Hack Forums
[Advice Needed] FhotoLocker || HTTP Panel || Statistics - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Marketplace (https://hackforums.net/forumdisplay.php?fid=105)
+--- Forum: Bazaar (https://hackforums.net/forumdisplay.php?fid=450)
+---- Forum: Marketplace Discussions (https://hackforums.net/forumdisplay.php?fid=163)
+---- Thread: [Advice Needed] FhotoLocker || HTTP Panel || Statistics (/showthread.php?tid=4003504)

Pages: Pages 1 2 3

FhotoLocker || HTTP Panel || Statistics - Fhoto. - Jan 17, 2014

I've been wanting to code one of these for a while, now. So, I thought why not.

Name: FhotoLocker

Coded in: C# & PHP

Features:
  • Completely locks the victim's screen

  • Persistance

  • HTTP Panel

  • Advanced Statistics

  • Password via panel

  • Server side

  • Anti-VM

  • Anti-Sandbox

  • Mutex

  • Kills common proccesses

  • Botkiller



That's basically just some of the features summed up, I'll continue to develop this thought the duration of this thread.

All feedback & suggestions are greatly appreciated.

Panel:
Spoiler (Click to View)

I'm thinking of $15, for lifetime inc unlimited re-builds. Sounds fair?

* - CSGO - Jan 17, 2014

Vouch for Fhoto! This is a very HQ product and works 100%. Thank you!

* - kingroot - Jan 17, 2014

Code
Completely locks the victim's screen
Persistance
HTTP Panel
Advanced Statistics
Password via panel
Server side
Anti-VM
Anti-Sandbox
Mutex
Kills common proccesses
Botkiller

How exactly does 'anti-vm & anti-sandbox' work? SandBox works at a kernel level, i don't see you being able to bypass this in .NET
How does one exactly bypass a 'VM'?

For botkiller i'm assuming you're looking at modules that were mapped using virtualqueryex and comparing the types.

Persistence? How does this work, do you inject code into other processes that monitor your main module?

be prepared to explain this shit if you want people to believe

* - SpaceKase - Jan 18, 2014

(Jan 17, 2014 11:25 PM)kingroot Wrote:  
Code
Completely locks the victim's screen
Persistance
HTTP Panel
Advanced Statistics
Password via panel
Server side
Anti-VM
Anti-Sandbox
Mutex
Kills common proccesses
Botkiller

How exactly does 'anti-vm & anti-sandbox' work? SandBox works at a kernel level, i don't see you being able to bypass this in .NET
How does one exactly bypass a 'VM'?

For botkiller i'm assuming you're looking at modules that were mapped using virtualqueryex and comparing the types.

Persistence? How does this work, do you inject code into other processes that monitor your main module?

be prepared to explain this shit if you want people to believe

Preach, fucking preachhhh
We need more people explaining HOW things work on this forum.

Product looks great, I'll definitely be a customer once I see it's got some reviews!

* - Caillou - Jan 18, 2014

What must they do to remove the locker?

* - Moji - Jan 18, 2014

Vouch for Fhoto, product looks great.

GLWS mate!

* - m4dh4ck3r - Jan 18, 2014

(Jan 18, 2014 03:10 AM)Caillou Wrote:  What must they do to remove the locker?

The victims probably will be asked to complete a survey.

* - Tastylicous - Jan 18, 2014

(Jan 17, 2014 11:25 PM)kingroot Wrote:  How exactly does 'anti-vm & anti-sandbox' work? SandBox works at a kernel level, i don't see you being able to bypass this in .NET
How does one exactly bypass a 'VM'?

My guess: Since this is C# and he did not mention any hooking (Hue) or whatsoever, it is checking if these processes are running and tries kills them.

(Jan 17, 2014 11:25 PM)kingroot Wrote:  For botkiller i'm assuming you're looking at modules that were mapped using virtualqueryex and comparing the types.

My guess: Deletes every .exe-File in AppData and other common folders where malware is usually dropped.

(Jan 17, 2014 11:25 PM)kingroot Wrote:  Persistence? How does this work, do you inject code into other processes that monitor your main module?

My guess: VBS-File checking if file is existent and running, if not run it again.

* - Bat™ - Jan 18, 2014

(Jan 18, 2014 04:27 AM)Tastylicous Wrote:  My guess: Since this is C# and he did not mention any hooking (Hue) or whatsoever, it is checking if these processes are running and tries kills them.

My guess: Deletes every .exe-File in AppData and other common folders where malware is usually dropped.

My guess: VBS-File checking if file is existent and running, if not run it again.

Did Fhoto 'personally' PM you to answer these ? 🎉🤗

😝

Gl

* - Tastylicous - Jan 18, 2014

(Jan 18, 2014 05:40 AM)Bat™ Wrote:  Did Fhoto 'personally' PM you to answer these ? 🎉🤗

😝

Gl

No, as I said these are my guesses since that is what is common for HF-Malware.

* - Fhoto. - Jan 18, 2014

(Jan 18, 2014 05:40 AM)Bat™ Wrote:  Did Fhoto 'personally' PM you to answer these ? 🎉🤗

😝

Gl

Lol, what?

I don't even know him.

Stop bashing this thread.

* - Tastylicous - Jan 18, 2014

(Jan 18, 2014 05:49 AM)Fhoto. Wrote:  Stop bashing this thread.

Didn't mean to bash anything ❓
Expect feedback if you post a thread and don't be mad if people post their thoughts!

* - Fhoto. - Jan 18, 2014

(Jan 18, 2014 05:50 AM)Tastylicous Wrote:  Didn't mean to bash anything ❓
Expect feedback if you post a thread and don't be mad if people post their thoughts!

I was talking to Bat, not you, aha.

I forgot to say thank-you for your feedback.

Cheers.

* - Tastylicous - Jan 18, 2014

(Jan 18, 2014 05:52 AM)Fhoto. Wrote:  I was talking to Bat, not you, aha.

I forgot to say thank-you for your feedback.

Cheers.

Oh 😝 Well, alright then I wish you GLWS 🤝

* - Bat™ - Jan 18, 2014

(Jan 18, 2014 05:49 AM)Fhoto. Wrote:  Lol, what?

I don't even know him.

Stop bashing this thread.

Lol, I'm not.

Guess I was wrong. :P

Ill just quote this line from Tasty's post 😝

"Expect feedback if you post a thread and don't be mad if people post their thoughts!"

Anyways GLWS :P