Hack Forums
VanToM W0rm 1.1 [USB / Skype / RAR / Drives] [Priv8] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Hacking Tools and Programs (https://hackforums.net/forumdisplay.php?fid=10)
+---- Thread: VanToM W0rm 1.1 [USB / Skype / RAR / Drives] [Priv8] (/showthread.php?tid=3857342)

Pages: Pages 1 2 3


* - SIM-830315 - Nov 11, 2013

wil give a try to this , looks great !


* - sporkz - Nov 11, 2013

(Nov 10, 2013 10:15 AM)ıllıllı ẸŤĤĮČÃĹ ıllıllı Wrote:  i no have time for scanning it and post it here , some one scan it then post the scan result here

Thanks...

btw you asked for the scan
here you go: Scan Results


* - wolf_mc12 - Nov 11, 2013

Spread Skype not have options. Why ?


* - 7H3 3XP3R7 - Nov 11, 2013

(Nov 11, 2013 01:48 PM)wolf_mc12 Wrote:  Spread Skype not have options. Why ?

No need option built-in with stub 🤝🤝


* - Lolerbeans12 - Nov 11, 2013

Infected myself and a few slaves.
I'm not seeing anything pop up in the Worm UI.
Edit: Double-checked IP and Ports. Working just fine.
I did crypt it, that may have corrupted it.
Edit 2: Created a new server file, didn't encrypt it, made IP local host. Still doesn't work.
Any explanation?

Edit 3: False alarm. I was using the same port I use for Dark Comet.
I don't know why I didn't think about that before.

Good job with the Worm btw. :>


* - 7H3 3XP3R7 - Nov 12, 2013

(Nov 11, 2013 11:41 PM)Lolerbeans12 Wrote:  Infected myself and a few slaves.
I'm not seeing anything pop up in the Worm UI.
Edit: Double-checked IP and Ports. Working just fine.
I did crypt it, that may have corrupted it.
Edit 2: Created a new server file, didn't encrypt it, made IP local host. Still doesn't work.
Any explanation?

Edit 3: False alarm. I was using the same port I use for Dark Comet.
I don't know why I didn't think about that before.

Good job with the Worm btw. :>

1-try use the default Port
2-check the port in http://canyouseeme.org/ if open or not
3-dont use port , that you used it for another program
4-try Ccleaner & clean your PC

every thing should be fine

🤝🤝


* - Lolerbeans12 - Nov 12, 2013

Well in a few days if the worm does it's job, and I see some new slaves;
I'll be sure to post back with my results.

Question, does it have it's own startup?


* - 7H3 3XP3R7 - Nov 12, 2013

(Nov 12, 2013 12:29 AM)Lolerbeans12 Wrote:  Well in a few days if the worm does it's job, and I see some new slaves;
I'll be sure to post back with my results.

Question, does it have it's own startup?

yes have own start up & stable

check the Install in application data

🤝


* - Lolerbeans12 - Nov 12, 2013

Thanks, the startup makes life a lot easier ;D


* - dlmao - Nov 12, 2013

Could anyone tell me exactly what to do with this? =/

Im kinda of new to this whole scene and i have an IP and everything just not sure how to connect to the "victim" etc.

Any help is appreciated!


* - PieWizidV2 - Nov 12, 2013

no time for scanning? sounds suspicous sniff.... probably a virus


* - sporkz - Nov 12, 2013

(Nov 12, 2013 05:29 AM)PieWizidV2 Wrote:  no time for scanning? sounds suspicous sniff.... probably a virus

i already put down a scan report for everyone

Scan report


* - atirws - Nov 12, 2013

This is the virus total scan.... I'm new but looks scary to me.

https://www.virustotal.com/en/file/38987e2d336c28a7e8fc7f4709d320ea922d7b67dc43f04f46f2db94973cc36b/analysis/


* - 7H3 3XP3R7 - Nov 12, 2013

that scan report cant show its a virus or backdoo

all are dirt code known as virus or malware in real no have any effect on the PC

some of detected is show that the coder used some tools for protect the source so it say its virus

you can test under Vmware or sandibox

also see the connection when you run the Program

you will be sure there is no any out connection


* - gigabit - Nov 12, 2013

Will it auto execute or not? 🤝