Hack Forums
[.NET] UnSlaveMe | Fully undetectable does simply not matter - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] UnSlaveMe | Fully undetectable does simply not matter (/showthread.php?tid=4894467)

Pages: Pages 1 2 3 4 5


* - Hoody - Jul 5, 2015

Im gonna start by saying nice job bro :)

If i were you i would add memory scanning to it as well :)

heres an example of what you can do
Spoiler (Click to View)

note: the scanner doesnt do anything to the process, just detects it.

Im not gonna give away the source for this cause its used in my botkiller that i DONT want to reFUD. sorry :/


* - Fộrcəd - Jul 5, 2015

(Jul 5, 2015 09:54 PM)Hoody Wrote:  Im gonna start by saying nice job bro :)

If i were you i would add memory scanning to it as well :)

heres an example of what you can do
Spoiler (Click to View)

note: the scanner doesnt do anything to the process, just detects it.

Im not gonna give away the source for this cause its used in my botkiller that i DONT want to reFUD. sorry :/

So this uses the princapel of all types of anti-virus right? It scans the memory to find something and it uses something to identify it with? Correct me if I'm wrong. And that the Is not really what I want to achieve here. This program does never need to know what is wrong and wright. No database , nothing. It simply compares what you defined as an clean computer , and kills everything else that was not on that afterwords.

But really cool memory scanner, looks to work great!


* - debug - Jul 5, 2015

(Jul 5, 2015 10:13 PM)Fộrcəd Wrote:  So this uses the princapel of all types of anti-virus right? It scans the memory to find something and it uses something to identify it with? Correct me if I'm wrong. And that the Is not really what I want to achieve here. This program does never need to know what is wrong and wright. No database , nothing. It simply compares what you defined as an clean computer , and kills everything else that was not on that afterwords.

But really cool memory scanner, looks to work great!
I think both approaches would work well. The memory scanner should work regardless of it being crypted, but then again you do have a point. Your version is pretty sweet because there need not be any predefined values to compare.


* - Hoody - Jul 5, 2015

(Jul 5, 2015 10:13 PM)Fộrcəd Wrote:  So this uses the princapel of all types of anti-virus right? It scans the memory to find something and it uses something to identify it with? Correct me if I'm wrong. And that the Is not really what I want to achieve here. This program does never need to know what is wrong and wright. No database , nothing. It simply compares what you defined as an clean computer , and kills everything else that was not on that afterwords.

But really cool memory scanner, looks to work great!

Thats is correct, i guess you could go off of just comparing what files change. It would just be nice to have all the "common" malware in a scanner though, since it seems like your making an antivirus. But i guess if your using this kinda like sandboxie, that isnt helpful to you.


* - DragonHunter - Jul 5, 2015

This looks pretty nice tbh, the demo already shows it's already working, I'm wondering if you'd even be able to isolate just 1 program.
If you could isolate (like select a program/process) it would be neat, because you wouldn't be running just 1 program, you'd have browsers, skype, games or whatever

My guess aswell is that, if you'd add registry changes, it would be funny to bypass those Time Limit programs, just unslave and registry changes are gone 🤣


* - Hoody - Jul 5, 2015

(Jul 5, 2015 10:49 PM)DragonHunter Wrote:  My guess aswell is that, if you'd add registry changes, it would be funny to bypass those Time Limit programs, just unslave and registry changes are gone 🤣

That is a genius idea. Where can i purchase?


* - Fộrcəd - Jul 5, 2015

(Jul 5, 2015 10:49 PM)DragonHunter Wrote:  This looks pretty nice tbh, the demo already shows it's already working, I'm wondering if you'd even be able to isolate just 1 program.
If you could isolate (like select a program/process) it would be neat, because you wouldn't be running just 1 program, you'd have browsers, skype, games or whatever

My guess aswell is that, if you'd add registry changes, it would be funny to bypass those Time Limit programs, just unslave and registry changes are gone 🤣

What ever programs that runs when the software is launched when not be to touched.
Will demonstrate this in next video. But i have been on the idea of isolating programs. Maybe create an permanent whitelist.

Never really thought about the use for this software in resetting trial periods. But that is an great idea also, any new suggestions on a better name for the software are warmly welcomed.


(Jul 5, 2015 10:49 PM)DragonHunter Wrote:  This looks pretty nice tbh, the demo already shows it's already working, I'm wondering if you'd even be able to isolate just 1 program.
If you could isolate (like select a program/process) it would be neat, because you wouldn't be running just 1 program, you'd have browsers, skype, games or whatever

My guess aswell is that, if you'd add registry changes, it would be funny to bypass those Time Limit programs, just unslave and registry changes are gone 🤣

What ever programs that runs when the software is launched when not be to touched.
Will demonstrate this in next video. But i have been on the idea of isolating programs. Maybe create an permanent whitelist.

Never really thought about the use for this software in resetting trial periods. But that is an great idea also, any new suggestions on a better name for the software are warmly welcomed.


(Jul 5, 2015 10:49 PM)DragonHunter Wrote:  This looks pretty nice tbh, the demo already shows it's already working, I'm wondering if you'd even be able to isolate just 1 program.
If you could isolate (like select a program/process) it would be neat, because you wouldn't be running just 1 program, you'd have browsers, skype, games or whatever

My guess aswell is that, if you'd add registry changes, it would be funny to bypass those Time Limit programs, just unslave and registry changes are gone 🤣

What ever programs that runs when the software is launched when not be to touched.
Will demonstrate this in next video. But i have been on the idea of isolating programs. Maybe create an permanent whitelist.

Never really thought about the use for this software in resetting trial periods. But that is an great idea also, any new suggestions on a better name for the software are warmly welcomed.


(Jul 5, 2015 11:00 PM)Hoody Wrote:  That is a genius idea. Where can i purchase?

Will be for sale hopefully when I have sorted out some bugs and added some more features.


* - Tidas - Jul 5, 2015

Neato. Reminds me of Deep Freeze.


* - Fộrcəd - Jul 6, 2015

Bump, thread has been updated. Any suggestions are warmly welcomed either here or on PM.


* - +Haze - Jul 6, 2015

I want dat sauce code bruh


* - Minato Namikaze - Jul 6, 2015

Sucks you got to pay for it.
Guess im sticking to Sandboxie :(


* - apawow - Jul 6, 2015

This seems like a very helpful program, I can't wait for you to release it.


* - kraxyk - Jul 6, 2015

Wow this looks really cool...I am very interested in this.


* - XuidDump - Jul 6, 2015

That's pretty sweet.
Good program man, definitely looking forward to this.


* - VmX5 - Jul 6, 2015

I'm quite interested on how you managed to do a "Snapshot" of the system Because on a normal PC (not vm) the drive will not be blank there WILL be other files The program will not be able to take a "snapshot" in a matter of seconds are you just using a FileSystemWatcher?

Also remember if this tool becomes popular people could just make a bypass for your tool (Find if a process(Your program) is open and kill it)