+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: DarkComet firewall bypass (/showthread.php?tid=3236048)
DarkComet firewall bypass - Klarion - Feb 5, 2013
I don't know what this really means. Can somebody explain?
Why should you untick this if you use a crypter? Is this similar to injection option in CyberGate? In Cybergate, if you inject into default browser for example, doesn't it make the server shut down if the browser isn't working?
* - Klarion - Feb 5, 2013
Spoiler (Click to View)
![[Image: CCve5uJ.jpg]](https://i.imgur.com/CCve5uJ.jpg)
do you see now?
* - Klarion - Feb 5, 2013
can my server be detected by victim's firewall if I turn off this option? Even if it's FUD?
* - Klarion - Feb 5, 2013
yeah, just wanted to make sure. And to figure out exactly what it means. Thanks for help.
* - ๖ۣۜÑåzgйŀ - Feb 5, 2013
The FWB will inject itself into explorer.exe making it look like a legit executable thus making it bypass firewalls such as comodo (since comodo trusts explorer.exe it will let it throught)
if this option is not activated the firewall will notify the user of a new connection on the internet (this only apply's to third party firewalls which moniter outbound connections)
* - Klarion - Feb 6, 2013
(Feb 5, 2013 11:42 PM)infamous hacker Wrote: The FWB will inject itself into explorer.exe making it look like a legit executable thus making it bypass firewalls such as comodo (since comodo trusts explorer.exe it will let it throught)
if this option is not activated the firewall will notify the user of a new connection on the internet (this only apply's to third party firewalls which moniter outbound connections)
but only if the server isn't FUD, right?
* - kambatta - Feb 6, 2013
That depends on the Firewall settings. If it is setup in interactive mode, i.e., to ask every time an EXE is attempting a connection, it will ask for user's permission. The user will then have to allow it and mark it as safe for any further connections without interference.
* - ๖ۣۜÑåzgйŀ - Feb 6, 2013
(Feb 6, 2013 10:57 AM)satryiasis19 Wrote: but only if the server isn't FUD, right?
NO
It does not matter if the server is undetectable
undetectable means no anti-virus can identify the executable because the code has never been seen before
its like introducing a new flu to a human body
the immune system must know how to fight the flu before they can destroy it
a firewall looks at the connections that applications makes and then tells you if you want to block or allow that connection
a firewall is there to detect connections and block ports
it does NOT scan anything
Reply - PwnedLevel1000 - Sep 19, 2019
How do you crack a firewall if u can give and info thx because to my info it looks impossible
(Feb 6, 2013 06:18 PM)๖ۣۜÑåzgйŀ Wrote: NOHuihgy Hghhhgghjii
It does not matter if the server is undetectable
undetectable means no anti-virus can identify the executable because the code has never been seen before
its like introducing a new flu to a human body
the immune system must know how to fight the flu before they can destroy it
a firewall looks at the connections that applications makes and then tells you if you want to block or allow that connection
a firewall is there to detect connections and block ports
it does NOT scan anything