+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Botnets and Botting (https://hackforums.net/forumdisplay.php?fid=92)
+---- Thread: Bind and update stub? (/showthread.php?tid=3854477)
Bind and update stub? - thinkx - Nov 9, 2013
Hello HF-Community
I'm pretty new to the world of hacking. I already managed to figure out how RATs and Crypters work, but now I just have a .exe that opens... and nothing pops up on the screen, even if I bind a .txt or .mp3 file with WTFProtector or ByteCrypter, it's still a "empty" .exe.
So I ask you, how to bind your bot to a application or any file, set it to that extension, and it opens that file like a normal program or music file but the bot hiddenly too?
Another question, how to update your stub/bot so the slaves will not recognize the bot with further updates of their AV?
Thanks.
(I asked that question two times on the Beginners Forum, didn't got any answer...)
* - xanphirex - Nov 9, 2013
look you cant just bind a exe to any file back on window's XP sp2 i believe there was some exploit with jpeg but it's been patch long ago. The most recent exploit's are using .pdf files .doc files and others these have current exploit's that will allow you to launch code but binding to mp3 and image files i have not seen in some time now if really ever,
if it was that easy to just infect image files and audio files the whole world would be infected
* - thinkx - Nov 9, 2013
Thanks for your answer xanphirex, heard about that MS Word exploit thing. It was foolish to think I could just bind it to any file, but I think there's still a way to bind any file to a .exe (so the .exe installs your bot, and the file I bound opens too) and then spoof the extension, correct me if I'm wrong?
Could someone help me how to do that, or give me link to a TUT? I'd be really greatful.
How about my second question, does anybody know how to do that? Update the Anti-AV thing on a bot, or re-encrypt the whole thing?
Thanks.