Hack Forums
[C#] [C#(VB)-SRC-Free] Crypter DLL, crypt from within a DLL. Make a crypter in a minute! - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [C#] [C#(VB)-SRC-Free] Crypter DLL, crypt from within a DLL. Make a crypter in a minute! (/showthread.php?tid=1682257)

Pages: Pages 1 2


[C#(VB)-SRC-Free] Crypter DLL, crypt from within a DLL. Make a crypter in a minute! - CaptainBri - Sep 2, 2011

As a 'celebration' of my 300th post on LeetCoders, I'm releasing a so called 'Crypter-DLL' to crypt from within a DLL file.

[img]http://img263.imageshack.us/img263/2540/screenshot2011090223275.png[/img]
[Image: 0gdiX.png]

Options:
  • Twelve RunPE's to choose from

  • RunPE as Base64 string storage

  • Resource storage method for files

  • Written in C# 2.0

  • Randomized variable names

  • Add the crypted file to startup

  • Unique variable naming

  • Over 790 lines of code! [img]http://img710.imageshack.us/img710/3238/screenshot2011090216112.png[/img]


  • Configure Assembly:
    • Title

    • Description

    • Copyright

    • Company

    • Product

    • Version

    • FileVersion




  • Install the crypted file:
    • Application Data

    • Temp folder

    • No install




  • Inject into:
    • Default Browser

    • VBC

    • CSC

    • Manual injection (for ex. svchost.exe)




  • A bunch of encryptions to choose from:
    • DES

    • TripleDES

    • Rijndael

    • RC4

    • XOR

    • Symentric

    • RC2

    • PolyRev

    • PolyStairs

    • DEX

    • PolyBaby

    • AES

    • Cloud

    • Stairs

    • PolyCloud

    • Poly3DES

    • PolySymentric

    • PolyRC2

    • PolyDEX

    • PolyAES

    • PolyRijndael





To use it, simply add the DLL as a reference and make a new CrypterClass. Set the options, then use the function "Encrypt" from the CrypterClass.
Code
CrypterClass Class = new CrypterClass();
Class.Encrypt("C:\\File1.exe", "C:\\File2.exe");

Note: You can also use the DLL in VB.NET!

Download: http://dl.dropbox.com/u/23840983/LC/DLL%20Crypter%20-%20CaptainBri%20%40%20LeetCoders.org%20with%20ad.rar
Password: leetcoders.org

For the version without an ad & the source: Download

Have a nice day,
CaptainBri


* - Local Celeb - Sep 2, 2011

Time to see a load of new crypters coming up.
Nonetheless, nice work.


* - dwarf2000 - Sep 2, 2011

Nah this ain't nice, not at all.

This is fucking orgasmic.


* - DeMoNi - Sep 2, 2011

(Sep 2, 2011 02:32 PM)dwarf2000 Wrote:  Nah this ain't nice, not at all.

This is fucking orgasmic.

Lol yeah you make me laugh XD, btw nice share =)


* - Ethernal Five - Sep 2, 2011

Hey, once again an epic share from Mr Bri. 🤝


* - SequenceInitiated - Sep 2, 2011

Injection into default browser? Since when is Mozilla, IE, Opera, or any major browser coded in .net? Unless you've made your own RunPE that's able to inject a native into a non-native, there's no use or it.


* - hacphongthan - Sep 3, 2011

very nice
i'm trying to learn C#
good example


* - Imaginary - Sep 3, 2011

Very nice relase, thank you for this.


* - MoonWalker - Sep 3, 2011

Awesome share, as always. Thanks a lot CaptainBri. :)


* - Malitastic - Sep 3, 2011

What an insane release, thanks for this :D


* - Banksу - Sep 3, 2011

Figures that one of the only things that gets noticed anymore is something that has to do with crypters.


* - Silicon - Sep 3, 2011

Who tipped a load of jizz in my pants?
Oh no nevermind. I just came when I saw this. <3


* - Xori - Sep 3, 2011

I highly suggest removing PolyCloud; it throws random input-length related bitchfits... Nice job though, maybe also put injection methods into a separate DLL because people will most likely need to encrypt it to keep FUD...


* - Ωмεɢα - Sep 3, 2011

Lol, I just went to see that Leetforums of yours and went to the c sharp section... Your tutorials are pretty freaking good :)


* - Xori - Sep 3, 2011

Quote:Injection into default browser? Since when is Mozilla, IE, Opera, or any major browser coded in .net? Unless you've made your own RunPE that's able to inject a native into a non-native, there's no use or it.


Are you an idiot, do you realize that the most popular RATs are coded in VB6 or Delphi? (BS = VB6, CG/SpyNet/DC = Delphi)