v2022.04 updates

.gitignore

@@ -0,0 +1 @@
+Output

README.md

@@ -33,6 +33,23 @@ It depends. The idea is to keep it simple. We won't add a tool just because it's
 
 ## Changelog
 
+### 2022.04
+
+* Added:
+    * Echo Mirage.
+    * elfparser-ng.
+    * entropy (closes [#47](https://github.com/mentebinaria/retoolkit/issues/47)).
+    * Force Toolkit.
+    * MiniDump x64dbg plugin.
+    * Notepad++.
+    * OllyDumpEx x64dbg plugin (closes [#41](https://github.com/mentebinaria/retoolkit/issues/41)).
+* Removed:
+    * Bewareircd: Too specific to analyze (now rare?) IRC-based communications.
+    * dnSpy: Replaced by dnSpyEx.
+    * HyperDBG: It's a nice project, but they don't provide binary releases yet, meaning a lot of work for me.
+    * JRE: Replaced by JDK, which is required by Ghidra.
+    * Threadtear: It doesn't work with JDK required by Ghidra.
+
 ### 2021.10
 
 * Yeah, new version numbering scheme borrowed from Ubuntu releases. :)

src/installer/android/dex2jar.iss

@@ -1,4 +1,4 @@
-; v2.0
+; v2.1
 ; https://github.com/pxb1988/dex2jar
 
 [Components]

src/installer/autoit/myauttoexe.iss

@@ -1,4 +1,5 @@
 ; v2.15 Build(212)
+; https://files.planet-dl.org/Cw2k/MyAutToExe/index.html
 
 [Components]
 Name: "autoit\myauttoexe"; Description: "myAutToExe"; Types: full;

src/installer/cobaltstrike/1768.iss

@@ -1,8 +1,8 @@
-; v0.0.7
-; https://github.com/DidierStevens/DidierStevensSuite/blob/master/1768.py
+; v0.0.13
+; https://blog.didierstevens.com/programs/cobalt-strike-tools/
 
 [Components]
 Name: "cobaltstrike\1768"; Description: "1768"; Types: full;
 
 [Files]
-Source: "{#MySrcDir}\cobaltstrike\1768.py"; DestDir: "{app}\programming\winpython\scripts"; Components: "cobaltstrike\1768"; Flags: ignoreversion recursesubdirs createallsubdirs
+Source: "{#MySrcDir}\cobaltstrike\1768\*"; DestDir: "{app}\programming\winpython\scripts"; Components: "cobaltstrike\1768"; Flags: ignoreversion recursesubdirs createallsubdirs

src/installer/debuggers/cutter.iss

@@ -1,4 +1,4 @@
-; v2.0.3
+; v2.0.5
 ; https://cutter.re/
 
 [Components]

src/installer/debuggers/x64dbg.iss

@@ -1,4 +1,4 @@
-; snapshot_2021-07-01_23-17.zip
+; snapshot_2022-04-11_01-01
 ; https://x64dbg.com/
 
 [Components]

src/installer/decompilers/ghidra.iss

@@ -1,4 +1,4 @@
-; v10.0.3
+; v10.1.3
 
 [Components]
 Name: "decompilers\ghidra"; Description: "Ghidra"; Types: full; Check: Is64BitInstallMode

src/installer/dotnet/dnspyex.iss

@@ -7,7 +7,7 @@ Name: "dotnet\dnspyex"; Description: "dnSpyEx"; Types: full;
 Source: "{#MySrcDir}\dotnet\dnSpyEx\*"; DestDir: "{app}\dotnet\dnSpyEx"; Components: "dotnet\dnspyex"; Flags: ignoreversion recursesubdirs createallsubdirs
 
 [Icons]
-Name: "{group}\{#MyAppName}\dnSpyEx (x86))"; Filename: "{app}\dotnet\dnSpyEx\dnSpy-net-win32\dnSpy.exe"; Components: "dotnet\dnspyex"
-Name: "{app}\sendto+\sendto\Dotnet\dnSpyEx (x86)"; Filename: "{app}\dotnet\dnSpyEx\dnSpy-net-win32\dnSpy.exe"; Components: "dotnet\dnspyex"
-Name: "{group}\{#MyAppName}\dnSpyEx (x64)"; Filename: "{app}\dotnet\dnSpyEx\dnSpy-net-win64\dnSpy.exe"; Components: "dotnet\dnspyex"; Check: Is64BitInstallMode
-Name: "{app}\sendto+\sendto\Dotnet\dnSpyEx (x64)"; Filename: "{app}\dotnet\dnSpyEx\dnSpy-net-win64\dnSpy.exe"; Components: "dotnet\dnspyex"; Check: Is64BitInstallMode
+Name: "{group}\{#MyAppName}\dnSpyEx (x86))"; Filename: "{app}\dotnet\dnSpyEx\dnSpy-x86.exe"; Components: "dotnet\dnspyex"
+Name: "{app}\sendto+\sendto\Dotnet\dnSpyEx (x86)"; Filename: "{app}\dotnet\dnSpyEx\dnSpy-x86.exe"; Components: "dotnet\dnspyex"
+Name: "{group}\{#MyAppName}\dnSpyEx (x64)"; Filename: "{app}\dotnet\dnSpyEx\dnSpy.exe"; Components: "dotnet\dnspyex"; Check: Is64BitInstallMode
+Name: "{app}\sendto+\sendto\Dotnet\dnSpyEx (x64)"; Filename: "{app}\dotnet\dnSpyEx\dnSpy.exe"; Components: "dotnet\dnspyex"; Check: Is64BitInstallMode

src/installer/dotnet/ilspy.iss

@@ -1,4 +1,4 @@
-; v7.1.0.6543
+; v7.2.1.6856
 
 [Components]
 Name: "dotnet\ilspy"; Description: "ILSpy"; Types: full;

src/installer/dotnet/rundotnetdll.iss

@@ -0,0 +1,8 @@
+; v2.2
+; https://github.com/enkomio/RunDotNetDll
+
+[Components]
+Name: "dotnet\rundotnetdll"; Description: "RunDotNetDll"; Types: full;
+
+[Files]
+Source: "{#MySrcDir}\dotnet\rundotnetdll\*"; DestDir: "{app}\bin"; Components: "dotnet\rundotnetdll"; Flags: ignoreversion recursesubdirs createallsubdirs

src/installer/elf/elfparserng.iss

@@ -0,0 +1,12 @@
+; v1.6.0
+; https://github.com/mentebinaria/elfparser-ng
+
+[Components]
+Name: "elf\eflparserng"; Description: "elfparser-ng"; Types: full compact;
+
+[Files]
+Source: "{#MySrcDir}\elf\elfparser-ng\*"; DestDir: "{app}\elf\elfparser-ng"; Components: "elf\eflparserng"; Flags: ignoreversion recursesubdirs createallsubdirs
+
+[Icons]
+Name: "{group}\{#MyAppName}\elfparser-ng"; Filename: "{app}\elf\elfparser-ng\elfparser-ng.exe"; WorkingDir: "{app}\elf\eflparserng"; Comment: "ELF analyzer"; Components: "elf\eflparserng"
+Name: "{app}\sendto+\sendto\ELF\elfparser-ng"; Filename: "{app}\elf\elfparser-ng\elfparser-ng.exe"; WorkingDir: "{app}\elf\eflparserng"; Comment: "ELF analyzer"; Components: "elf\eflparserng"

src/installer/hexeditors/fhex.iss

@@ -1,4 +1,5 @@
 ; v3.0.0
+; https://github.com/echo-devim/fhex
 
 [Components]
 Name: "hexeditors\fhex"; Description: "Fhex"; Types: full;

src/installer/hexeditors/imhex.iss

@@ -1,4 +1,5 @@
-; v1.10.0
+; v1.17.0
+; https://github.com/WerWolv/ImHex
 
 [Components]
 Name: "hexeditors\imhex"; Description: "ImHex"; Types: full; Check: Is64BitInstallMode

src/installer/hexeditors/rehex.iss

@@ -1,4 +1,5 @@
-; v0.3.92
+; v0.5.0
+; https://github.com/solemnwarning/rehex
 
 [Components]
 Name: "hexeditors\rehex"; Description: "Reverse Engineers' Hex Editor"; Types: full compact;

src/installer/java/jadx.iss

@@ -1,4 +1,4 @@
-; v1.2.0
+; v1.3.5
 ; https://github.com/skylot/jadx
 
 [Components]
@@ -8,5 +8,5 @@ Name: "java\jadx"; Description: "Dex to Java decompiler (JADX)"; Types: full; Ch
 Source: "{#MySrcDir}\java\jadx\*"; DestDir: "{app}\java\jadx"; Components: "java\jadx"; Flags: ignoreversion recursesubdirs createallsubdirs; Check: Is64BitInstallMode
 
 [Icons]
-Name: "{group}\{#MyAppName}\JADX"; Filename: "{app}\java\jadx\jadx-gui-1.2.0.exe"; Components: "java\jadx"; Check: Is64BitInstallMode
-Name: "{app}\sendto+\sendto\Java Decompilers\JADX"; Filename: "{app}\java\jadx\jadx-gui-1.2.0.exe"; Components: "java\jadx"; Check: Is64BitInstallMode
+Name: "{group}\{#MyAppName}\JADX"; Filename: "{app}\java\jadx\bin\jadx-gui.bat"; Components: "java\jadx";
+Name: "{app}\sendto+\sendto\Java Decompilers\JADX"; Filename: "{app}\java\jadx\bin\jadx-gui.bat"; Components: "java\jadx";

src/installer/java/recaf.iss

@@ -1,4 +1,4 @@
-; v2.21.0
+; v2.21.13
 ; https://github.com/Col-E/Recaf
 
 [Components]
@@ -8,5 +8,5 @@ Name: "java\recaf"; Description: "Recaf"; Types: full;
 Source: "{#MySrcDir}\java\recaf\*"; DestDir: "{app}\java\recaf"; Components: "java\recaf"; Flags: ignoreversion recursesubdirs createallsubdirs
 
 [Icons]
-Name: "{group}\{#MyAppName}\Recaf"; Filename: "{app}\recaf\recaf.jar"; WorkingDir: "{app}\java\recaf"; Components: "java\recaf"; IconFilename: "{app}\java\recaf\recaf.ico"
-Name: "{app}\sendto+\sendto\Java Decompilers\Recaf"; Filename: "{app}\java\recaf\recaf.jar"; Components: "java\recaf"; IconFilename: "{app}\java\recaf\recaf.ico"
+Name: "{group}\{#MyAppName}\Recaf"; Filename: "{app}\recaf\recaf-2.21.13-J8-jar-with-dependencies.jar"; WorkingDir: "{app}\java\recaf"; Components: "java\recaf"; IconFilename: "{app}\java\recaf\recaf.ico"
+Name: "{app}\sendto+\sendto\Java Decompilers\Recaf"; Filename: "{app}\java\recaf\recaf-2.21.13-J8-jar-with-dependencies.jar"; Components: "java\recaf"; IconFilename: "{app}\java\recaf\recaf.ico"

src/installer/network/echomirage.iss

@@ -0,0 +1,12 @@
+; v3.1
+; https://sourceforge.net/projects/echomirage.oldbutgold.p/
+
+[Components]
+Name: "network\echomirage"; Description: "Echo Mirage"; Types: full;
+
+[Files]
+Source: "{#MySrcDir}\network\echomirage\*"; DestDir: "{app}\network\echomirage"; Components: "network\echomirage"; Flags: ignoreversion recursesubdirs createallsubdirs
+
+[Icons]
+Name: "{group}\{#MyAppName}\Echo Mirage"; Filename: "{app}\network\echomirage\EchoMirage.exe"; WorkingDir: "{app}\network\echomirage"; Components: "network\echomirage"
+Name: "{app}\sendto+\sendto\Network\Echo Mirage"; Filename: "{app}\network\echomirage\EchoMirage.exe"; WorkingDir: "{app}\network\echomirage"; Components: "network\echomirage"

src/installer/ole/lessmsi.iss

@@ -1,12 +1,12 @@
-; v1.8.2
+; v1.10.0
 ; https://github.com/activescott/lessmsi
 
 [Components]
-Name: "ole\lessmsi"; Description: "Less MSIérables (lessmsi)"; Types: full;
+Name: "ole\lessmsi"; Description: "Less MSIerables (lessmsi)"; Types: full;
 
 [Files]
 Source: "{#MySrcDir}\ole\lessmsi\*"; DestDir: "{app}\ole\lessmsi"; Components: "ole\lessmsi"; Flags: ignoreversion recursesubdirs createallsubdirs
 
 [Icons]
-Name: "{group}\{#MyAppName}\Less MSIérables (lessmsi)"; Filename: "{app}\ole\lessmsi\lessmsi-gui.exe"; Components: "ole\lessmsi"
-Name: "{app}\sendto+\sendto\OLE file analysis\Less MSIérables (lessmsi)"; Filename: "{app}\ole\lessmsi\lessmsi-gui.exe"; Components: "ole\lessmsi"
+Name: "{group}\{#MyAppName}\Less MSIerables (lessmsi)"; Filename: "{app}\ole\lessmsi\lessmsi-gui.exe"; Components: "ole\lessmsi"
+Name: "{app}\sendto+\sendto\OLE file analysis\Less MSIerables (lessmsi)"; Filename: "{app}\ole\lessmsi\lessmsi-gui.exe"; Components: "ole\lessmsi"

src/installer/ole/officemalscanner.iss

@@ -1,4 +1,5 @@
 ; v0.61
+; http://www.reconstructer.org/code.html
 
 [Components]
 Name: "ole\officemalscanner"; Description: "OfficeMalScanner"; Types: full;

src/installer/ole/oledump.iss

@@ -1,7 +1,8 @@
-; v0.0.60
+; v0.0.65
+; https://blog.didierstevens.com/programs/oledump-py/
 
 [Components]
 Name: "ole\oledump"; Description: "oledump"; Types: full;
 
 [Files]
-Source: "{#MySrcDir}\ole\oledump\*"; DestDir: "{app}\programming\winpython\scripts\oldeump"; Components: "ole\oledump"; Flags: ignoreversion recursesubdirs createallsubdirs
+Source: "{#MySrcDir}\ole\oledump\*"; DestDir: "{app}\programming\winpython\scripts\oledump"; Components: "ole\oledump"; Flags: ignoreversion recursesubdirs createallsubdirs

src/installer/ole/ssview.iss

@@ -1,4 +1,4 @@
-; v4.1.0.0
+; v4.1.1.0
 ; https://www.mitec.cz/ssv.html
 
 [Components]

src/installer/pdf/pdf-parser.iss

@@ -1,5 +1,5 @@
 ; v0.7.5
-; https://github.com/DidierStevens/DidierStevensSuite/blob/master/pdf-parser.py
+; https://blog.didierstevens.com/programs/pdf-tools/
 
 [Components]
 Name: "pdf\pdfparser"; Description: "pdf-parser"; Types: full;

src/installer/pdf/pdfid.iss

@@ -1,8 +1,8 @@
 ; v0.2.8
-; https://github.com/DidierStevens/DidierStevensSuite/blob/master/pdfid.py
+; https://blog.didierstevens.com/programs/pdf-tools/
 
 [Components]
 Name: "pdf\pdfid"; Description: "pdfid"; Types: full;
 
 [Files]
-Source: "{#MySrcDir}\pdf\pdfid.py"; DestDir: "{app}\programming\winpython\scripts"; Components: "pdf\pdfid"; Flags: ignoreversion recursesubdirs createallsubdirs
+Source: "{#MySrcDir}\pdf\pdfid\*"; DestDir: "{app}\programming\winpython\scripts\pdfid"; Components: "pdf\pdfid"; Flags: ignoreversion recursesubdirs createallsubdirs

src/installer/peanalysers/capa.iss

@@ -1,4 +1,4 @@
-; v3.0.1
+; v3.2.0
 ; https://github.com/mandiant/capa
 
 [Components]

src/installer/peanalysers/die.iss

@@ -1,5 +1,5 @@
-; v3.0.2
-; https://github.com/horsicq/Detect-It-Easy
+; v3.0.4
+; https://github.com/horsicq/DIE-engine
 
 [Components]
 Name: "peanalysers\die"; Description: "Detect It Easy"; Types: full compact;

src/installer/peanalysers/exeinfope.iss

@@ -1,5 +1,5 @@
 ; v0.0.6.5
-; http://www.exeinfo.xn.pl
+; http://www.exeinfo.xn.pl (down?)
 
 [Components]
 Name: "peanalysers\exeinfope"; Description: "Exeinfo PE"; Types: full;

src/installer/peanalysers/pebear.iss

@@ -1,4 +1,4 @@
-; v0.5.4
+; v0.5.5.3
 ; https://github.com/hasherezade/pe-bear-releases
 
 [Components]

src/installer/peanalysers/pestudio.iss

@@ -1,4 +1,4 @@
-; v9.17
+; v9.33
 ; https://www.winitor.com
 
 [Components]

src/installer/peanalysers/pev.iss

@@ -1,4 +1,5 @@
 ; v0.81
+; https://github.com/merces/pev
 
 [Components]
 Name: "peanalysers\pev"; Description: "pev"; Types: full;

src/installer/peanalysers/redress.iss

@@ -1,4 +1,4 @@
-; v0.8.0 Alpha 4
+; v1.0.0
 ; https://github.com/goretk/redress
 
 [Components]

src/installer/processmonitors/hollowshunter.iss

@@ -1,4 +1,4 @@
-; v0.3.1.3
+; v0.3.4
 ; https://github.com/hasherezade/hollows_hunter
 
 [Components]

src/installer/processmonitors/pesieve.iss

@@ -1,4 +1,4 @@
-; v0.3.1.3
+; v0.3.4
 ; https://github.com/hasherezade/pe-sieve/
 
 [Components]

src/installer/programming/fasm.iss

@@ -1,4 +1,4 @@
-; v1.73.28
+; v1.73.30
 ; https://flatassembler.net
 
 [Components]

src/installer/programming/winpython.iss

@@ -1,4 +1,4 @@
-; v4.3.20210620
+; v4.6.20220116
 ; https://github.com/winpython/winpython
 
 [Components]