Hack Forums
Coder of 3vBot "mod" w/ Ring0 Rootkit exposed - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Marketplace (https://hackforums.net/forumdisplay.php?fid=105)
+--- Forum: Bazaar (https://hackforums.net/forumdisplay.php?fid=450)
+---- Forum: Marketplace Discussions (https://hackforums.net/forumdisplay.php?fid=163)
+---- Thread: Coder of 3vBot "mod" w/ Ring0 Rootkit exposed (/showthread.php?tid=1981357)



Coder of 3vBot "mod" w/ Ring0 Rootkit exposed - okokok - Dec 4, 2011

I am sure most of you have seen the thread about the 3vBot mod with a ring0 rootkit added, coded by none other than Element Products.

I thought it was pretty funny how their rootkit was only functional on 32bit XP systems, and decided to investigate.

Turns out the coder is not even a coder, and the most likely situation here is that he copy pasted some public ring0 rootkit (Agony, DMP, etc...) in the bot, OR he is using the public ring3 rootkit (n00bkit) and saying it is ring0.

What's even funnier is that he actually created a thread about n00bkit a short while ago, and him and kill4joy were freaking out about how great it is. They probably thought its so good they can probably pass it off as some boss as fuck ring0 rootkit, just look at the thread and look how excited they are lol.

Someone that excited about a 4 year old public ring3 rootkit is able to code a ring0 rootkit?

Good one.

Either way, the conversation log and the picture should suffice to prove his idiocy.

He went offline after I said I would tell him the errors, lol.


 


[img]http://img195.imageshack.us/img195/4359/elementsb.jpg[/img]


 

Pastie of the broken code :
Spoiler (Click to View)


Pastie of the conversation :
Spoiler (Click to View)

okokok


* - biasa199 - Dec 4, 2011

lol. Nice one. Good job. Your first post, and you already are exploiting people for the faggots they are. Kudos to you.


* - Alex™ - Dec 4, 2011

(Dec 4, 2011 02:37 PM)biasa199 Wrote:  lol. Nice one. Good job. Your first post, and you already are exploiting people for the faggots they are. Kudos to you.

or maybe you know, he has a second account?


* - biasa199 - Dec 4, 2011

(Dec 4, 2011 02:38 PM)Alex™ Wrote:  or maybe you know, he has a second account?

That too. lol. I wouldn't be surprised.


* - Ludakrishna - Dec 4, 2011

witch/hctiw you know shit about coding. i wouldn't be surprised if your autumn bot contains n00bkit (since the raw code is very similar...). you still mad that masterjippo SE'd you out of all your money? 😏


* - Gone With The Wind - Dec 4, 2011

User was just mad. I did not go in depth about all his errors because it was moron code.He was mad because " masterjippo SE'd you out of all your money " and sold the source to me. Also as a note the rootkit does work , on xp 32bit systems.Spent about an hour speaking to him and all he did was attempt to get his code fixed. I have shown proof that it is ring0 rootkit in the sales thread.


* - Ludakrishna - Dec 4, 2011

(Dec 4, 2011 03:07 PM)Element Products Wrote:  User was just mad. I did not go in depth about all his errors because it was moron code.He was mad because " masterjippo SE'd you out of all your money " and sold the source to me. Also as a note the rootkit does work , on xp 32bit systems.Spent about an hour speaking to him and all he did was attempt to get his code fixed. I have shown proof that it is ring0 rootkit in the sales thread.

uhh, no you didn't. you showed a pic of a badly hidden process. 🤦‍♂


* - Orgy - Dec 4, 2011

OP is right. Good job OP. Expose the stupid fuck


* - Lith - Dec 4, 2011

(Dec 4, 2011 03:07 PM)Element Products Wrote:  User was just mad. I did not go in depth about all his errors because it was moron code.He was mad because " masterjippo SE'd you out of all your money " and sold the source to me. Also as a note the rootkit does work , on xp 32bit systems.Spent about an hour speaking to him and all he did was attempt to get his code fixed. I have shown proof that it is ring0 rootkit in the sales thread.

User is just stupid because he doesn't know the actual errors and pulls an Ethereal.


* - ASM - Dec 4, 2011

Interesting. I am going to keep an eye on this thread.


* - abcderek - Dec 4, 2011

(Dec 4, 2011 03:16 PM)Orgy Wrote:  OP is right. Good job OP. Expose the stupid fuck

Orgy I love seeing you post hurtful things in threads! It always brightens my day to expose the liars and your criticism is always negative and straight to the point <3 😝


* - VB.netRing0Rootkits - Dec 4, 2011

(Dec 4, 2011 02:35 PM)witchitized Wrote:  I am sure most of you have seen the thread about the 3vBot mod with a ring0 rootkit added, coded by none other than Element Products.

I thought it was pretty funny how their rootkit was only functional on 32bit XP systems, and decided to investigate.

Turns out the coder is not even a coder, and the most likely situation here is that he copy pasted some public ring0 rootkit (Agony, DMP, etc...) in the bot, OR he is using the public ring3 rootkit (n00bkit) and saying it is ring0.

What's even funnier is that he actually created a thread about n00bkit a short while ago, and him and kill4joy were freaking out about how great it is. They probably thought its so good they can probably pass it off as some boss as fuck ring0 rootkit, just look at the thread and look how excited they are lol.

Someone that excited about a 4 year old public ring3 rootkit is able to code a ring0 rootkit?

Good one.

Either way, the conversation log and the picture should suffice to prove his idiocy.

He went offline after I said I would tell him the errors, lol.

 

[img]http://img195.imageshack.us/img195/4359/elementsb.jpg[/img]

 

Pastie of the broken code :
Spoiler (Click to View)

Pastie of the conversation :
Spoiler (Click to View)

okokok

Char * is 4bytes not 8 yo.
But yeah the element kid can't code.