Hack Forums
Flash Guard || Advanced Botkill & Anti-Botkill || AV Killer || Protect Your RAT/Bot - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Marketplace (https://hackforums.net/forumdisplay.php?fid=105)
+--- Forum: Premium (https://hackforums.net/forumdisplay.php?fid=451)
+---- Forum: Premium Sellers Section (https://hackforums.net/forumdisplay.php?fid=107)
+---- Thread: Flash Guard || Advanced Botkill & Anti-Botkill || AV Killer || Protect Your RAT/Bot (/showthread.php?tid=3669540)

Pages: Pages 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25


* - imposter johnson - Aug 30, 2013

Can you incorporate my suggestion on flashguard? I will need it soon. Ive already infected my slave with my fud rat. I would like to run flash guard on my victims comp to protect my rat from being uninstalled.

So basically, I dont want to bind anything to flashguard when I make it. I just want to tell it what process to protect ahead of time. Once it hits the pc and sees my process, it protects it. Can you make it protect like 3 different processes?


* - KFC Watermelon - Aug 30, 2013

(Aug 30, 2013 07:25 PM)Blastoise76 Wrote:  Can you incorporate my suggestion on flashguard? I will need it soon. Ive already infected my slave with my fud rat. I would like to run flash guard on my victims comp to protect my rat from being uninstalled.

So basically, I dont want to bind anything to flashguard when I make it. I just want to tell it what process to protect ahead of time. Once it hits the pc and sees my process, it protects it. Can you make it protect like 3 different processes?

This isn't exactly possible, because you have no way of telling Flash Guard what to protect and what to ignore. Flash Guard works by executing your process by itself and then protecting it, I don't have it made to protect an already running process.

The best way to do this would be to take your FUD stub and have Flash Guard download and protect it, and then update your slaves. Do a couple as a test first. All should go well.


* - Six Below - Aug 30, 2013

(Aug 30, 2013 09:19 AM)Success! Wrote:  Does it work with legacylink? who do i PM KFC or the thread owner?

Do NOT PM KFC regarding sales or any technical/support issues. All PM's should be directed to me and me only. As mentioned before by "KFC Watermelon", as long as you can disable startup, and other persistence on your stub build before running though Flash Guard, LegacyLink should work perfectly fine.

Thank you!


* - KFC Watermelon - Aug 30, 2013

Flash Guard should work 100% with java applications, such as jRAT, just use Download and Execute. It should protect the Java process as well (not 100% sure). Anyone want to test this?


* - Six Below - Aug 30, 2013

(Aug 30, 2013 10:04 PM)KFC Watermelon Wrote:  Flash Guard should work 100% with java applications, such as jRAT, just use Download and Execute. It should protect the Java process as well (not 100% sure). Anyone want to test this?

Make sure you disable the "Kill Java" option within Flash Guard if utilizing any type of Java RAT/Bot.

[img]http://turboimg.com/p/epl1377928089p.PNG[/img]


* - KFC Watermelon - Aug 31, 2013

(Aug 30, 2013 10:39 PM)Six Below Wrote:  Make sure you disable the "Kill Java" option within Flash Guard if utilizing any type of Java RAT/Bot.

[img]http://turboimg.com/p/epl1377928089p.PNG[/img]

Forgot to mention: Do not use "Kill .NET Crypters" if you are using injection.


* - Six Below - Aug 31, 2013

(Aug 31, 2013 08:17 AM)KFC Watermelon Wrote:  Forgot to mention: Do not use "Kill .NET Crypters" if you are using injection.

Of course. Forgot to include that information in my last post. I apologize. I hope this information helped everyone out.


* - KFC Watermelon - Aug 31, 2013

Does anybody have any suggestions for a future update?


* - Six Below - Aug 31, 2013

(Aug 31, 2013 05:41 PM)KFC Watermelon Wrote:  Does anybody have any suggestions for a future update?

Yea, I got a suggestion... Add a minimize button! 😏


* - imposter johnson - Sep 1, 2013

(Aug 30, 2013 07:59 PM)KFC Watermelon Wrote:  This isn't exactly possible, because you have no way of telling Flash Guard what to protect and what to ignore. Flash Guard works by executing your process by itself and then protecting it, I don't have it made to protect an already running process.

The best way to do this would be to take your FUD stub and have Flash Guard download and protect it, and then update your slaves. Do a couple as a test first. All should go well.

I use data protector for my crypter, and by the way it installs, its not exactly easy to update. I have already infected the victim and have already purchased flash guard. I didnt attach flash guard to my server, because I dont send servers out without testing, and you cant test flash guard. Once its on a pc, it is on there and I was told there is no way to remove it. When I have sent servers out without testing, the server often fails. So testing is a crucial process for computer related stuff. I guess the only time I can use flash guard is when I dont care about the target at all. If its some random jimbob. However in the line of business I am in, the targets are people that are valuable, they mean something. so making sure I have them on my rat is #1. Keeping them on, is #2. Using flash guard + server at the same time is risky, because you dont know what happens. You cant test on yourself, and I only get one shot to get someone to open the file.


* - Six Below - Sep 1, 2013

(Sep 1, 2013 12:40 AM)Blastoise76 Wrote:  I use data protector for my crypter, and by the way it installs, its not exactly easy to update. I have already infected the victim and have already purchased flash guard. I didnt attach flash guard to my server, because I dont send servers out without testing, and you cant test flash guard. Once its on a pc, it is on there and I was told there is no way to remove it. When I have sent servers out without testing, the server often fails. So testing is a crucial process for computer related stuff. I guess the only time I can use flash guard is when I dont care about the target at all. If its some random jimbob. However in the line of business I am in, the targets are people that are valuable, they mean something. so making sure I have them on my rat is #1. Keeping them on, is #2. Using flash guard + server at the same time is risky, because you dont know what happens. You cant test on yourself, and I only get one shot to get someone to open the file.

I understand your concerns. "KFC Watermelon" may be working on some type of built in kill feature however I am unsure of this. Until then, you can always test on VM. That is what we do for our initial testing. Once "KFC Watermelon" is online he will be giving you a more detailed answer. We will work with you to figure out a solution. Thanks again for your input!


* - jontaon - Sep 1, 2013

I have one suggestion. Please consider to add update (refud FG installed bin) feature. That's really need. Its a powerful weapon. If its not in control, it can be kill us too. As "Blastoise76" mentioned, loosing target one,it's really hurts.


* - Six Below - Sep 1, 2013

(Sep 1, 2013 08:54 AM)jontaon Wrote:  I have one suggestion. Please consider to add update (refud FG installed bin) feature. That's really need. Its a powerful weapon. If its not in control, it can be kill us too. As "Blastoise76" mentioned, loosing target one,it's really hurts.

To update your bin simply update the link in which you set your file to originally when adding to Flash Guard. This is the reason we recommend Dropbox, due to the fact that yo can easily update/change your file link. Ideally a private FTP server would be the best. I suggest making a free account at SPAM and downloading FileZilla to start using your own FTP server for direct file links.

Also, I just updated the thread to include the HTTP command list. This should help with "killing" a bot if you need it off of a specific computer, and/or if you accidentally infected yourself. This feature should not be used to test Flash Guarded files on your personal computer. We always recommend some type of VM Ware for testing. Thank you.


* - iguard - Sep 1, 2013

(Sep 1, 2013 11:58 AM)Six Below Wrote:  To update your bin simply update the link in which you set your file to originally when adding to Flash Guard. This is the reason we recommend Dropbox, due to the fact that yo can easily update/change your file link. Ideally a private FTP server would be the best. I suggest making a free account at SPAM and downloading FileZilla to start using your own FTP server for direct file links.

Also, I just updated the thread to include the HTTP command list. This should help with "killing" a bot if you need it off of a specific computer, and/or if you accidentally infected yourself. This feature should not be used to test Flash Guarded files on your personal computer. We always recommend some type of VM Ware for testing. Thank you.

You keep answering with this but everybody is asking not how to update the guarded bin, but the guard bin itself


* - Six Below - Sep 1, 2013

(Sep 1, 2013 06:45 PM)iguard Wrote:  You keep answering with this but everybody is asking not how to update the guarded bin, but the guard bin itself

I am sorry if I am confusing anyone. Just to get this clear is everyone asking how to update there stub within Flash Guard once executed, or the HTTP commands in which Flash Guard responds to. I am very sorry for this confusion. I will work with everyone to get this question answered once and for all.