+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Botnets and Botting (https://hackforums.net/forumdisplay.php?fid=92)
+---- Thread: Exploit Packs (/showthread.php?tid=4676300)
Pages: Pages
1
2
Exploit Packs - lowcodez - Feb 8, 2015
Hey, i have a few exploit pack related questions. i hope this is the right section for them.
I am new to exploit packs and stuff so i am curious what types of exploit packs are there? What's the usual infect rate and price? And do i need more than just the exploit pack and traffic?
I would be happy if someone experienced could take some minutes and answer these questions.
Lowcodez
* - Raoul Duke - Feb 8, 2015
What you need is:
-a bot
-a crypter for your bot
-exploit pack
-traffic
For the exploit pack I suggest you to take a look at my signature.
* - iamskid - Feb 8, 2015
You also need a loader that is very small in size ~40 KB max. ~40 KB max crypted i mean. So shit like LoadHTTP will fuck your execution rate. Anything over 100 KB is not worth using on exploit kit.
* - .Data_ - Feb 8, 2015
A lot of loaders offer the option for memory malware now (good ones, not shit like rig). You can get a good dll downloader that's small and mobile.
* - Raoul Duke - Feb 8, 2015
(Feb 8, 2015 10:04 AM).Data_ Wrote: A lot of loaders offer the option for memory malware now (good ones, not shit like rig). You can get a good dll downloader that's small and mobile.
Ok so you don't know the difference between a loader and an exploit kit...
* - Blatngu® - Feb 8, 2015
(Feb 8, 2015 09:04 AM)iamskid Wrote: You also need a loader that is very small in size ~40 KB max. ~40 KB max crypted i mean. So shit like LoadHTTP will fuck your execution rate. Anything over 100 KB is not worth using on exploit kit.
Erhm , sorry to contradict you , but loadhttp has a stub of 32kb 🤝 , of course when it will be crypted his stub size will grow
* - immortalwon - Feb 8, 2015
Most Exploit Kits do not show the real LOADED rate. The real loaded rate of exploited machines depends on your crypter. FUD.PE has a total of %10 percent rate when used an exploit kit. For example lets say you have 5k loaded bots (means exploited), only 10 percent of those bots will be loaded on your net. Most decent crypts have a 40 % rate. Do the math.
* - .Data_ - Feb 8, 2015
(Feb 8, 2015 10:12 AM)Raoul Duke Wrote: Ok so you don't know the difference between a loader and an exploit kit...
I woke up retard, I know far more than you.
* - lowcodez - Feb 8, 2015
thanks guys for the information. Its a big help
* - SIM-595622 - Feb 8, 2015
(Feb 8, 2015 10:49 AM)immortalwon Wrote: ......
Thats stupid. Either your crypt work or it doesnt.
The reason youre getting low rate to exe is shit traffic.
Then theres .net, file size and what not but the main reason is shit traffic.
* - iamskid - Feb 8, 2015
(Feb 8, 2015 10:49 AM)immortalwon Wrote: Most Exploit Kits do not show the real LOADED rate. The real loaded rate of exploited machines depends on your crypter. FUD.PE has a total of %10 percent rate when used an exploit kit. For example lets say you have 5k loaded bots (means exploited), only 10 percent of those bots will be loaded on your net. Most decent crypts have a 40 % rate. Do the math.
A: You use bullshit malware thats hips detected
B: You use bullshit crypter thats hips detected
Which is it? Or maybe its both?
40% exec rate is fucking pathetic.
(Feb 8, 2015 10:35 AM)Blatngu Wrote: Erhm , sorry to contradict you , but loadhttp has a stub of 32kb 🤝 , of course when it will be crypted his stub size will grow
So? 32 KB + shitty HF crypter = > 100 KB.
Crypt LoadHTTP with an AutoIT crypter LMFAO!
* - theranger - Feb 8, 2015
(Feb 8, 2015 12:41 PM)Havamal2 Wrote: Thats stupid. Either your crypt work or it doesnt.
The reason youre getting low rate to exe is shit traffic.
Then theres .net, file size and what not but the main reason is shit traffic.
How would you define "shit traffic"? How does it contrast to "good" traffic?
* - HIGH PAID FELLA - Feb 8, 2015
(Feb 8, 2015 12:41 PM)Havamal2 Wrote: Thats stupid. Either your crypt work or it doesnt.
The reason youre getting low rate to exe is shit traffic.
Then theres .net, file size and what not but the main reason is shit traffic.
Dude, it's the binary that matters and the crypter used.
The traffic doesn't fucking matter unless it's botted shit.
* - Rhodos - Feb 8, 2015
Sorry for gettin into this thread, so 40% is pathetic, what is a decent %? And how can u achieve it? I mean, u were talking generally, good traffic and good crypter? Like what?
* - Snotaapii - Feb 8, 2015
We'll it all depends on:
Traffic (What country they are from.)
Exploit pack (Is it detected by some AVs?)
Exploit pack shellcode, rotation etc etc
Your bot size, is your bot detected by some AVs?
You'll need to do alot of testings to find out the execution/infection rate.