.NET My Builder & Stub are not detected but the Output (keylogger) is detected

[.NET] My Builder & Stub are not detected but the Output (keylogger) is detected - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] My Builder & Stub are not detected but the Output (keylogger) is detected (/showthread.php?tid=461259)

Pages: Pages 1 2

My Builder & Stub are not detected but the Output (keylogger) is detected - µnKn0wn_H4CK3r - Jun 5, 2010

Hi!

I try to finish (FUD) my keylogger but I have one problem:
-Builder undetected (by Avira Antivir)
-Stub undetected (by Avira Antivir)
-Output (keylogger generated) detected (by Avira Antivir)

Avira find 4 Trojan/Dropper. I have got to remove 1 detection, now Avira find only 3 Trojan/Dropper (I have changed the assembly to HijackThis assembly, add fake code).

-What's the problem?
-What I have to do to FUD the output?

Thanks in advance!

* - GoldStar - Jun 5, 2010

You can use the search first. 5 threads about this where posted before.
https://hackforums.net/showthread.php?tid=431874

* - µnKn0wn_H4CK3r - Jun 5, 2010

(Jun 5, 2010 05:39 AM)Miharbi-DoNo Wrote: You can use the search first. 5 threads about this where posted before.
https://hackforums.net/showthread.php?tid=431874

Already done and it stays 4 Tr/Dropper.Gen 😑 .. ONLY this shit of Avira Antivir detects my output and no one detect my stub (junk code or not, bad/good FileSplit, bad/good solution name, bad/good icon).

But, what is EOF (End Of File) precisely?

Code 
FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared)

text1 = Space(LOF(1))

 FileGet(1, text1)

FileClose(1)

options = Split(text1, FileSplit)

This is not EOF?

* - GoldStar - Jun 5, 2010

(Jun 5, 2010 08:07 AM)BabyHack Wrote: Already done

...

But, what is EOF (End Of File) precisely?

Code
FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared) text1 = Space(LOF(1)) FileGet(1, text1) FileClose(1) options = Split(text1, FileSplit)
This is not EOF?

Means its not already done. read it all, you will find alternatives of EOF (Number 5).

* - Threadlocks - Jun 5, 2010

but it still need at end how its done help

* - xSilent - Jun 5, 2010

PM me and I'll show you how to use deaths resource API

* - Beck - Jun 5, 2010

(Jun 5, 2010 05:32 AM)BabyHack Wrote: Hi!

I try to finish (FUD) my keylogger but I have one problem:
-Builder undetected (by Avira Antivir)
-Stub undetected (by Avira Antivir)
-Output (keylogger generated) detected (by Avira Antivir)

Avira find 4 Trojan/Dropper. I have got to remove 1 detection, now Avira find only 3 Trojan/Dropper (I have changed the assembly to HijackThis assembly, add fake code).

-What's the problem?
-What I have to do to FUD the output?

Thanks in advance!

Check out Deathaders' threads. They should help a bunch.

* - Threadlocks - Jun 5, 2010

hey can i use code dom insted of eof

* - pr0t0typ3 - Jun 5, 2010

Yes but comedom compiles a completly new file while eof just writes to an already compiled file

* - µnKn0wn_H4CK3r - Jun 5, 2010

I think this is a good solution but I don't know how to precisely do to write the resources...

If anybody can help me... Because I tried these solutions but they don't work:

Code 
'Imports System.Text

'Imports Builder.ResourceWriter

WriteResource("OutPut.exe", Encoding.Default.GetBytes("Test" & FileSplit & "Test2"))

Code 
FileOpen(1, "OutPut.exe", OpenMode.Binary, OpenAccess.ReadWrite, OpenShare.Default)

FilePut(1, "Test String 1" & FileSplit & "Test String 2")

FileClose(1)

How use the module please 😭?

* - Threadlocks - Jun 5, 2010

if we pass eof as string to stub then how do we appened it

* - µnKn0wn_H4CK3r - Jun 5, 2010

(Jun 5, 2010 06:33 PM)zorataa Wrote: if we pass eof as string to stub then how do we appened it

I don't really understand what you said (I'm french)...

But I'd really like to know how to use this module 😭 !

The WriteResource function return a boolean, not a string or else (bytes...). And when I try any methods, it doesn't works (not write resources in the output.exe).

* - dayan - Jun 6, 2010

Bump this up! I also hav the same prob with him

* - oRc - Jun 6, 2010

Make a string:

Code 
dim buildstring as string = (filesplit & options1 & filesplit & options2)

Convert to Bytes:

Code 
dim getbytes as byte() = encoding.default.getbytes(buildstring)

Writhing to resources:

Code 
writeresource(application.startuppath & "\server.exe", getbytes)

In your stub:

Code 
dim getbytes as byte() = readresource(application.executablepath())

dim getstring As string = encoding.default.getstring(getbytes)

Dim options() = Split(getstring, filesplit)

  options1 = options(1)

  options2 = options(2)

* - µnKn0wn_H4CK3r - Jun 6, 2010

(Jun 6, 2010 07:02 AM)oRc Wrote: Make a string:

Code
dim buildstring as string = (filesplit & options1 & filesplit & options2)
Convert to Bytes:

Code
dim getbytes as byte() = encoding.default.getbytes(buildstring)
Writhing to resources:

Code
writeresource(application.startuppath & "\server.exe", getbytes)
In your stub:

Code
dim getbytes as byte() = readresource(application.executablepath()) dim getstring As string = encoding.default.getstring(getbytes) Dim options() = Split(getstring, filesplit) options1 = options(1) options2 = options(2)

I don't understand...

Code 
FileOpen(1, Application.StartupPath & "\Stub.exe", OpenMode.Binary, OpenAccess.Read, OpenShare.Default)

Stub = Space(LOF(1))

FileGet(1, Stub)

FileClose(1)

Dim BuildString As String = Stub & FileSplit & TextBox1.Text & FileSplit & etc

Dim BuildBytes As Byte() = Encoding.Default.GetBytes(BuildString)

FileOpen(1, Application.StartupPath & "\" & "OutPut.exe", OpenMode.Binary, OpenAccess.ReadWrite, OpenShare.Default)

WriteResource("OutPut.exe", BuildBytes)

FileClose(1)

It doesn't works !