같이 표시됩니다. 


[OPEN]: /data/data/jp.naver.line.android//databases/TsEvent-journal [file]

[MODIFY] : /data/data/jp.naver.line.android//databases/TsEvent-journal [file]

[MODIFY] : /data/data/jp.naver.line.android//databases/TsEvent-journal [file]

[OPEN]: /data/data/jp.naver.line.android//databases/TsEvent-journal [file]

[CLOSE_NOWRITE] : /data/data/jp.naver.line.android//databases/TsEvent-journal [file]

[OPEN]: /data/data/jp.naver.line.android//databases/TsEvent-journal [file]

[CLOSE_NOWRITE] : /data/data/jp.naver.line.android//databases/TsEvent-journal [file]

[OPEN]: /data/data/jp.naver.line.android//databases [directory]

[OPEN]: /data/data/jp.naver.line.android//databases/ [directory]

[CLOSE_NOWRITE] : /data/data/jp.naver.line.android//databases [directory]

[CLOSE_NOWRITE] : /data/data/jp.naver.line.android//databases/ [directory]

[MODIFY] : /data/data/jp.naver.line.android//databases/TsEvent [file]

[MODIFY] : /data/data/jp.naver.line.android//databases/TsEvent [file]

[OPEN]: /data/data/jp.naver.line.android//databases/TsEvent [file]

[CLOSE_NOWRITE] : /data/data/jp.naver.line.android//databases/TsEvent [file]

[OPEN]: /data/data/jp.naver.line.android//databases/TsEvent [file]

[CLOSE_NOWRITE] : /data/data/jp.naver.line.android//databases/TsEvent [file]

[MODIFY] : /data/data/jp.naver.line.android//databases/TsEvent-journal [file]

[OPEN]: /data/data/jp.naver.line.android//databases/TsEvent-journal [file]

[CLOSE_NOWRITE] : /data/data/jp.naver.line.android//databases/TsEvent-journal [file]

[CLOSE_WRITE] :/data/data/jp.naver.line.android//databases/TsEvent-journal [file]


파일 또는 디렉토리를 열거나 닫을때, 수정할때, 생성할때 등 이벤트를 표시해 줍니다. 


생성, 변경 등의 이벤트가 발생한 파일에 대해서는 /data/local/tmp/mm_cmp에 모이게 됩니다.


130|root@zerofltektt:/data/local/tmp # cd mm_cmp

root@zerofltektt:/data/local/tmp/mm_cmp # ls -al

-rw------- root     root        20480 2018-04-04 09:11 TsEvent

-rw------- root     root        12824 2018-04-04 09:11 TsEvent-journal

-rw------- root     root        12824 2018-04-04 09:11 TsEvent-journal_cmp

-rw------- root     root          741 2018-04-04 09:11 com.google.android.gms.measurement.prefs.xml

-rw------- root     root          741 2018-04-04 09:11 com.google.android.gms.measurement.prefs.xml_cmp

-rw------- root     root        16384 2018-04-04 09:11 google_app_measurement_local.db

-rw------- root     root        16384 2018-04-04 09:11 google_app_measurement_local.db_cmp

-rw------- root     root       311296 2018-04-04 09:11 naver_line

-rw------- root     root        12824 2018-04-04 09:11 naver_line-journal

-rw------- root     root        20480 2018-04-04 09:11 naver_line_push_history

root@zerofltektt:/data/local/tmp/mm_cmp #


_cmp 라는 파일들이 있는데, 사실 변경전과 변경 후를 비교하기 위해서 만들었던 파일인데 다른곳에 신경쓰다가 까먹고 안했습니다...


2. PID가 필요한 기능들


 pid가 필요한 기능들을 모아 뒀습니다. 


사용법은 다음과 같습니다. 


./mm -p [PID] [OPTIONS]


-i : 라이브러리 인젝션 기능입니다. 4.x 버전까지는 잘 동작하나 5.x부터는 selinux가 강화되어 /system/lib로 복사 후 인젝션을 진행해야 합니다.

 현재는 별도의 인젝션 도구를 만들어 사용하고 있으나 자동화가 되어있지 않습니다...


-s : SVC 모니터라고 해놨으나 사실 구현하다가 왜 이걸 만들고 있나...쓸곳도 없는데....라는 생각에 접었습니다. 무시하셔도 무방합니다.


[+]Pid : 17531

[+]svc checker...

[+]Attached...

[+] recvfrom(0x70, *buf, 0x8d8, 0x40)

[+] recvfrom(0xe0, , 0x8d8, 0x40)

[+] sendto(0x70, , 0x10, 0x4040)

[+] recvfrom(0x70, *buf, 0x8d8, 0x40)

[+] recvfrom(0xe0, , 0x8d8, 0x40)

[+] recvfrom(0x70, *buf, 0x8d8, 0x40)

[+] recvfrom(0xfffffff5, , 0x8d8, 0x40)


-d : 디버깅옵션 입니다. 디버깅을 차단하기 위한 방법으로 gdb같은 특정 프로그램을 막는경우 테스트하기 위해 만들었습니다.  이것도 딱히 쓸 일은 없을듯 하여 자세한 설명은 생략하도록 하겠습니다.


[+]Pid : 17531

[+]Debugging mode

[+]Mode : None(0)

[+]Starting...

REGS==========================================================[0]

pc=0xf765a41c lr=0xf75d574b sp=0xff847008 fp=0x12c04dc0

ip=         0 cpsr=0x600d0010

r0=       0x1 r1=0xff847008 r2=0xf75d9ba0 r3=         0

r4=      0x32 r5=       0x1 r6=0x12c04dc0 r7=     0x107

r8=0x70ecdca8 r9=0xf4c28000 r10=         0 o_r0=       0x1

VALUE=========================================================

pc=0xe1a0700c lr=  0x4a0398 sp=         0 fp=0x71764370

r0=0xffffffff r1=         0 r2=         0 r3=0xffffffff

r4=0xffffffff r5=0xffffffff r6=0x71764370 r7=0xffffffff

r8=0x716a3038 r9=  0x550000 r10=0xffffffff


REGS==========================================================[0]

pc=0xf765a41c lr=0xf75d574b sp=0xff847008 fp=0x12c04dc0

ip=       0x1 cpsr=0x600d0010


3. 터치 이벤트 관련


 예전에 터치 이벤트 관련하여 작업할때 만들어 뒀던 기능입니다. 사용자가 터치이벤트를 통해 어떠한 액션을 취한다거나, 특정 화면을 캡쳐하여 탈취할때 사용했었던 기능입니다.


 사용법은 다음과 같습니다.


root@zerofltektt:/data/local/tmp # ./mm -t a  

=> -t만 넣을 경우 메뉴가 뜨지 않습니다. 모니터링할 입력 이벤트를 설정해줘야 하는데 모르시면 아무거나 넣고 실행하시면 다음과 같은 화면이 나타납니다. 


[+]Touch event mode

[+]make temp directory : /data/local/tmp/mm_touch

****************************************************

[*] MM_TOUCH Copy Dir : /data/local/tmp/mm_touch

[*] Device Info Dir   : /proc/bus/input

****************************************************


- MENU

  1. Screen Capture (4.1.2 or less)

  2. Screen Capture for Security KeyPad (4.1.2 or less)

  3. Touch Coordinates Capture

  8. Select event (not yet)

  9. Exit


Select Number :



이벤트는 /proc/bus/input/devices 에서 확인 가능합니다. 


cat /proc/bus/input/devices


제 테스트 단말기의 터치 이벤트 정보는 다음과 같습니다. (펜으로 입력 시 이벤트가 다릅니다.)


I: Bus=0018 Vendor=0000 Product=0000 Version=0000

N: Name="sec_touchscreen"

P: Phys=sec_touchscreen/input1

S: Sysfs=/devices/14e10000.hsi2c/i2c-7/7-0049/input/input1

U: Uniq=

H: Handlers=event1

B: PROP=2

B: EV=2b

B: KEY=80 0 420 0 0 0 0 0

B: ABS=4a63800000000000

B: SW=8000


이벤트 대상을 넣고 실행하면 다음과 같이 나타납니다. 


root@zerofltektt:/data/local/tmp # ./mm -t /dev/input/event1

...


- MENU

  1. Screen Capture (4.1.2 or less)

  2. Screen Capture for Security KeyPad (4.1.2 or less)

  3. Touch Coordinates Capture

  8. Select event (not yet)

  9. Exit


Select Number : 3

[MM_TOUCH] Type : 0x3, Code : 0x39,     Value : 96

[MM_TOUCH] Type : 0x1, Code : 0x14a,    Value : 1

[MM_TOUCH] Type : 0x1, Code : 0x145,    Value : 1

[MM_TOUCH] Type : 0x3, Code : 0x35,     Value : 956

[MM_TOUCH] Set Code : Y

[MM_TOUCH] Type : 0x3, Code : 0x36,     Value : 2446

[MM_TOUCH] Set Code : X

[MM_TOUCH] Type : 0x3, Code : 0x30,     Value : 6

[MM_TOUCH] Type : 0x3, Code : 0x31,     Value : 6

[MM_TOUCH] Type : 0x0, Code : 0x0,      Value : 0

[MM_TOUCH] Type : 0x3, Code : 0x35,     Value : 953

[MM_TOUCH] Set Code : Y

[MM_TOUCH] Type : 0x3, Code : 0x36,     Value : 2448

[MM_TOUCH] Set Code : X

[MM_TOUCH] Type : 0x3, Code : 0x30,     Value : 7

[MM_TOUCH] Type : 0x3, Code : 0x31,     Value : 7

[MM_TOUCH] Type : 0x0, Code : 0x0,      Value : 0

[MM_TOUCH] Type : 0x3, Code : 0x35,     Value : 941

[MM_TOUCH] Set Code : Y

[MM_TOUCH] Type : 0x3, Code : 0x36,     Value : 2449



1,2 번은 화면 캡쳐기능입니다. 이미지 프레임 버퍼에서 데이터를 가져와 복원하는 방식이나, 4.x까지만 동작합니다.... 쓸일이 별로 없어서 그 뒤로 업데이트는 하지 않고 있습니다. 


3번을 선택하면 다음과 같이 화면을 터치하는 좌표들이 출력되며, 해당 정보는 /data/local/tmp/mm_touch 에 생성되며 다음과 같습니다.


root@zerofltektt:/data/local/tmp # cd mm_touch/

root@zerofltektt:/data/local/tmp/mm_touch # ls -al

-rw------- root     root          779 2018-04-04 09:52 position.log

at position.log

0:956

2446:956

2446:953

2448:953

2448:941

2449:941

2449:902

2461:902

2461:848

2486:848

2486:802

2526:802


해당 좌표 정보를 이용하여 사용자가 어떤 동작을 수행했는지(생성순서가 시간별), 어떠한 글을 썼고, 서명을 했고, 그림을 그렸는지 복원이 가능합니다.

memget windows용에 해당정보를 넣으면 이미지로 복원시켜주는 도구를 만들었었는데 어디간지 모르겠네요....나중에 찾으면 같이 올리도록 하겠습니다.


4. Class dump 관련


 말그대로 dex파일로부터 클래스 덤프하는 기능입니다. 공부겸 겸사겸사 만들어 봤던기능입니다. 


사용법은 간단합니다.


./mm -d [DEX FILE PATH]

ex) ./mm -d classes.dex


실행결과는 다음과 같습니다.


[+]Dex Class Dump mode

[+]make temp directory : /data/local/tmp/mm_dump

[+]Done


폴더에 결과를 확인하면 다음과 같습니다.


Lcom/e/a/a/b/a; <clinit>; Void; Void

Lcom/e/a/a/b/a; <init>; Void; Void

Lcom/e/a/a/b/a; inProgress; Float, Long, Int; Void

Lcom/e/a/a/b/a; onAfter; Int; Void

Lcom/e/a/a/b/a; onBefore; w, Int; Void

Lcom/e/a/a/b/a; onError; e, Exception, Int; Void

Lcom/e/a/a/b/a; onResponse; Object, Int; Void

Lcom/e/a/a/b/a; parseNetworkResponse; y, Int; Object

Lcom/e/a/a/b/a; validateReponse; y, Int; Bool

Lcom/e/a/a/b/b; <init>; Void; Void

Lcom/e/a/a/b/b; parseNetworkResponse; y, Int; Object

Lcom/e/a/a/b/b; parseNetworkResponse; y, Int; String

Lcom/aio/downloader/adapter/LastRequestListAdapter$MyStringCallback; <init>; LastRequestListAdapter, String, Long, String, Int, LastRequestListAdapter$ViewHolder; Void


기본출력값은 int, Bool 등으로 출력됩니다. 달빅형식으로 출력을 원하면 -d 옵션을 사용하면 됩니다.

Landroid/support/v7/app/e; a(I, Landroid/view/Menu;) V

Landroid/support/v7/app/e; a(Ljava/lang/CharSequence;) V

Landroid/support/v7/app/e; a(I, Landroid/view/KeyEvent;) Z

Landroid/support/v7/app/e; a(Landroid/view/KeyEvent;) Z

Landroid/support/v7/app/e; b( ) Landroid/view/MenuInflater;

Landroid/support/v7/app/e; b(Ljava/lang/CharSequence;) V

Landroid/support/v7/app/e; b(I, Landroid/view/Menu;) Z

Landroid/support/v7/app/e; c(Landroid/os/Bundle;) V

Landroid/support/v7/app/e; f( ) V

Landroid/support/v7/app/e; h( ) Z

Landroid/support/v7/app/e; k( ) V

Landroid/support/v7/app/e; l( ) Landroid/support/v7/app/ActionBar;

Landroid/support/v7/app/e; m( ) Landroid/content/Context;



Posted by Nvdark
,

다운로드는 https://unsigned.kr 에서 가능합니다.



- 모든 도구는 개발중, 또는 다수의 버그를 가지고 있습니다. 

- 시간이 없어 급한데로 필요한 기능만 구현하고 고치질 않고있습니다...귀차니즘이...참고하시면 될듯 합니다.


1. memget project

 - 윈도우용 취약점 점검 및 모의해킹용으로 업무를 수행하면서 필요했던 기능들을 넣어둔 도구입니다.


2. memget mobile for android

 - 안드로이드용 입니다.

 - 현재 풀버전[베타]을 공개해뒀으며, 버그가 있는 개발중인 버전입니다.


3. memget mobile for ios

 - 트윅입니다.

 - 탈옥탐지 우회를 위해 개발했습니다.



Posted by Nvdark
,

진짜 블로그 열심히 하시는분들은 대단한듯....귀찮아서 못해먹....



UI도 바꾸고, 전반적으로 다 뜯어고치고 싶은데....실력은 안되고.. ㅠㅠ 

그냥 그대로 계속 붙이다보니...지금은 좀 덩치가 커져서 다시만들 엄두가 안난다...


앞으로 업데이트 할때마다 업데이트 내역을 작성해봐야겠다... 안했더니...히스토리가 없다....


일단, 최근 작업내용 정리!!


- 마지막 작성글 기준 변경사항


 1. 버전 변경  

   => 1.8.16.58 -> 1.10.22.74 Build 7602



 2. 기능 추가 

  1) Network Config Viewer : 네트워크 장비에 대한 설정파일 뷰어

   - 사실 이것저것 보다보면 네트워크 장비의 설정파일을 보고 판단할일이 많다. 라우팅테이블부터, 보안관련 설정까지 등등... 설정파일이 한눈에 들어오지 않고, 많은 장비를 한번에 판단하기 위해 UI를 덮고 기능을 좀 추가해 봤다.

   - 로딩된 모든장비에서 원하는 문자열 검색 가능

   - IP, AccessList, Vlan등 추적 기능 (거창한건 아니고 어느장비에서 해당 IP등을 사용하는지 장비/인터페이스 등 별로 다 뽑아줌)



  2) Broxy : 브라우져 프록시

   - 이건 요세 작업중인건데 인터넷 뱅킹 등 점검하다보면 네트워크 프록시 점검 도구(피들러 등)나 메모리 점검, 개발자도구등을 사용할수 없도록 보안기능들이 동작한다. 매번 우회하는것도 힘들어서 만들어보았다.

   - 개발중이라 기본 기능만 구현했지만,  나중에 다양한 기능을 추가할 예정이다. 

   - 보안기능에 잡히지 않는다.

   - 내가 원하는기능을 구현하여 자동화가 가능할 듯하다. 




  3) Cryto

   - 인코더, 디코더, 암복호화 등 쓸때마다 인터넷에서 검색하고, 인터넷안되면 받아둔 프로그램으로 돌리는데 그것도 오류나면 답이없다...그래서 만들어보았다...

   - SEED, AES, MD5, SHA0~SHA512 지원

   - 인디코더는 추가중(현재 HEX, ASCII, BASE64 가능)

   - 추가 필요하면 넣으면 될듯




  4) File Format Extractor

   - 그냥 메모리나, 파일등에 있는 파일 찾아내는 기능이다.

   - 점검하다가 이미지를 찾을일이 있었고, 그래서 만들었다...

  

  5) Android Connect

   - 이건 순전히 편의 기능이다.

   - 스샷찍으면 파일을 일일이 빼와야 하는게 귀찮아서, 자동으로 해주는 걸 만들었고,

   - adb접속도 가능하며, 자주사용하는 점검도구 자동 설치기능을 제공한다.

  

  6) 기타 기존 기능 업데이트

   - 기타 기존에 있던 기능들 업데이트 및 버그 수정등 ....많이 했다....



항상 느끼는거지만, 그때그때 필요해서 급하게 만들다보니, 오류나 버그는 신경안쓰고 기능구현에만 집중한다....그래서...쓰다보면 버그가 엄청나다... ㅠㅠ


사실 안드로이드, iOS버전도 업데이트가 많이 되었고, 기능추가도 많이 되었다...


이제부터 좀 착실히 정리를 해놔야겠다...

 


  

Posted by Nvdark
,
원래 글을 잘 적진 않지만....

다음에 혹시나 가시려고 찾아보시는 분들을 위해 몇가지 정보를 좀 끄적입니다.

(때문에 사진은 생략하겠습니다)


 - 5박, 올인클루시브, 대한항공


0. 명칭

 - 썸머아일랜드 빌리지, 썸머아일랜드, 썸머아일랜드 몰디브 등 다 같은 명칭인듯하나, 실제 리조트에서는 썸머아일랜드 몰디브 라는 명칭을 사용합니다.

1. 몰디브 공항 ->썸머아일랜드

 - 일단 입국심사를 마치고 나오시면 부스들이 쭈욱 있습니다. 썸머아일랜드의 경우 독립 부스를 가지고 있지 않기 때문에 몇개의 리조트(기억으론 5개정도였던것 같습니다.)가 하나의 부스를 사용합니다. 때문에 처음에 부스찾느라 고생했습니다 ㅠ_ㅠ

 - 위치는 입국심사 후 나오자마자 부스가 3열?4열 정도로 있는데, 1열 왼쪽에 있습니다. 글씨가 적혀있긴 하나...리조트 이름이 여러개가 적혀 있어 조그만하게 적혀있습니다. 잘 찾으셔야해요


2. 체크인

 - 일단 워터빌라 자쿠지에서 5박 했습니다. 스피드 보트에선 물수건과 물을 나눠 줍니다. 약 45~50분정도 배를 타고 들어가면 도착합니다.

 - 짐꾼이 케리어를 들어다 주는데 팁은 알아서 주시면 됩니다.(전 2명이 따라와서 1인당 2불씩 줬는데 뭔가 불만족 했는지 표정이 별로더라구요)

 - 전 대한항공을 타고 갔기에 아침 도착이였고, 점심부터 식사를 할 수 있었습니다.


3. 올 인클루시브 포함 사항

 - 일단 레스토랑 두곳, 바 두곳 전부 무료입니다. 

  : 메인레스토랑(이름을 까먹었습니다, 땅위에 있는 레스토랑입니다. 아침, 점심, 저녁 뷔페로 진행되며, 즉석코너가 있습니다.) ::::: 개인적으로 요기가 괜찮았습니다. 주로 메인레스토랑 가서 먹었어요. 뷰는 서브레스토랑이 좋으나 음식이 더....

  : 서브레스토랑(HIYA 였던것 같습니다. 여긴 메인레스토랑보다 메뉴는 적지만, 메인메뉴 5가지중 1가지를 선택하여 식사가 가능합니다. 단 젖은 옷을 입고 가는것은 안됩니다. 방가서 갈아입고 오라고 합니다. 바다위에 지어져 있습니다.

 : 메인레스토랑 옆 바(여기는 직접 바에 가서 주문을 하고 받아서 자리에 앉아 마시면 됩니다. 올인클루시브용 메뉴판이 있으며, 그 외 음식은 챠지가 붙습니다.)

 : 서브레스토랑 옆 바(여긴 앉으면 직원이 와서 주문을 받고 가져다 줍니다.) : 바는 요기서 많이 먹었습니다. 뷰가 끝내줍니다. 역시 바다위에 있습니다.

 - 일단 냉장고에 있는 모든 것(미니 바, 음료 등) 절대 드시면 안됩니다. 추가 금액 붙습니다. 매일 하우스 키퍼가 와서 체크합니다. 여기서 팁을 알려드리자면, 바가 두곳이 있는데 가서 방에서 마실 음료를 달라고 하면 줍니다. 이걸 받아서 방 냉장고에 넣어두시고드시면 됩니다. 아니면, 미니바에 있는 음료 이용 후 바에 가서 얻어오셔도 됩니다. 단 하우스키퍼가 체크하기전에 얻어오세요.

 - 하우스 키퍼 팁은 하루 3불정도씩 줬습니다. 아침 점심 저녁으로 체크해주고, 아침에는 청소, 점심, 저녁에는 필요한것들을 물어보고 다음날 클리닝 해줄까? 라고 물어봅니다.

 - 보통 전 물과 타올을 달라 했습니다. 

 - 아 그리고 커피와 티는 무료 입니다.(네스프레소 머신이 있고, 캡슐을 리필 가능합니다.)


4. 즐길 거리

 - 가장 아쉬웠던게 스노클링 트립(무료)를 한번뿐이 못갔다는거네요... 기대도안했는데 생각보다 너무 좋았습니다. 리셉션에 가셔서 스노클링 트립 예약하시면되는데 시간 때가 많습니다. 자리 빈곳 예약하시면됩니다. 제가 갔을땐 생각보다 사람이 많아서 마지막날에나 할 수 있었습니다.... 다른 블로그들 보면 사람 없었다는 곳도 있었는데...전 아니였네요... 그리고 예약을 못했더라도, 스노클링 트립 출발시간에 맞춰 선착장으로 가면, 예약인원이 다 오는게 아니기때문에 공석이 생길 시 델꾸가 줍니다. 

 - 전 스쿠버다이빙을 하기때문에 리셉션 바로 옆에 있는 다이빙 센터에서 다이빙을 했습니다. 처음 오리엔테이션 다이빙을 한 후 칠판에 적힌 스케쥴에 따라(매일 저녁 18시에 다음날 스케쥴이 작성됩니다.)진행되며, 원하는 타임에 다이빙센터로 가면 다이빙을 즐길 수 있습니다. 다이빙 비용에는 자켓과 레귤레이터 렌탈비가 포함되어있습니다. 

 - 마스크 스노클, 핀 등은 다이빙 센터에서 빌릴 수 있으며, 마스크와 스노클은 개인장비를 가지고 갔기 때문에 핀만 빌렸습니다. 핀은 하루 5$, 일주일 25$ 입니다. 웃겼던건 스노클링용 핀은 상태가 별로 안좋았습니다. 그래서 전 와이프와 다이빙을 하면서 초반에 빌렸던 스노클링용 핀을 전부 다이빙용 핀으로 바꿔서 사용했습니다. 리조트 내 기념품 샵에서도 다 판매하고 있으나 왠만하면 국내에서 사가지고 가시는게 더 저렴해보입니다. 

 - 바다에서 스노클링하는것도 꽤 좋았습니다. 다이빙센터에 메니져(알리)가 말하길, 선착장을 기준으로 우로는 빨간 풍선 두개 지역, 좌로는 방파제(돌로 벽을 쌓아놨습니다) 밖으로 도는것을 추천했습니다. 실제로 가보니 비치<->방파제 사이에는 별로 볼게 없지만 방파제 밖으로 나가니 정말 이뻤습니다. 그리고 방파제<->선착장 사이에 상어가 자주 보이더군요(안전합니다.) 상어가족을 만났는데 와이프가 놀라 소리를 치는바람에 제가 더 놀랐었습니다. 

 - 바다 색이 에메랄드빛에서 푸른빛으로 변하는 지역이 있는데 보통 수심이 깊어지는 지역입니다. 선착장 쪽에서 바다를 바라보면 바로 앞부터 파란색 물로 변하는데 수심은 5~25미터 정도 되는듯 합니다. 이쪽은 오리엔테이션 다이빙을 하는 지역이라 이쁨니다. 꼭 가보세요~ 그리고 이 지역에 다이빙센터 메니져가 물고기 집 만드느라 10개월동안 고생했다고하네요 ㅋㅋㅋ 아직도 작업중이랍니다. 플라스틱을 모조리 없애버리겠다던....메니져의 다짐이 아직도 귀에 선하네요ㅋ

 - 전 그동안 다이빙하면서 찾아다녔던 스팅레이, 만타, 오스카 등을 몰디브에서 하루에 다 봤습니다...심지어는 조식먹으러 서브레스토랑에 갔는데 (방과 가까워서..) 상어가 지나다니고, 문어가 헤엄치고, 심지어는 가오리도 지나다녔습니다. 


5. 특이사항

 - 저희가 갔을땐 동양인 4명도 안됬습니다.... 유럽인을 대상으로 하는 휴양지라 그런지 동양인은 보이지도 않습니다.... 그래서 그런가....기분탓인가...잘 모르겠지만...레스토랑마다 동양인 담당하는 웨이터가 있는듯 했습니다. 다른 웨이터들은 오지도 않고 주문도 안받고, 온다해도 엄청 불친절 합니다. 그래서 우리를 담당하는 웨이터와는 친하게 지내고 팁도 많이 줬습니다. 너무 고맙더군요...

 - 다이빙센터 직원들은 전체적으로 친절합니다. 단, 처음 핀을 빌리러 갔을때 엄청 무뚝뚝하던 직원이 있는데 다이빙도 하고 몇번 말도 해보니 나중엔 해맑게 웃으면서 맞이해주더군요 ㅋㅋㅋ

 - 일본인 스텝은 있었으나, 한국인 스텝은 없습니다. 


6. 체크아웃

 - 출발 전날 체크아웃 디테일을 넣어준다하고선 안넣어줘서 저녁에 리셉션 가서 직접 받아왔습니다....

 - 케리어는 방 문 밖에 두시면 알아서 가져다가 배까지 싫어다 줍니다. 

 - 그동안 추가 금액이 필요한 서비스에 대한 페이를 하고 체크아웃을 마칩니다.(전, 기념품샵, 다이빙에 대한 챠지가 있어서 지불했습니다.)


7. 총평

 바다는 끝내줬고, 날씨는 기가 막혔습니다. 정말 시간만되면 또 가고싶은 곳입니다 ㅠ

 몇가지 좀 서운하긴 했지만 100점중 95점 주고싶습니다. 

 사람많고, 시끄럽고, 흔해빠진 리조트에 질리셨다면 강추합니다. 조용하고, 한적하며, 정말 이게 휴양이구나 라고 느껴집니다. 단, 어떤분에게는 심심할수도 있어요. 전 주로 바에가서 맥주를 마셨습니다. (브랜디, 보드카, 럼, 위스카 다 공짜입니다.)



Posted by Nvdark
,

가끔 보면 이것저것 분석할 일이 생기는데 불편함을 느낄때가....

 API Monitor 같은 도구는 말 그대로 API만 모니터링 해준다.

IDA로 분석 후 올리로 확인하면 되지만 너무 귀찮고 매번 쫏아가서 확인하기도 귀찮고...해서 열심히 찾아봤지만

API가 아닌 사용자 정의 함수(USER Function)에 대한 모니터링 도구가 없었다.

그래서 하나 만들어 써야겠다는 생각에 만들었는데 제법(?) 쓸만하다.. ㅋㅋㅋ


만든 도구인데...

간단히 설명하면... 

1. 분석하고자 하는 대상 프로세스를 선택 후

2. 내부에서 사용하는 DLL 리스트를 확인. 이 후 분석하고자 하는 DLL를 선택하면, 내부 im/export 함수 목록과 기본 정보가 출력하며, 등록되지 않은 다른 함수들도 출력(내부에서 사용자가 구현한, 또는 im/export 되지 않은  함수들)

3. 원하는 대상을 클릭 시 해당 함수 내부에서 호출 또는 점프하는 주소를 출력

4. 주소값 확인 후 모니터링 대상에 추가 후 모니터링 ( 모니터링 주소값은 임의로 추가 가능)


아직 버그가 몇개 남아있어서 수정중이긴 하지만 지금도 나름 쓸만해보인다...극히 개인적인 생각.. ㅋㅋ

API와 같은 함수들은 파라미터들을 확인하고 원하는 값을 뽑는게 가능하지만, 사용자 정의 함수는 파라미터이 몇개인지 알 도리가 없으므로(물론 IDA와 같은 좋은 도구들은 어떻게 찾는지 모르지만, 뽑아줌...하지만 난 모름..ㅋ) 파라미터 3개까지만 각 자료형별로 출력하도록 했다. 

어차피 이건 Memget Project에 포함되있는 기능이고, 해당 파라미터가 만약 포인터 또는 구조체일 경우 주소를 덤프떠보면 뭐가 나오지 않을까? ...


차후 필요한 기능들을 좀더 붙여봐야겠다.

Posted by Nvdark
,

아이도져는 여러가지가 있는데....참...별게 다있네요...

편두통방지, 불안제거, 휴양, 흥분, 불안방지, 흥분제, 불면증 등이 있고, 강도 또한 다 다름니다.

또한 듣을때 스피커가 아닌 이어폰으로...최대한 잡음을 없애고 들어야 효과를 볼수 있습니다.

약 75개정도가 있네요. 물론 이건....2009년도 기준입니다. :)

하나를 듣고나면 꼭 리셋을 들어줘야 한담니다. 전 예전에 한번 듣고 그뒤로 겁나서 건들지도 않았는데 자료정리하다보니 나와서 정리해봅니다. (유입키워드에 아이도져 검색하는분들이 많아서 ㄷㄷ)

개인적으론 구하지도, 듣지도 않을것을 권장합니다.


정품과 데모가 있다고 하는데 가지고 있는건 정품같군요...개당 짧은건 5분에서 긴건 60분짜리 까지 있습니다. 거의 평균적으로 30분짜리입니다. 길이가 긴 만큼 파일 크기도 어마어마 합니다. 

I-Doser(All The Original Ones In Mp3) And Instructions (By Kandinskij) : 3.61GB (3,882,789,733 BYTE)

!RAVE! / Recreational (Very Strong) / 30 Minutes / Party all night! The lights, the waves of bliss that cover over your entire body, the euphoria that streams through your veins, pumping music, non-stop dance, the way every single little touch or look hits you with such force that the world is completely inside you, around you, over and under you, one with you. Perfect for a night out dancing, going to a rave, being with friends or lovers, and good for overall enhancement. This dose was modeled after that oh-so-popular rave drug and let us tell you: it comes VERY close: warm-hearted, connected – and a very powerful emotional release! Experienced users only, please! Ecstasy! FINALLY!

 

5HTP  Antidepressant (Moderate)  25 Minutes  Do you know your brain makes happy hormones 5HTP is an amino acid that is used in the brain to make the hormone Serotonin, which is your HAPPY Hormone. We desinged the 5HTP dose to assist your master hormone gland, the pineal gland that makes Melatonin at night and Serotonin during the day. When these two hormones get out of balance, wee feel depressed during the day and cannot sleep well at night. A guaranteed formula for stress. Let our 5HTP dose put things back in the norm. Best taken in the morning when you wake andor at night before sleep, 5HTP will re-level your hormones and help you feel happy again!

 

A-BOMB / Recreational (VERY STRONG) / 30 Minutes / BOOOOM! That is your brain on A-BOMB! And it works just like that: It starts with a low upramp of emotional feelings that seep into the deep crevices of your brain, hardly there, with hardly any effect at all in the beginning. You feel something, that is for sure, as the dose begins to slowly work its way into your mind. A bit a bit of euphoria, that slight cold-sweat your body makes to warm you that something is happening. Not the strongest dose, so far. Not even all that great. Then, it hits! BOOOM! The A-BOMB goes off and the hrz level propels you into the deepest reaches of space where there is NO reality, which is why this dose is often called the reality buster. A-BOMB mixes everything we know about how binaural doses can effect you, and ramps it up times infinity. We get constant emails about this favorite, and they all say basically the same thing: IT BLEW MY MIND! Exactly.

 

Absinthe / Recreational (VERY STRONG) / 45 Minutes / The Green Fairy; The Green Goddess; La Fee Verte. Our engineers went back to first-hand accounts recorded as far bast as the 1850s, and attempted to simulate the effects of of this mystic green drink. Did we succed? We may never know for sure, since Absinthe was banned long ago. We've compared it to other real-world wormwood concoctions, and we think you will agree there is something to this: lucidity hits slowly as your speech becomes very articulate and your ideas clear, the haze sets, but but drifts, you are drunk but you aren't. Suddenly you realize why this was the drug of choice for Van Gogh, Baudelaire, and Verlaine - it is a surreal smooth unlike anything available on the street today that opens your mind, glosses over the universe, but makes everything clear all at once. Amazing, is what you will call it. Absinthe is what it is.

 

ACID / Recreational (Very Strong) / 30 Minutes / The acid dose recreates the psychoactive experience: general change in consciousness, difficulty focusing, unusual body sensations (facial flushing, chills, goose bumps, body energy), unusual thoughts and speech, change in perception of time, quickly changing emotions (happiness, fear, giddiness, anxiety, anger, joy, irritation), slight increase in body temperature and a feeling of unity will abound as this dose rushes through the paces. This dose will come on very strong, with an initial burst followed by a stream of conscious mellowing that fades into bliss. The first bump is a big one, and quite jarring, so be prepared for the ride of your life.

 

ADRENOCHROME / Recreational (Very Strong) / 30 Minutes / Adrenochrome is an oxidation product of adrenaline (ephinephrine, norepinephrine). It has achieved mythical status as a deliberately-ingested psychoactive -- boosted by H.S. Thompson's Fear and Loathing in Las Vegas. It is reputed to cause disorientation and hallucinations. USE AT YOUR OWN RISK!

 

AFTERGLOW / Sexual (Moderate) / 30 Minutes / The feeling of afterglow: when the heat of lust has passed, this is the content glow you bathe in... A quiet inner shimmering following the fireworks of orgasm. So, lean back, be still, except for breathing - cherish all the millions of tiny sensations as they change every second. This is AFTERGLOW!

 

AfterMath / Stimulant (VERY STRONG) / 30 Minutes / This is a new designer drug that hits hard. There is no mellow upbring like many of our doses have - this one rocks, and doesn't let up until it is over. Prepare for a feeling of well-being, exhilaration and euphoria, with a massive increase in alertness and energy as any fatigue gets wiped from your body... you will actually go through such a rush that it leaves you bombed. This is why we call this hot designer dose AFTERMATH!

 

Alcohol / Recreational (Moderate) / 35 Minutes / Liquor. Spirits. Beer. Wine. Alcohol is one of the most common strong psychoactives used by humans. It has a long history of use and its intoxicating effects are well studied and documented: relaxation, mood lift, happiness, giddiness, talkativeness, lowered inhibitions, reduced social anxiety, and analgesia. Our alcohol dose is like shot gunning five glasses of gin, in force. The effects come on strong, but mellow fast, and ease into a condition of relaxation flightiness and overexcitement. Some have even experienced pure drunkenness from a single dose. Best of all, no hangover.

 

Alpha / Pure (8 to 13 Hz) / 30 Minutes / This is produced when you are awake and fully conscious, but with your awareness focussed inside, such as when trying to remember something, or when your eyes are closed. For beginner meditation, etc, Alpha is the perfect starting point in moving forward in meditation. Alpha causes Slower brain waves that are conducive to creative problem solving, accelerated learning, mood elevation, stress reduction, etc, characterized by intuitive insights, creative juice, inspiration, motivation, daydreams etc. Relaxed, yet alert.

 

Anesthesia / Sedative (VERY Strong) / 30 Minutes / Let's not beat around the bush: Anesthesia will mess you up. DO NOT get in a car after this dose! Not like you can, since the only thing you will want to do is drop to the floor and let the world swirl around you. Testers have called it a "short lived, but a crazy numbing experience." You can use it for any form of pain (toothache, headache, etc.) and it works great, or simply get it for a good example of what an i-doser dose can do. Just make sure your bed isn't far from your computer. Trust us.

 

Anti-Migraine / Sedative (Moderate) / 20 Minutes / Everybody get headaches, and it is usually just a pop of the aspirin bottle. However, sometimes they are so bad "nothing" helps. This is why we designed Anti-Migraine. For those of you who don't like medication, can't find something that works for those migraines, cluster headaches, or just plain vanilla headaches - this takes you from a normal alpha state to a .5hz migraine-busting level. Sure to bring you some soothing relief!

 

AntiSad / Antidepressant (Strong) / 30 Minutes / We all have those bad days. AntiSad is our strongest antidepressant dose we make, and it if for those days when everything goes wrong. Put on the headphones, listen past the binaural beats as it takes your brain from .30hz to .15hz from your normal alpha 10hz, where bouts of depression wash away. Happiness CAN be obtained!

 

Astral Projection / Sleep (VERY STRONG) / 30 Minutes / Astral projection (or astral travel) is an interpretation of out-of-body experiences (OBEs) achieved either awake or via lucid dreaming, deep meditation, or the use of psychotropics. Proponents of astral projection maintain that their consciousness or soul has transferred into an astral body (or "double"), which moves in tandem with the physical body in a parallel world known as the astral plane. The concept of astral projection has been around for thousands of years, dating back to ancient China. Astral projection is also known as "Soul Travel." Take this dose in a dark room, lay back, and see what it feels like to have your entire soul leave your physical body and go on a journey.

 

Beta / Pure (13 to 30 Hz) / 30 Minutes / This is normally generated when you are awake, with the attention focussed outside, dealing with the outside world. It is also generated when you are solving logical problems, such asmental arithmetic. Alert focusing, vitality, concentration on tasks. Earth resonance. Beta causes an increase mental ability, focus, alertness, and IQ.

 

Beta  Pure (13 to 30 Hz)  30 Minutes  This is normally generated when you are awake, with the attention focussed outside, dealing with the outside world. It is also generated when you are solving logical problems, such asmental arithmetic. Alert focusing, vitality, concentration on tasks. Earth resonance. Beta causes an increase mental ability, focus, alertness, and IQ.

 

Brain + / Recreational (VERY STRONG) / 30 Minutes / Brain + is our hybrid recreational smart drug. It was not designed to get you high or remove reality, it is designed you bring you to that next level. If you want to escape reality, there are many doses for you. If you want to massage your brain, spur creative and deep thoughts, ponder existence, then BRAIN + is for you. It brings your brain level to the hz rail responsible for creative and deep smart thinking. As the dose ends its cycle, you will find you mind wandering on some of lifes mysteries. Who know, maybe you can even solve them when you brain if overclocked to a pure, clear, mode of thinking.

 

Bufo)Toad / Recreational (Strongest) / 35 Minutes / There are several species of toads which produce venom that has psychoactive properties. The venom of one species (Bufo alvarius) contains both 5-MeO-DMT and bufotenin, while several others contain only bufotenin. The psychoactivity of 5-MeO-DMT is clearly established and more data is coming to light which suggests that bufotenin is equally psychoactive (both smoked and oral) although somewhat less potent. While dried toad skins are sold by some vendors, there is little benefit to this method as toad venom can be collected without harming the toad 5-methoxy-N,N-dimethyltryptamine or N,N-dimethylserotonin. Bufo)Toad has proven to be one of your strongest doses, so it is highly advised that beginners start with another dose.

 

Calm ME / Antianxiety (Moderate) / 20 Minutes / Almost everyone suffers from at least small bouts of anxiety. Some people have nearly crippling battles with being anxious almost every day. Calm ME was designed to work on two levels: If you feel anxious or are having any form of anxiety attack, Calm ME will help to calm you and assist you in getting past it. It also works very well to prevent an anxiety attack: Great for public speaking, heading into large crowds or parties, or just getting through the day. In one study thirty patients experienced relaxation states of 80-100% after five minutes. Eight patients had blood tests before and after the sessions and showed improved beta-endorphin levels of 10-50%. This is some of the best results we have seem from formal dose testing.

 

Chakra / Stimulant (VERY Strong) / 30 Minutes / A chakra is thought to be a nexus of metaphysical and/or biophysical energy residing in the human body and there are several basic chakras: Sahasrara is said to be the chakra of consciousness, Ajna is the chakra of time and awareness and of light, Vishuddha is said to be related to communication and growth, Anahata is related to the transition from base to higher energy, Swadhisthana is related to sexuality and creativity, and Muladhara is related to instinct. The Chakra dose is a journey though all the major chakras in 30 minutes, so be aware this can be a strain on the body and soul. Be prepared for this jouney as we have reports of outer level consciousness, increased awareness, a great understanding, supreme instinct and a hint of sexuality. The effects of this dose are soul-wide, and not recommended for beginners.

 

Cliff Hanger / Recreational (VERY STRONG) / 35 Minutes / Cliff Hanger is another hybid designer dose that didn't fit in with any specific dose simulation. It gets its name from the feeling it gives you: as if you are standing on the very edge of a bottomless cliff, your toes just slightly over the edge, but with your eyes closed. You know the cliff is there, you FEEL it is there, but you just can't SEE it. Veritgo sets in, the world spins ever so slightly, the air is thin but crisp, and you have that drunken hazy high feeling that you would normally only feel at high altitude, looking down like you were hanging from the edge of a cliff, the universe below. You may have a dizzy feeling, so please take this dose laying down. Not for the new doser, this dose should be considered advanced. As one user puts it: like I just inhaled 3 tanks of nitrous and passed out.

 

Cocaine / Recreational (VERY STRONG) / 30 Minutes / Cocaine is a common stimulant derived from the Erythroxylum coca plant. It is best known for its massive popularity in powdered and freebase forms. Are you ready for it as it: Increases alertness, wakefulness, elevates the mood, mild to high degree of euphoria, increases athletic performance, decreases fatigue, clearer thinking, increases concentration, and increases energy? Warning, this one comes close! We have marked it VERY STRONG for a reason, and you will soon find out why.

 

Content / Sedative (Moderate) / 20 Minutes / When everything is right, and you don't have a care in the world, you are Content. Life is complicated and fast, and it is a rare occurrence when you have absolutely nothing to worry about. Content will calm you, energize you, bring a smile to your face and, for a period of time, make you feel like everything is right. It wipes negative static from your mind, soothes you, and gives you a boost when life gets crazy. Become Content.

 

Crystal Meth / Recreational (VERY STRONG) / 35 Minutes / This dose seems to do both good and bad, but it is such a fine example of how a binaural dose can really effect your entire body. Expect increased energy and alertness, decreased need for sleep, euphoria, increased sexuality, excessive talking, sweating, visual & auditory hallucinations (hearing voices.) This dose literally freaked out several of our beta testers when they got sweats and reported hearing things from inside their head. This dose can often feel somewhat more like MDMA (Ecstasy) than a simple stimulant including a sense of euphoria, openness, and intellectual expansion. There can be a mild psychedelic component as the new user feels they see the world a little differently. The sensation of mind-expansion and openness quickly fade after the first few uses and physical and mental stimulation dominate the experiential effects. Because of some of adverse effects like sweating and auditory hallucinations, we have marked this very strong. Use caution!

 

Delta / Pure (0.5 to 4 Hz) / 30 Minutes / This is normally generated in deep sleep, or when unconsious. Those experienced in deep trance states can generate these waves whilst remaining conscious. Conducive to miracle type healing, divine knowledge, inner being and personal growth, rebirth, trauma recovery, one with the universe experiences (samadhi), near death experience, characterized by unknowing merely a blissful being state such as deep sleep or coma. High level mediation, Delta can assit you reach peak monk-type levels.

 

Demerol / Sedative (Very Strong) / 30 Minutes / Demerol is a synthetic opioid analgesic used for the relief of moderate to severe pain. It is also prescribed off-label for the treatment of shivering. Our Demerol dose is felt 10-15 minutes after the dose begins and lasts anywhere from 2 to 4 hours. It will slows your brain activity and brings on strong sedation and euphoria because it hits the pleasure centers of the brain in a soothing slow come-on with no harsh aftereffects. This dose is best described as smooth.

Dexies / Recreational (VERY STRONG) / 35 Minutes / We delayed releasing this dose after the first report from a test user came in: My mind was racing away. I started to get nervous and paraniod. The breeze from the open windows freaked me out cause one second I felt hot then the other I felt ice cold. I was really scared. My mind fely like it was completly unatched to my body. It was so weird it was like the day before had never ended and my memory was severely impaired. I didnt remeber what i had done the day before. Amphetamine - straight up and pure. No padding, no filler. There is a warning attached to this dose: It could be a rough one. You heart will pound as this rollercoaster ride begins, and it will not stop until this dose has taken you over, ravaged you, and spit you out in an awake, jittery, shaking, mess of a person. For advanced users only. There is nothing smooth about this dose.

 

 

Divinorum / Stimulant (VERY STRONG) / 30 Minutes / Divine: To see in new light the world around you, shimmering. Divinorum is the result of 2 months of testing and the only dose to be created by the creator and visionary behind I-Doser. It is her baby. When we say this is a very strong dose, we are not kidding. It was designed to give you inner insight, a view inside, and a deep trip into your soul. Take this dose in the dark, on your bed, and get ready for one of the most spiritual trips possible through an I-Doser dose. I have seen inside myself, and not everything is clear.

 

DMT / Prescription (VERY STRONG) / 35 Minutes / The feeling of doing our DMT dose is as though one had been struck by noetic lightning. The ordinary world is almost instantaneously replaced, not only with a hallucination, but a hallucination whose alien character is its utter alienness. Nothing in this world can prepare one for the impressions that fill your mind when you enter the DMT dose sensorium. The paradox is that DMT is the most powerful yet most harmless of all these things. Load Universe into Cannon. Aim at Brain. Fire.

 

Downer / Sedative (Moderate) / 20 Minutes / When you want to calm Dooooown. Downer takes your from high to low in 20 minutes flat. Great for use after a stressful day, we have also had many reports that it works good as a recreational drug when you are so tweaked that all you want to do is relax and end the night. It won't put you to sleep, but it WILL calm you, ease you out of your buzzing mind-quake, melt away stress, zone you perfectly, and ease you back. For users who want to calm, but don't want to pass out.

 

DXM / Prescription (VERY Strong) / 45 Minutes / Dextromethorphan is a semisynthetic narcotic which is legally available over-the-counter in the United States. It is most commonly found in cough suppressants, especially those with "DM" or "Tuss" in their names. Our DXM dose comes very close to achieving the effects of the real thing: mood lift, euphoria, giggling, laughing, dissociation of mind from body, creative dreamlike experiences, and some users report empathic feelings, forgiveness, and warm feelings towards others. Some have even go as far to say that our dose is better than the real thing!

 

Ecstasy / Sexual (VERY Strong) / 30 Minutes / Let's face it. Sometimes you just want to MAKE it happen, and make it happen hard and good. Ecstasy was designed to bring you to the mind-state of near orgasm. Our strongest, fastest, sexual dose- we do not recommend this for casual users. Bring that experience to the NEXXXT level with Ecstasy. This is not for romance. This is not for cuddle. This was designed to make you explode in pure ecstasy, tingle your body, and melt your soul.

 

Energizer / Stimulant (VERY STRONG) / 30 Minutes / When you need a little pick me up, you try coffee. When you need to be completely wired, use our Energizer dose! Popular with students and those who need to sometimes pull "all nighters," our Energizer dose was designed to keep you going until the sun comes up with very little crash. Forget the energy drinks and coffee, our Energizer dose is the pure and nature way to stay awake when you just don't have the luxury of sleep.

 

Excite / Sexual (VERY Strong) / 50 Minutes / Excite is the perfect dose to put you (or your partner) "in the mood." Designed to be used just prior to sexual activity, or to put you in a sexual brain-state, it takes you through several levels of brain activity to leave you fully charged, ready, and "able." Starting from your normal state, it eases you from slight euphoria into somatic responses, tingling, heat and then melts away anxiety to leave you in the Venus state of love, sexuality, sensuality, and harmony. You WILL be ready.

 

Extend / Sexual (Moderate) / 20 Minutes / When the mood is right, you want and need to LAST! Extend is the perfect supplement to any sexual endeavor. Designed to be a quick dose right before sexual activity, it will leave you feeling refreshed, ready, and able to go all the way and more. Finish too soon? Can't finish at all? Never get started? Extend may be the dose you need.

 

First Love / Sexual (VERY Strong) / 30 Minutes / The feeling of love is such a hard thing to definem so we will let you experience it yourself. We interviewed hundreds of epople to ask them how they felt, mentally and physically, when they first met the "one." We took all those experiences and feelings and packed them into the First Love dose. You will feel your heart sink, a gentle warming, some arousal, a feeling of well-being, and everything will just be brighter, more beautiful, because you you are in love... love struck by one of our more interesting and powerful doses.

 

French Roast / Stimulant (Moderate) / 5 Minutes / French Roast is the perfect Early Morning pick-me-up, or a late night boost when you need a few more hours of open eyes. This dose takes you from an existing state of blah to a normal mid-day condition of awake. Use it in the morning just as you wake up to start the day off right. French Roast synchronizes your brain to 14z, or the state of being alert and awake.

 

Gamma / Pure (25.00-34.75 HZ) / 30 Minutes / Gamma is associated with information-rich task processing and high-level information processing "A New Theory of Consciousness" For scientists who study the human brain, even its simplest act of perception is an event of astonishing intricacy. Gamma brain activity may be a kind of binding mechanism. Gamma waves serve to connect structures in the cortex where advanced information processing occurs, and the thalamus, a lower brain region where complex relay and integrative functions are carried out. Gamma pulses are thought to lead to synchronization and coordination of neurons assigned to the processing of incoming sensory stimulation. Put in computerese, Gamma may be the brain's operating system frequency.

 

Genesis / Stimulant (VERY STRONG) / 30 Minutes / The universe was created with a bang, and we offer you Genesis so you can feel that explosion deep inside. At the start it will feel like a little spark, you will have to concentrate to feel it, like a tiny match burning deep in your soul. By halfway though the dose, the spark will be a forest fire consuming everything that is dark or bad inside you. Bad feelings wash away in this incredible soul-fire. By the end of the dose, your body will be shaking under an explosion of heat, you may feel jittery, alive, awake, and shaking when the final minutes of Genesis hit you: the Big Bang of your soul. When the dose is over, you will feel new, washed away in the incredible fire. Words can not describe the complete wash of this soul bomb: Genesis.

 

Gray-B-Gone / Experimental (Moderate) / 30 Minutes / We are not going to lie: Gray-B-Gone will not bring a head of gray hair back to color. This is an experimental dose for a reason: at 1.05hz the brain triggers the release of our growth hormones. In various labs, over extended use, binaural technicians have found that this forced release of growth hormone has brought intriguing reports of some gray hair returning to its original color, or the seemingly slowing of gray hair growth. This seems to happen when the user is subjected only to longer doses at the 1.05hz mark. Use at your own risk, we offer Gray-B-Gone as an Experimental dose.

 

Hand of God / Premium (Unexplainable) / 30 Minutes / A dose that has been a lifetime achievement for I-Doser.com, and only held internal to I-Doser Labs for a very good reason: It isn’t meant for public consumption because it is considered just too powerful. It’s like the Holy One reaches from the sky, as you lay with closed eyes, and shows you the universe, everything, infinity. Only 5 people have ever witnessed the power of this dose, and it was put away in the I-Doser vault for fear of release. Fluttering eyelids, great and almost supernatural clairvoyance, rings of light and great insight, but all this comes with a price. It could also bring fear, an unknowing realization of self, and a breakdown of all senses. Weeping, fear, anger: you need to realize with such insight could come bad consequences.

 

Hangover Cure / Recreational (Moderate) / 30 Minutes / We've all been there, and sometimes popping some aspirin just won't save you. Order early, and keep "Hangover Cure" as your backup plan. You will thank us later when the pounding head and nausea are doing nothing but keeping you in bed praying for relief. Get up, grab yourself a large glass of water, and go through the hangover cure program. In nearly every case we tested, the hangover cure brought the user to some level of comfort. One of our best selling doses, we like it call it "Plan B." You will too.

 

HASH / Recreational (VERY Strong) / 45 Minutes / Marijuana is one of most popular doses, but we were getting asked all the time to create something just a little more powerful. For the seasoned dosers, I give you HASH! Stronger than marijuana, hash will bring on effects of mood lift, euphoria, laughter, relaxation, stress reduction, creative, philosophical or deep thinking - all with much greater effects than marijuana, so a warning is in order. Start with our Marijuana dose and ONLY move on to the Hash dose after you are experienced.

 

Heroin / Recreational (VERY STRONG) / 30 Minutes / For a much stronger dose than our popular OPIUM, here is Heroin. We get constant reports of feeling a surge of euphoria rush accompanied by a warm flushing of the skin, a dry mouth, and heavy extremities. Following this initial euphoria, the user goes on the nod, an alternately wakeful and drowsy state. You will dream while awake, and be awake while you dream. Unlike any dose we have. If you have tried our opium dose, times it by ten and you are close. Just like the real thing, without the instant addiction and horrific side effects, but still strong beyond belief. New users please try Opium. Experts and those wishing to push the limits, we wish you luck. You'll need it.

 

Inhalant / Recreational (VERY STRONG) / 30 Minutes / Inhalants are either chemicals in gaseous form or volatile solvents (liquids) that becomes gas at the time of use, which are inhaled by people for their psychoactive effects. Our understanding of the literature is that there is no such thing as safe use of most volatile solvents, aerosols or other street inhalants: their psychoactive effects may be inseparable from nerve and organ damage, so we've created a safe alternative. You will feel dizzy, and it will be a wild and crazy ride, so hold on tight.

 

Insomniac / Sleep (STRONG) / 45 Minutes / Many of our sleep doses do the job for a casual users - lulling them into a gentle sleep. None of them were designed for people with a problem, those that can't sleep no matter what. Now there is the Insomniac. It is much stronger than out other sleep doses, so be prepared to get knocked out. You will gentle be rocked into the deepest sleep you have ever had, even if you are a troubled sleeper.

Inspire / Experimental (Moderate) / 30 Minutes / This dose was created for users who require inspiration, for whatever reason! If you work in a creative job: be it writing, art, or just needing the ability to creatively think, then you know that being in the mood to be creative is not always an easy thing. The Theta 3-7hz level is normally associated with recall, fantasy, imagery, creativity, inspiration, future planning, dreaming, and switching thoughts. Writers block chips away with this dose, ideas flow, and you will have creative thoughts more freely flow with this dose.

 

 

JuiceIT! / Steroid (Moderate) / 30 Minutes / JuiceIT! was designed for the sports or workout user. If flows through 3 levels to finely tune you as a preparation for workout or sports activity. At 3hz, your reaction time greatly increases. At 3.5hz there is an "Enhancement of Receptivity," and finally at 6.3hz there is an increase in accelerated learning. Use JuiceIT! When used just prior to sports or workouts, we found it to profoundly affect our performance! The PERFECT supplement for sports users who do not want to use chemicals or steroids, this is as close as you can get to the real thing. When competition is high, kick it into high gear!

 

LSD / Recreational (Very Strong) / 30 Minutes / LSD is the best known and most researched psychedelic. It is the standard against which all other psychedelics are compared. It is active at extremely low doses, and we have captured its’ essence in binaural form. Expect the following with the LSD dose, and in a very strong initial onset: increase in energy (stimulation), increase in associative and creative thinking, mood lift, increased awareness and appreciation, increased awareness of senses, closed and open eye visuals … and a profound life-changing spiritual experience.

 

Lucid Dream / Sleep (VERY STRONG) / 30 Minutes / Lucid Dreams... or the act of being awake and aware inside your dreams. This dose was designed to be taken just before you go to bed. It is important you hit the pillows just as the dose is over so it can work its magic into the night... and magic is it! This dose was designed to do two things: Help you to remember your dreams, and aid you in being lucid in them and control them by bringing you from a high to a low theta, where dreams can intensify! Normally being able to control a dream takes months of intense practice, but with this dose it can come much easier! Since the first few times a user becomes lucid can be intense, this dose is marked VERY STRONG! Be aware!

 

Marijuana / Recreational (VERY Strong) / 45 Minutes / All the effects of that sticky-icky leaf, without the smoke! The main active chemical in marijuana is THC (delta-9-tetrahydrocannabinol). The membranes of certain nerve cells in the brain contain protein receptors that bind to THC. Once securely in place, THC kicks off a series of cellular reactions that ultimately lead to the high that users experience when they smoke marijuana. That is EXACLTLY what we tried to emulate with this dose, to GREAT effect: mood lift, philosophical or deep thinking, increased appreciation of music, pleasant body feel, and that HIGH that only THC could bring... until now! One of our most "complicated" doses, over a year in the making!

 

Masochist / Sexual (VERY VERY Strong) / 30 Minutes / This is NOT for the faint of heart. This is for that special breed of man or woman who associates sexual pleasure and PAIN! First, it forces the brain and body to release numbing opiates at a 2.5hz range, sending pleasure opium-like waves through the body. Just when your entire body falls numb, we surge you with hot beams of ecstasy where users have reported near-orgasm-like feelings in their sexual organs at 15hz with wetness, erections, uncontrollable sexual thoughts and feelings… finally, just as your body is wilting in sexual bliss, we administer the pain: .20-.26hz causes pain in the body. Reports of pings of pain in your teeth (like drilling,) under your skin (feeling as if you were getting a tattoo,) and vice-grip like sensations on parts of your body are not uncommon… this pain, mixed with the euphoria and ecstasy, make this a very powerful, painful, sexual experience that is NOT intended for all users. Use ONLY if you want an intense experience like no other. POWERFUL BEYOND BELIEF!

 

Morphine / Recreational (VERY STRONG) / 30 Minutes / The great Poppy. The extreme opiate. You aren't floating, you are sinking. But, not just any decent: sinking into slowness but with a coherent calming. As this dose sets, you will be overwhelmed with a relaxing feeling almost to the extent of being uncomfortable. Relax. Let it play through and you will be rewarded with a wash of relief. Social boundary has been broken. Dreams will become a reality. Don't plan anything for after this dose, because you will be a wash of calm and want to just lay back and let life haze over. One tester, laying in a bed with headphones on as the dose finished, only mumbled: Everything is just good. Everything is just good. We knew then we had a hit dose.

 

MultipleO / Sexual (VERY Very Strong) / 30 Minutes / An orgasm is one thing: after your body is spent and you lay there in complete pleasure, feeling wave after wave of sensations. Multiple Orgasms are when you do it all over again. They are intense, your body is thrown into complete chaos doing over and over what makes it feel good, as the glow of sexual pleasure gets more intense with every time you explode in pure sexual glory. Start with our orgasm dose; it is more than enough for almost anyone. If ritual intense pleasure is what you seek, then it's time to feel an orgasm over and over: MultipleO!

 

Nicotine / Recreational (Moderate) / 30 Minutes / Nicotine changes how your brain and your body function. The net results are somewhat of a paradox: Nicotine can both invigorate and relax. Nicotine initially causes a rapid release of adrenaline, the "fight-or-flight" hormone. If you've ever jumped in fright at a scary movie or rushed around the office trying to finish a project by your deadline, you may be familiar with adrenaline's effects: rapid heartbeat, increased blood pressure and shallow breathing – this will quickly mellow as the nicotine dose wears off. The nicotine dose brings the initial onset of an actual cigarette without the harmful side effects.

 

Nitrous / Recreational (STRONG) / 10 Minutes / Just like the real deal: the effects come on quickly, and are gone just as fast. They don't call it Hippy Crack for nothing. Check our results: Total Duration 1-5 mins. Onset 0 - 1 mins. Coming Up 15 - 30 secs. Plateau 1 - 5 mins. Coming Down 10 mins. After Effects 15 - 30 mins. What does this mean? We have created the perfect quick-high dose that will mess you up real fast, and leave you as good as new in no time. Don't have time for our longer-lasting doses and just want a quickie? Here it is! Effects include: Giggling, Euphoria, Exhilaration, Sound Distortion, Reduction of External Stimuli, Clumsiness, Loss of Dexterity, and Loss of Balance. Want the perfect dose to show off the quick power of I-Doser! This is THE ONE!

 

Opium / Recreational (Moderate) / 30 Minutes / THE JOY PLANT! Opium is a naturally occurring analgesic harvested as a latex from ripe Papaver somniferum (opium poppy) pods. It has a long history of use by humans as an oral and smoked psychoactive. Opium can cause euphoria, followed by a sense of well-being and a calm drowsiness or sedation. Breathing slows, time reverses or stops... the world is a haze. While we have not been able to fully emulate the effects of opium, we have come pretty close. A favorite dose of the I-Doser technicians, this could very well be your favorite also!

 

Orgasm / Sexual (VERY Strong) / 50 Minutes / An orgasm is defined as the release of sexual tension built up during sexual stimulation such as masturbation or intercourse. It is a feeling of intense pleasure. Contractions of muscles occur, a world of pleasures and vibrations envelope your entire body and soul, and there is a release unlike anything you have ever experienced. You shake, quiver, and a sensation unlike any other in the world happens over every inch of your pleasured body. Orgasms are one of those things that are difficult to describe, but if you have one, you'll know it. With out orgasm dose, you'll know it!

 

Out of Body / Stimulant (Strong) / 30 Minutes / This dose is to help assist you in experiencing an out of body experience: defined as an experience in which a person seems to perceive the world from a location outside the physical body. The consciousness separates from the body and is free to roam the earth plane. Phenomena associated with the out of body experience are things like remote viewing or other such seeing of places and people as they exist in this time and place. "I floated up out of the house into the sky and became aware of everything around me. Then suddenly, I could perceive all time and in particular the whole of my life. I could see clearly that everything that seemed real and solid was just an illusion of mind. Time and space did not exist." 75% of out of body experiences happen while the user is laying down or sitting and relaxed, so put on the headphones and go into a deep state. You just may have an out of body

 

oxy / Prescription (VERY STRONG) / 30 Minutes / Probably one of the most abused prescription drugs ever, we have finally achieved the impossible: The PERFECT simulation of a high level dose of oxycontin. Oxycodone is an opiate, narcotic analgesic, used primarily in the treatment of pain. It is one of two derivatives of morphine, the other being hydromorphone. While oxycontin in it's prescribed form is always time-release, we have removed that factor from our simulation. Oxy will hit you will full force, so that is why we recommend those for only the most advanced doser!

 

Peyote / Recreational (VERY VERY Strong) / 35 Minutes / If you are new to hallucinogenic experiences then we HIGHLY suggest starting with our TRIP dose. It is MUCH more mellow than Peyote. If you really want to fly through the outer stratosphere, then we are happy to offer you Peyote. We sent one of our senior techs to Amsterdam to sample some of the best Peyote in the world, equipped him with a laptop, and told him to write a dose that gets you as close as possible. He came back with this, and it BLEW OUR MINDS! Causes a mystical loss of oneself, disorientation of the senses, distortions in body image, distortions in perception, the inability to communicate and hyper suggestibility. A true altered state of consciousness, not a toy, not for the weak minded, not for MOST people. If you aren't ready, STAY AWAY! We warned you.

 

Prozium / Stimulant (VERY STRONG) / 30 Minutes / The ups and downs of life can hurt. People can feel happy, sad, depressed, all over an entire gambit of moods and stimulations. Prozium is the answer to an evened-out life, mellow and secure, and able to deal with any of the barriers life can throw in front of you. Do you feel angry? Prozium. Do you feel sad? Prozium. Is something just a little off with you today! PROZIUM! Even out your entire day, and be ready for anything. Dose it in the morning, and drift through the day with ease and confidence. Dose it at night, and be able to deal with the trials and tribulations or family, relationships, or inner chaos. This dose will smooth over your soul. You will never feel so even.

 

QuickHappy / Antidepressant (Moderate) / 5 Minutes / QuickHappy is for when you need that quick little pick-me-up. While not as strong or as long-lasting as our other antidepressant doses, it is the perfect amount for when you need a quick hit in the morning, at lunch, or right when you get home from work. At only 5 minutes to bring you from an alpha 10hz down to a soothing carefree .20hz, it has become a favorite "Monday Morning Dose." You will be amazed at how much easier it is to head into the office after using QuickHappy.

 

QUIT! / Experimental (Moderate) / 30 Minutes / The simple fact is, when between 4hz and 6hz the human brain is in a state of "attiude and behavior change." As we start to raise you just above, at the 8hz mark, it seems to trigger synapsis to aid in the quitting of addictions. We started to experiment with several users who were in the process of quitting cigarettes, and most found that while using this dose either during an addiction crave, or as a preventative measure, it greatly aided them in getting over the horrible addiction of cigarettes. While not a cure-all by any means, we have heard very good things about this dose when combined with pure human will-power. Maybe it can help you quit once and for all!

 

Reset / Brain Reset / 20 Minutes / Reset will reset your brain to a normal 8hz level, or normal and awake. This dose was designed so you could "reset" your brain if you wanted to get rid of the effects of a dose, or try another dose and "clear" your brain before you administrate another one! Because many I-Doser doses are so very powerful, we do not recommend you piggy-back doses one after another. If you try a dose, and then want to try another, MAKE SURE you use a reset dose in between! Order some today so you always have them on hand! Using reset is the ONLY way to try multiple doses in succession.

 

Serene / Sedative (Moderate) / 30 Minutes / A quite day when nobody is around, just you and your thoughts, is what we attempt to achieve with this dose. You give all to life, so it is time to take back just a few calm minutes to yourself when you will feel like everything is well, and your troubles vanish for just a short time. The mind-static that the general hassles of life can bring you simply melt away as your brain is toned to the perfect frequency until you are simply calm, peaceful, composed… serene.

 

Sleeping Angel / Sleep (STRONG) / 25 Minutes / "Sleeping Angel" is our perfect nap, or evening doze into sleeping bliss. Lay back, put on the headphones, and let it open by syncing to your current awake brain waves, then gradually bring you down into a Theta state, and tuck you gently into Delta. Your sleep, your perfect rest, is delivered through pink noise that gradually fades while the binaural beats take charge. By the end of 25min you will have gone from your regular awake state, softly guiding through Theta, and then drift into a perfect-sync Delta, at which point you will be zoning in a perfect rest: hypnotic, wonder, sleep. Sleeping with Angels. (Includes 3 doses.)

 

Speed / Recreational (VERY STRONG) / 30 Minutes / When we did a poll asking I-Doser users what they were looking for, many said they would love a pick-me-up for when days were sluggish. Our popular French Roast dose did the trick, but the emails still poured in. They wanted more, complete awake, aware, heart-pounding, spine tingling awake to REALLY get trough a day (or, a night!) Here it is, perfected and FINALLY available after months of waiting: SPEED! Get: increased energy and alertness, a decreased need for sleep, euphoria, increased sexuality, and visual & auditory hallucinations. You must be aware this is more extreme than other wake-you-up doses, so it is recommended for only advanced users. VERY advanced users.

 

Theta / Pure (4 to 8 Hz) / 30 Minutes / This is the region between sleep and wakefulness, in which dreaming and other dream-like or hypnagogic experiences occur. It's that bit just before you actually fall asleep at night, or just before you are really awake in the morning. They say it's in this band that the unconscious talks to the conscious mind. It also seems to be connected with psychic or ESP-type functioning. Found in states of deep relaxation, theta activity is also associated with bursts of creative insight, twilight sleep, learning and vivid mental imagery. It is also found in more advanced meditators.

 

Tranquil / Sedative (Semi-Moderate) / 30 Minutes / Tranquil is so hard to define we almost didn't approve it as a dose. Such an interesting one, Tranquil is. There were so many supporters of it, we had to include it. What it does NOT DO: Tranquil does not make you tired, it does not put you to sleep, and won't even make you drowsy. Tranquil is a soul dose. It eases your soul, harmonizes you with the earth, and space, and everything that is. Called the "mircale drug" around the offices, it just seems to melt you easily into the earth, warms your soul and heart, and covers you in invisible glow. So hard to describe, we can only beg you try it for yourself. Feel the warm soul experience.

 

Trip / Recreational (Very Strong) / 35 Minutes / This is a pure model recreation of a hallucinogenic experience. You will feel open-eye visual effects, lights gain auras, star-pattern effects, rainbowing around lighting, lights seem brighter and often more beautiful. You may experience feelings of time-dilation, belonging and connection, and increased emotional sensitivity. Gain a new perspective on current lifestyle and behaviors, feelings of connection with those around you, noticing things which are normally ignored or taken for granted, feelings of wonder, spirit, joy, sadness, despair, religious awakening, contentment and possibly latent psychological feelings can come out. Often referred to as our most powerful and life-altering dose, it is for this reason we DO NOT recommend it for everyone. Treat it as you would any other long trip. One of the most interesting effects is the feeling of awakening for the first time ever from a previous state of sleep, of liberation from what is now seen as a life-long state of bondage. Paradoxically, it is this new awareness, which feels normal and natural, and the previous fog, which is seen to have been unreal all along. The seeker is convinced that, once gained, this awareness is impossible to lose, but inexplicably by the next day it is just a memory. Be very careful - your life may change.

 

Vico / Prescription (VERY STRONG) / 30 Minutes / Modeled after the effects achieved from a strong dose of Vicodin, this is soon to become one of our most popular prescription doses. It will bring on in waves: improvement of mood, reduction of pain, and extreme euphoria. As the dose nears the end you will feel twinges of light-headedness, sedation, and you will notice a change in focus and attention. Things will drift, lights will fade, and you will feel the massive haze that is one of our most powerful prescription simulations: Vico!

 

Victory / Steroid (VERY STRONG) / 30 Minutes / Our JuiceIT dose will get your body ready, now get your mind ready! Our victory dose was designed to work with JuiceIT to put your mind in a state like you've "already won." It gives you a huge mental advantage in any game of sports, but don't think it's just for sports: great for workouts, public speaking, or anything where you need to "win" in any sense of the word! Guarentee a victory by putting your mind in a state where it already feels like you've won! Victorious!

 

White Crosses / Recreational (VERY STRONG) / 30 Minutes / White Crosses is a strange one. When the team that invented this dose showed it at our monthy dose meeting, it was greeted with a bunch of confused faces. Describe it, we said. OK. White Crosses is a simple stimulant that brings a sense of euphoria, openness, and intellectual expansion. There can be a mild psychedelic component as the new user feels they see the world a little differently. The sensation of mind-expansion and openness quickly fade after the first few uses and physical and mental stimulation dominate the experiential effects. It is a hybrid designer dose for experienced users. Fine. When we put on the headphones, and White Crosses finished, we couldn't believe it. This underground bastard-dose that has been talked about in the halls of I-Doser Labs turned out to blow the minds of everyone who tried it. THAT says a lot for White Crosses.

 

YaBa / Recreational (VERY STRONG) / 30 Minutes / It is known as crazy medicine. This dose, which creates an intense hallucinogenic effect and can enable users to stay aware, alert, and awake, makes for a powerful one-two punch: hallucinogenic + stimulant = YaBa. You will have an extreme sense of alert while experiencing some hallucinogenic effects such as sound distortion, vivid colors, and visual effects. The combination of these two types of doses can have different effects on the user, but on thing is sure: it has the potential to be a very powerful combination, so please use with caution. CRAZY MEDICINE!

 

You-Choose / (3 to 25 Hz) (VERY STRONG!) / 1 Hour / You-Choose is one of our most advanced I-Doser Doses! It puts the power of the Dose in your hands, because sometimes you just want to dose until you feel good. This is where the powerful You-Choose Dose comes in. This is an hour long dose, but it is not intended to be used for the full hour. The concept is simple: Start the dose, and then only dose until you feel the effect you want. If you feel the powerful change of Delta after only 10 minutes, then shut the dose off. If you hit full Gamma after 50 minutes and peak, then stop. You do not need to dose for the full hour of the dose, only until you reach the level you want. Included with each You-Choose dose is a DETAILED user manual that outlines what effects You-Choose can achieve. The You-Choose Dose travels through all levels: Alpha, Beta, Delta, Gamma, Theta - You WILL hit one level somewhere in this dose and things will just click, you will shut the dose off, and feel like you have never felt before. That amazing point where the right level is achieved feels like nothing you have felt before: Your brain snaps into place, and you know you have reached the exact perfect point in the dose. Yes, it is slightly more expensive, but you will FEEL IT in the EXPERIENCE. NOTE! Because of the extreme powerful nature of this dose, it is intended for ADVANCED I-Doser users ONLY!


Posted by Nvdark
,

BHO에 접근하기 위한 방법은 여러가지가 있습니다.

그중 가장 크게 나눈다면 타 프로세스에서 IE에 접근하는 방법과 IE내부(BHO 설치 후)에서 접근하는 방법으로 나눌수 있을것 같습니다.


그 중 개인적으로는 가장 구현하기 편하고, 응용하기도 편한 타 프로세스에서 IE에 접근하는 방법을 포스팅하겠습니다.


포스팅할 내용은 주요 코드 위주로 설명하며 세부적인 응용은 포스팅하지 않겠습니다.


일단....가장먼저 IE의 PID를 알아야겠죠.

PID를 얻어오는 방법은 생략하겠습니다. 뭐 직접 입력해줘도 되는거니깐요.


PID를 얻었다면

DWORD dwPID;

HWND hwnd = GetWinHandle(dwPID);

로 IE의 핸들을 얻어옵니다. 해당 핸들을 이용하여 다음은 접근할 IE를 찾아야하는데, 요세 나오는 브라우져들 특징은 탭기능이 있다는겁니다. 그 많은 탭중에서 현재 사용하고 있는 탭을 찾아야합니다. 저같은 경우는 모든 핸들을 출력해주고, 원하는 핸들을 선택하도록 했는데 이 방법은 다음에 포스팅 하도록 하겠습니다.


외부에서 BHO에 접근하는 방법도 여러가지가 있는데 이번엔  ObjectFromLresult을 이용하여 접근하는 방법입니다.

HINSTANCE hins = ::LoadLibrary(_T("OLEACC.DLL"));

위와 같이 OLEACC.DLL의 인스턴스를 얻어옵니다.

이 후 얻은 인스턴스를 이용하여 ObjectFromLresult 함수의 주소를 얻습니다.

LPFNOBJECTFROMLRESULT pfObjectFromLresult = (LPFNOBJECTFROMLRESULT)::GetProcAddress( hins , "ObjectFromLresult" );

ObjectFromLresult함수에 대한 설명은 MSDN을 참고하시면될것같습니다.

ObjectFromLresult의 2번째 인자값을 IID_IHTMLDocument2 로 주시면 4번째 인자값이 OUT으로써 IHTMLDocument2 의 주소값을 받아옵니다. 간단히 작성하면, 

IHTMLDocument2* pIhtmldocument2;

HRESULT hresult = (*pfObjectFromLresult)( Lresult , IID_IHTMLDocument2 , 0 , ( void**) pIhtmldocument2 );

IHTMLdocument2를 얻어왔다면 접근은 다 했네요. 

이후에 1,2,3 왔다 갔다 하시면서 원하시는 기능을 추가하시면됩니다. 


적어놓고 보니 생각보다 간단하네요.

첨부로 MSDN에 나온 ObjectFromLresult함수 내용입니다. 

http://msdn.microsoft.com/en-us/library/windows/desktop/dd373605(v=vs.85).aspx

STDAPI ObjectFromLresult(

  _In_   LRESULT lResult,
  _In_   REFIID riid,
  _In_   WPARAM wParam,
  _Out_  void **ppvObject
);


Parameters

lResult [in]

Type: LRESULT

A 32-bit value returned by a previous successful call to the LresultFromObject function.

riid [in]

Type: REFIID

Reference identifier of the interface to be retrieved. This is IID_IAccessible.

wParam [in]

Type: WPARAM

Value sent by the associated WM_GETOBJECT message in its wParam parameter.

ppvObject [out]

Type: void**

Receives the address of the IAccessible interface on the object that corresponds to the WM_GETOBJECTmessage.


Posted by Nvdark
,

주소값 가지고 출력했다가 다시 포인터로 바꿨다가 ....저장했다가...계산했다가...하다가...

문자열변수에 0xFFDDEECC 가 저장되어있는데 이놈을 어떻게 정수형으로 (16진수로) 바꿀까 하다가 열심히 찾던 중 

후배놈이알려준 함수! 


strtoul, strtol 뭐 두개다 같은 기능이지만, 반환형이 다르다. 

ul은 보다시피 unsigned long이고 뒤에껀 그냥 long 형으로 반환!

개인적으로 써보니 0x2045f35d같은 값은 strtol로도 잘 변환되지만

음수형 16진수(0xFFFFEDF4 같은 것들)의 경우 값이 0x7FFFFFFF로 고정 반환이였다.

하여 이럴땐 strtoul을 사용하면 정상적인 값이 반환되는것을 볼수 있다.


사용은 간단하다. 자세한건 MSDN을 참조하면되겠지만.... 코드로 간단히 적으면

DWORD dwHexValue;

char* StringValue;

char* Error;

dwHexValue = strtol( StringValue, &Error, 16);

// 또는

dwHexValue = strtoul( StringValue, &Error, 16);

위와 같이 사용하면된다.

첫번째 인자값은 변환할 문자열!

두번째는 변환하다가 에러나면 에러난부분을 받아줄 변수인데 NULL로 넣어도 상관없다.

세번째는 진수!

dwHexValue = strtoul( StringValue, NULL, 16);

처럼 사용해도 된다.


Posted by Nvdark
,

실로 오랜만에 포스팅을 하는군요....음...

거의 1년 3개월만에 Memget Project 관련 포스팅이라니...

1.6.11.44 버전 이후 지금까지 뭐...거의 변한건 없지만 몇가지 기능이 좀 추가되었네요..


관련 코드나 방법은 차차 포스팅하기로 하겠습니다.


이후 추가된 기능은 다음과 같습니다.

일단 Memget Project에서 Memget Package로 이름을 바꿨네요 ㄷㄷ 먼가 많이 늘어나서 한번에 포함하다보니...이리 됬습니다.

Memget Package는 An integrated tool for analysis and penetration testing on Microsoft Windows(https://unsigned.kr)에서 나와있다시피 윈도우용 취약점 점검도구입니다

상세 정보입니다.


Memget Package Last Version Info--------------------------------------------------------

[+]PC

Memget Project 1.8.16.59

Memget Library 0.9.3.84

Memget Library Inen 0.1.4.10 (총 2개 dll로 구성)

-DLL injection Module

Memget Library BHO 0.x (총 5개 dll 로 구성)

-BHO Access Module

Memget Library Process 0.3.5.6

-SSDT Hooking 

Memget Sign Maker 1.0.0.11

-Sign Maker from ASignC

[+]Android

Memget Syscall Rev.32

-System Call Check and Hook
-library injection and Data Change

Memget AScreenC for Tab Rev.4

-Android Screen Capture When you touch the screen

Memget ASignC for Tab Rev.5

-Android Sign Capture When you sign on the screen Using with Memget Sign Maker 1.0.0.11


먼가 많이 늘긴했는데 별건 없습니다.

크게 바뀐겐 Package로 바뀌면서 안드로이드가 추가됬습니다.

전체적으로 안드로이드 용은 버그가 좀 많긴한데 ... 필요해서 만든거라 개인적으로는(?) 쓸만합니다 (-_-);;

 - 원하는 SysCall에 대하여 후킹하고 인자값 및 리턴값을 출력합니다.

 - 원하는 Data를 찾고 바꿀수 있습니다.

 - 원하는 라이브러리를 인젝션 시킵니다.

 - 루팅탐지를 우회 합니다.(이거 잘됫는데 몇일전에 해보니 안되는게 종종 보이네요. 수정해야할듯..)

 - 원하는 화면을 캡쳐합니다. 드레그 이벤트를 탈취하여 복원합니다.


예전에 언싸에 다운로드 공개했는데 먼가 말이 많아서 닫아두었네요 ㅠ


Memget Package 1.6.11.44  이후 바뀐점은

 - 몇가지 기능을 모듈화 하고, UI를 살짝 변경하였습니다.

 - BASE64 En/Decode 추가

 - DLL Injection 추가

 - 각종 보안 모듈 점검용 기능 추가

 - Windows 8 용 프로세스 관련 기능 추가

 - 메모리 덤프 부분 알고리즘 변경

 - 프로세스 Kill 방법 추가

 - BHO 접근 5종 추가

 - DLL 분석 기능 추가 중 입니다.


전체적인 UI입니다.





Posted by Nvdark
,

후배가 구축한 SVN+TRAC서버에 Memget Project 정리를 시작함....


근데 아직 익숙치가 않아서 뭐가 먼지도 모르겠고 ㅋㅋㅋ 후배는 이거 써보고...


 ㅋㅋ

보면서 공부했는데 ㅋㅋ

와 근데 진짜..

프로세스 설명해둔거 보고

와 씨발 이게 업무 흐름이야 !

이런게 있다늬 !!

라고 함... ㅋㅋㅋ


뭐 암튼 아직 익히는 단계라 정리도 잘 안되있고 너저분하지만 일단 좀 익혀야겠다 ㅋㅋㅋ


후배가 자꾸 그렇게 쓰는거 아니라고 막 알려주긴하는데 ㅋㅋㅋ 아직까진 나 편한데로 쓰고싶다 ㅋㅋㅋ 뭐 지저분한걸 조금 느끼고 있긴하지만 그래도 필요성 느끼기전까진 이렇게 쓸듯... ㅠㅠ 먼가 하나 할때마다 작성할것도 많고 ... 해두면 나중에 좋겠지만....귀..찮....ㅋㅋㅋㅋㅋㅋㅋㅋㅋ


너저분하지만 일단 링크 공개!! (소스는 못봄...아직 부끄러움...ㅋㅋㅋㅋ)


조만간 바이너리 다운로드 링크도 공개할 예정!!


TRAC서버 이전 및 도메인 변경됨!!!

TRAC : https://dev.unsigned.kr/trac


Posted by Nvdark
,