+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Keyloggers (https://hackforums.net/forumdisplay.php?fid=113)
+---- Thread: Whats the best way to disguise a keylogger? (/showthread.php?tid=1392828)
Whats the best way to disguise a keylogger? - trollallday - Jun 18, 2011
I know this is a nooby question... but I really need some help! I'm looking for a good way to disguise a keylogger in a download off of media fire. There may not be one set way to do this, but any tips would be great. The download is supposed to be for a "Runescape bot client." Kinda obvious when you see .exe after the download. So, like I said...any help would be great!
Thank-you,
Troll
* - Starburst - Jun 18, 2011
Rename it to .scr and say it's a special bot.
* - Turmoil - Jun 18, 2011
That's a stupid idea that would corrupt the file.
I have an idea,
Take the file extension off
make a file builder that when you open the file in the program it saves it as whatever.exe and runs it,
For the builder make it look like a bot client and put the virus in the resources
* - trollallday - Jun 18, 2011
Turmoil, I'm not gonna lie. I'm a noob with this stuff. I came here to learn some more, could you direct me to a guide that may help me with this, or should I just try to google it and go from there?
* - Starburst - Jun 18, 2011
(Jun 18, 2011 08:52 AM)Turmoil Wrote: That's a stupid idea that would corrupt the file.
I have an idea,
Take the file extension off
make a file builder that when you open the file in the program it saves it as whatever.exe and runs it,
For the builder make it look like a bot client and put the virus in the resources
Oh, of course, why don't you go and rename an application of yours to .scr and see if it runs? ;)
* - Turmoil - Jun 18, 2011
If you change a file extension to it's not original state it will corrupt the runtime , I suggest you just rename the .exe to
RSBot.exe
Put an rsbot icon on it , file pump it to about 20mb and release it.
(Jun 18, 2011 08:54 AM)Starburst Wrote: Oh, of course, why don't you go and rename an application of yours to .scr and see if it runs? ;)
If you change the file name to something.scr
it's 2011 kid.
They'll know its an executable from "Application" Unless they're 13 year olds.
* - trollallday - Jun 18, 2011
Well, I made a youtube video to go with it, can I link it on here> I called it xBotting Extreme and named it as xBotExtreme.exe I did not file pump it though. Do you think people would actually fall for it though?
* - Turmoil - Jun 18, 2011
(Jun 18, 2011 08:58 AM)trollallday Wrote: Well, I made a youtube video to go with it, can I link it on here> I called it xBotting Extreme and named it as xBotExtreme.exe I did not file pump it though. Do you think people would actually fall for it though?
Hmm
12 year old's yes,
I'm pretty sure if people noticed the file size they would think it's fake, how can something so big be so little?
I suggest making it atleast 10mb with a file pumper, not sure if it'll corrupt it. If it does tell me ;)
* - trollallday - Jun 18, 2011
Okay, I will. +Guessing you play? lol
* - Turmoil - Jun 18, 2011
(Jun 18, 2011 09:05 AM)trollallday Wrote: Okay, I will. +Guessing you play? lol
Yeh
level 137 - 99 str,mage,range,def,attack,hp,fletching almost pray & summoning
level 102 - turmoil pure 99 str 99 mage 99 mining 99 smithing
level 106 - barrows pure 99 str 99 range
* - trollallday - Jun 18, 2011
lol got a kid logged, thank-you so much turmoil! <3