+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [TuT] iStealer 4.0 + Scantime FUD **n00b friendly (/showthread.php?tid=195455)
[TuT] iStealer 4.0 + Scantime FUD **n00b friendly - Anubis - Dec 1, 2009
OoOkay i decided to make this tutorial..althought there are lots of iStealer tuts here on forum...I will show you how you can Crypt to be Scantime FUD also...
iStealer steals passwords from victims computer and then uploads them to an FTP account, very fast and easy to set up and spread
Recovery Options
MSN Messenger (7.xx 8.xx 9.xx)
*Google Talk
*Trillian
*Pidgin/Gaim
*Steam
*No-IP/DynDNS
*Firefox(2.xx 3.xx)
*Internet Explorer (7.xx 8.xx)
*FileZilla
General Options
*Anti VirtualPC/VMWARE Emulator
*Anti Wire-Shark Sniffer
*Anti Ollydbg Debugger
*Anti Procmon Monitor
Melt Self removal
BEFORE WE START PAUSE YOUR AV (AntiVirus) PROTECTION FOR A WHILE.. kuz what are you building is a trojan :S
STEP 1. Download iStealer 4.0 from HERE
Extract all files from the rar to one folder...so you have these...then RUN Loader
[IMG]http://i46.[censored].com/2ps5dlj.jpg[/IMG]
STEP 2. When you run Loader This will come up
[IMG]http://i50.[censored].com/dw74mf.jpg[/IMG]
STEP 3. Next step is to register for FTP -->HERE --->It is my Refferal link or if you dont to use my reff. go to www.drivehq.com
STEP 4. When you register...then LOGIN and delete (It is not necessery to delete) all folders in Storage...Then create folder called DUMPS just for example..U can call it however you want...
STEP 5. Now lets get back to our iStealer :P Maximize it and type these
In Host box type: ftp.drivehq.com instead ftp.something.com
Login box: Type your DRIVEHQ Username that you registered with in step 3
Password box: Password of your DRIVEHQ Account that you registered in step 3
In Directory box type tha name of the folder you had created recently../DUMPS in my case for example..
It should be something like this:
[IMG]http://i46.[censored].com/35hiopj.jpg[/IMG]
STEP 7. GOTO TestFTP If all details are good it will show..Working Perfectly !
STEP 8. For easier spreading use a binder...(TICK THE BOX ""Bind with another file"") It will join 2 files into one...For example you can use any FAKE PROGRAMS to bind it with for easier spreading ..Binders join 2 files and creates 1 from these 2 files..When that file is opened..Both files will be opened..I will give you some FAKE PROGRAMS U CAN BIND THE SERVER WITH..
Steam Hacker ---> credits to Error 404
Spoiler (Click to View)
MS Point Generator ---> credits to Snayke
Spoiler (Click to View)
Dark DDoSeR 3.0.2 Account and DNS Creator --->credits to Kink
Spoiler (Click to View)
Kaspersky All products Keygen ---> credits to .D0T'
Spoiler (Click to View)
or you can make your own one..if you are good at VB..
Change the Icon if you want to..Tick change icon and browse for iStealer folder and Open folder called Icon Pack so choose any of these..:P
____________________________________________________________
CLICK BUILD ----> The server will be created (it is a trojan !!! If you need to try the server if it is working good..turn off your antivirus and run it..than go to your DRIVEHQ Account and open DUMPS Folder and se if any file is created..If it is than it is working okay...
____________________________________________________________
NOW What WE WIL BE DOING IS CRYPTING THE SERVER !!
For that you will need a crypter !!!
If you have money you will buy SCANTIME + RUNTIME Crypter ...It means that it cannot be detected by any antivirus while scanning it and it cannot be detected when the crypted file is opened..I RECOMMEND YOU TO BUY one of these from the market section..There are a lots of them..I found these FREE Crypting service RUNTM and SCANT so go here if intersted CLICK ME
If you dont have money but would like to have FUD Server u will find FREE SCANTIME CRYPTER It means this cannot be detected by any AV while scanning...but when it is opened it will become detected...
SCANTIME CRYPTERS ---> Please RATE and LEAVE Comments on THESE THREADS BELOW !!! All credits to their CODERS
[Public][100%FUD] Scantime Crypter !!!! C0d3ak --=NEW=--
[FUD] Scantime Crypter -=C0d3ak=- v1.2
[100% FUD][Scantime]nufcrule3 Crypter
[Release] t3c4i3's FUD Crypter(Scantime) v1.08 [Updated 28th September]____________________________________________________________
CRYPTING is easy..just download any of these crypters...open..browse for your stealer server and click CRYPT...Than new server will be created..but SCANTIME so your Antivirus wont find nothing in it..To be sure the crypted server is working properly run it on yourself and go to your drivehq account and see for the dumps :P
_____________________________________________________________
SPREADING is not so easy if you think so..But i will tell you most useful methods...
1. YouTube (make a video or download someone elses and post a link to download (which will be your server))
2. FORUMS (NOT HACKFORUMS)
3. TEEN CHAT 123 ---> google it
4. OMEGLE ----> google it
SO JUST BE CREATIVE
This will be in your folder if you were sucessfull Open to see DUMPS :PSpoiler (Click to View)
WHY THE DUMPS ARE NOT COMING??
There are several things you have to know..
iStealer doesnt steal latest firefox Passwords
Victim has no remembered passwords
You have not spread it successfully
Victim uses OPERA, NETSCAPE or other browser...
AND AT THE END ""SORRY FOR MY ENGLISH""
* - LittleFighter™ - Dec 1, 2009
great tut bro
thnx for it
now i will not make a new tut for it :P
* - Anubis - Dec 1, 2009
(Dec 1, 2009 07:34 AM)LittleFighter™©® Wrote: great tut bro
thnx for it
now i will not make a new tut for it :P
thanX :P
* - flAmingw0rm - Dec 1, 2009
I've opened FUD crypting service, runtime plus scantime, so feel free to request HERE.
Great tutorial btw, good job Anubis.
* - Anubis - Dec 1, 2009
(Dec 1, 2009 07:35 AM)flAmingw0rm Wrote: I've opened FUD crypting service, runtime plus scantime, so feel free to request HERE.
Great tutorial btw, good job Anubis.
ThanX i put your thread to this post...already :P
bump..........................
* - Anubis - Dec 1, 2009
bump :( :( :S ..........
* - Error 404 - Dec 1, 2009
Usefull tut.
BTW That *Fatality Steam hacker have i made via team viewer for a guy --'
* - Anubis - Dec 1, 2009
(Dec 1, 2009 10:04 AM)Error 404 Wrote: Usefull tut.
BTW That *Fatality Steam hacker have i made via team viewer for a guy --'
Upss...Okayyy Sorry than :S will try and EDIT :P
* - ---DMD--- - Dec 1, 2009
Nice tutorial, looks like it took a while.
* - VeXer - Dec 1, 2009
Great Tutorial ! Very Usefull! Thanks!
* - jaypee89 - Dec 1, 2009
Great tutorial man, nice colors and all make it easier to read. I have a question though. So I bind the server to a picture and change the icon of my server to the jpeg icon, and I hide the .exe extension. When I try to send it via msn messenger however, the application icon shows up and the .exe extension becomes visible. Is there any way to keep the jpeg icon and hidden .exe extension so the victim actually thinks its a picture I'm sending? This has been annoying me for about a week now 😵
* - -=C0d3ak=- - Dec 1, 2009
yeaah mines the best crypter lol
* - shneikid - Dec 1, 2009
Error creating process.
Any idea my AV&FIREWALL is turned off
http://img14.imageshack.us/img14/7532/err0r.png
* - Anubis - Dec 2, 2009
(Dec 1, 2009 06:16 PM)jaypee89 Wrote: Great tutorial man, nice colors and all make it easier to read. I have a question though. So I bind the server to a picture and change the icon of my server to the jpeg icon, and I hide the .exe extension. When I try to send it via msn messenger however, the application icon shows up and the .exe extension becomes visible. Is there any way to keep the jpeg icon and hidden .exe extension so the victim actually thinks its a picture I'm sending? This has been annoying me for about a week now 😵
Noup...msn detects it as .exe ...so u need better strategy...bind the server with kaspersky reseter for ex...than upload it to MULTIUPLOAD and make a video :P
(Dec 1, 2009 07:53 PM)shneikid Wrote: Error creating process.
Any idea my AV&FIREWALL is turned off
http://img14.imageshack.us/img14/7532/err0r.png
I hav no idea :S :S 😧
* - Junction - Dec 4, 2009
great tutorial,thank you this one is added in my tutorial library :)