+- Hack Forums (https://hackforums.net)
+-- Forum: Marketplace (https://hackforums.net/forumdisplay.php?fid=105)
+--- Forum: Premium (https://hackforums.net/forumdisplay.php?fid=451)
+---- Forum: Premium Sellers Section (https://hackforums.net/forumdisplay.php?fid=107)
+---- Thread: Flash Guard || Advanced Botkill & Anti-Botkill || AV Killer || Protect Your RAT/Bot (/showthread.php?tid=3669540)
* - betamonkey - Sep 4, 2013
I did actually test this on Norton Internet Security 2013, ESET Smart Security 6 and Kaspersky AntiVirus (all latest) and I saw what you tried to do, but it didn't actually affect them at all. Avast did work, though.
* - KFC Watermelon - Sep 4, 2013
(Sep 4, 2013 03:18 PM)betamonkey Wrote: I did actually test this on Norton Internet Security 2013, ESET Smart Security 6 and Kaspersky AntiVirus (all latest) and I saw what you tried to do, but it didn't actually affect them at all. Avast did work, though.
Thanks for testing for me. I was mainly targeting the main 3 AVs (Avast, Avira, AVG) as they are vastly the most popular and most used.
Good luck with Betabot!
* - Six Below - Sep 4, 2013
(Sep 4, 2013 03:18 PM)betamonkey Wrote: I did actually test this on Norton Internet Security 2013, ESET Smart Security 6 and Kaspersky AntiVirus (all latest) and I saw what you tried to do, but it didn't actually affect them at all. Avast did work, though.
Thanks "betamonkey" for doing those tests. We are always working to improve.
* - Six Below - Sep 5, 2013
(Sep 5, 2013 02:22 AM)Success! Wrote: Still needs to be tested more should have waited till it was fully tested. High chance of losing all your bots of you dont get the setting 100% right.
More testing? As in testing your stub (in some sort of personal VM) before executing I presume. All needed information is listed in the thread itself. This application is currently working 100% correctly and as advertised. If you cannot get your stub working with your specific crypter chances are your crypter does not support managed files (seen in thread) which is needed to support the Flash Guard output.
Testing in a VM before executing on any amount of bots is always a must. Regardless of the application/program you are using. The fact that it kills the bots shows that it is doing it's job. We will continue to update the application for user ease of use, however at this moment it is nearly impossible to make it easier for the user. We cannot "nurf" our BK settings because people may execute a non-tested and or non-working stub. Would destroy the point of this application. I am sorry if this is inconvenient, but I can almost promise that if after crypting your Flash Guard stub does not work, than it was an issue caused by the crypter itself not supporting managed files and or adding its own processes somewhere during the building process. I highly suggest testing each aspect of your bin throughout the process. As in: Test stub > Put it through Flash Guard > Test uncrypted Flash Guarded bin > crypt and test final Flash Guarded bin. This will give each user a better understanding of where and what is causing the issue.
Not to mention we are on our 5th build (Version 1.5) This application has been through it's fair share of testing and updating issues we find necessary. This does not mean we are done update and upgrading this application, this simply means, this issue you seem to be having (according to our PM conversations) has already been addressed, and noted. Spoiler (Click to View)
* - KFC Watermelon - Sep 5, 2013
(Sep 5, 2013 02:54 AM)Success! Wrote: No i agree with you it works 100% as it should im not bashing the bot. What i should have said is "I" should have done more testing before i sent it out to my bots.
Vouch this does work & its VERY POWERFUL!
Yeah. It's always good to send it to a small amount of bots to test how it works in their environment. Flash Guard is very powerful and just about everything is an option. Find what works for you.
* - Six Below`s Nemesis - Sep 5, 2013
(Sep 5, 2013 07:45 AM)KFC Watermelon Wrote: Yeah. It's always good to send it to a small amount of bots to test how it works in their environment. Flash Guard is very powerful and just about everything is an option. Find what works for you.
When are you going to do the PDF with all the commands and how to set-up and use/update/FG/Bots?
I would be nice to have some kind of instructions for buyer so we don't need to keep posting/looking in this thread.
* - KFC Watermelon - Sep 5, 2013
(Sep 5, 2013 09:58 AM)Success! Wrote: When are you going to do the PDF with all the commands and how to set-up and use/update/FG/Bots?
I would be nice to have some kind of instructions for buyer so we don't need to keep posting/looking in this thread.
Are you confused with the HTTP Bot/Commands? It simply reads a plain text file on the web for commands. The commands are on the thread.
Just upload a .txt to your website or DropBox and put the link to it in Flash Guard. You can then update the .txt to send commands.
* - Rogerbot - Sep 5, 2013
Please add an option to update individual bots.
* - Six Below - Sep 6, 2013
The command list is included in the thread itself. I have also quoted it below.
Quote:Command List:
- enablehavoc / disablehavoc
- download URL FILENAME
- visit site
- visit -h site
- attack WEBSITE TIME
- hosts "hosts editor"
- kill
If I find the time between work, classes, and helping my father I will try and make a video. Once I get my product line site up I will be posting many more instructional videos. Until then, please read "KFC Watermelon's" instructions above. If you do not find these helpful, stand-by for a more detailed instructional video. Thank you!
* - KFC Watermelon - Sep 6, 2013
Six there is also a update command. Its the same as the download except Flash kills itself afterwards.
* - Six Below`s Nemesis - Sep 6, 2013
(Sep 6, 2013 04:25 AM)KFC Watermelon Wrote: Six there is also a update command. Its the same as the download except Flash kills itself afterwards.
where my post go? lol
😧
who do i contact for support KFC looks like he knows more about this?
enablehavoc / disablehavoc
download URL FILENAME - Does this download and run my bot and add it to start up? Do i use this to also update bots?
visit site
visit -h site
attack WEBSITE TIME - When it checks again does it run the DDOS again? How do i pick how many threads i want to use?
hosts "hosts editor" - What is "Hosts Editor?
kill
If i check the attempt elevated permissions and the slave clicks NO will my bots still run?
When i run commend enablehavoc does it run both Shield and Searcher? is there a commend to run just searcher?
Is there a command to turn no/off disablers? or at least tell it not to disable task manager?
When crypting do i use runPE "Itself" ?
When crypting FG is it ok to use delay execution?
When crypting FG is it ok to compress?
* - KFC Watermelon - Sep 6, 2013
Success,
I'm on my phone and my typing won't be the best. I'll still attempt to help you.
If i check the attempt elevated permissions and the slave clicks NO will my bots still run? Yes, of course.
When i run commend enablehavoc does it run both Shield and Searcher? is there a commend to run just searcher?
Is there a command to turn no/off disablers? or at least tell it not to disable task manager? It disables the shield. The searcher runs once.
When crypting do i use runPE "Itself" ? I dont know what you mean by this.
When crypting FG is it ok to use delay execution? Should be.
When crypting FG is it ok to compress? Depends.
* - Six Below`s Nemesis - Sep 6, 2013
Thank you KFC 🤝
When you get time can you replay to the below:
1.download URL FILENAME - Does this download and run my bot and add it to start up? Do i use this to also update my bots? Do i use this to update FG?
2. attack WEBSITE TIME - When it checks again does it run the DDOS again? How do i pick how many threads i want to use?
3. hosts "hosts editor" - What is "Hosts Editor?
4. What crypters has this been tested with?
5. When crypting do i use "Itself" as the injection method?
🤩
(Aug 8, 2013 03:55 AM)Six Below Wrote: Any crypter that supports .NET 2.0 framework (90% of crypters do) will work. I recommend: https://hackforums.net/showthread.php?tid=3650168 The owner is both a friend of mine, and provides great support. They have options that will allow this to be crypted. Just an FYI, it is 2/35 before crypting so not to bad for an uncrypted file. Thanks!
The crypter you recommend does NOT support .NET framework 😧
* - Six Below - Sep 6, 2013
(Sep 6, 2013 10:27 AM)Success! Wrote: The crypter you recommend does NOT support .NET framework 😧
Sorry, that response was from a while back before Clarion updated, and "fell off the map". Ignore that. I have messaged a couple of crypter owners asking for some test crypts to see which works best. I will update the original sales thread itself with this information if/when I get it. Until then, any crypter that supports managed files should work.
* - KFC Watermelon - Sep 6, 2013
Success -
If you're having an issue (the file not working), send me your file crypted and uncrypted. I will debug it in my virtual machines and tell you the issue.
Quote:1.download URL FILENAME - Does this download and run my bot and add it to start up? Do i use this to also update my bots? Do i use this to update FG?
If you want your file added to startup, you can do so with this command:
download URL FILENAME -s "Startup Info"
Flash Guard will add your file to startup.
Quote:2. attack WEBSITE TIME - When it checks again does it run the DDOS again? How do i pick how many threads i want to use?
When the HTTP Bot checks for a command, it executes the command once and won't execute it again unless it changes. 5 threads are used during the attack, and each thread attempts to open 100 connections with the web server, sends a request on each, closes then and re-sends them until the time is up.
Quote:3. hosts "hosts editor" - What is "Hosts Editor?
Edits the HOSTS file, to block websites.
Quote:4. What crypters has this been tested with?
Any that support managed files (using the reflection method) work fine.
Quote:5. When crypting do i use "Itself" as the injection method?
No, Flash Guard cannot be crypted and executed using your typical RunPE; Your crypter needs to support managed executable using the reflection method.
Quote:The crypter you recommend does NOT support .NET framework
That's a really old post. The OP of the crypter claimed it did but it did not. That crypter is no longer running and it never did with with Flash. Would not suggest it.