+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [Java] Check a source for backdoor (/showthread.php?tid=5164484)
Check a source for backdoor - Josh - Feb 9, 2016
Hi all,
Could anyone check the source of something for a backdoor for me please? It is obfuscated and in Java 8. PM me for the download (don't want to publicly link something potentially backdoored)
Thanks to anyone who can.
* - hintss - Feb 10, 2016
How big is this thing that you want checked?
* - Swish - Feb 10, 2016
Wondering the same as the above question.
* - Josh - Feb 11, 2016
(Feb 10, 2016 04:24 AM)hintss Wrote: How big is this thing that you want checked?
(Feb 10, 2016 05:31 AM)Swish Wrote: Wondering the same as the above question.
It's just over 7MB
* - Key Punch - Feb 11, 2016
(Feb 11, 2016 02:42 AM)Josh Wrote: It's just over 7MB
I can do 2 things for you..
1. Run it through my local cuckoo sandbox on a one of the headless vm's which will suport .jar.
2. Manually look through the java for anything..
I can do either one or 1 and 2..
PM me if you still are in need of said check.
* - Sogomn - Feb 11, 2016
Just use a decompiler and look for classes that might be suspicious.
* - Josh - Feb 11, 2016
(Feb 11, 2016 04:37 AM)Sogomn Wrote: Just use a decompiler and look for classes that might be suspicious.
That would require me to have more than a basic understanding of Java. It's heavily obfuscated which makes it even harder for me
* - Sogomn - Feb 11, 2016
(Feb 11, 2016 04:46 AM)Josh Wrote: That would require me to have more than a basic understanding of Java. It's heavily obfuscated which makes it even harder for me
Copy to Eclipse -> Control + Shift + F -> Formatted.
* - Folks - Feb 11, 2016
(Feb 11, 2016 05:01 AM)Sogomn Wrote: Copy to Eclipse -> Control + Shift + F -> Formatted.
Obfuscation doesn't just rearrange the code so formatting it correctly won't help, also he said he doesn't have more than a basic understand of java.
* - CodeLeaks™ - Feb 11, 2016
(Feb 11, 2016 04:37 AM)Sogomn Wrote: Just use a decompiler and look for classes that might be suspicious.
On 7mb of code? Yeah, good luck and have fun with that.
Surely I don't have a better answer because I'd suggest the same thing, but it's still going to suck. And since it's obfuscated, it's going to be even worse.