+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Botnets and Botting (https://hackforums.net/forumdisplay.php?fid=92)
+---- Thread: FormBook [Formgrabber] reviewer wanted (/showthread.php?tid=5167561)
FormBook [Formgrabber] reviewer wanted - ng-Coder - Feb 12, 2016
![[Image: VtPd56Z.png]](https://i.imgur.com/VtPd56Z.png)
FormBook is advance Formgrabber I'm bring to this forum.
- Coded in C/ASM
- Grab from Iexplore, Firefox and Chrome.
- Support HTTP, HTTPS, SPDY and HTTP/2
- Bin is Balloon Executable. (MPIE + MEE)
I think this is first time any public product will be balloon.
- Ring3 Kit (Lagos Island method)
Now I'm looking for one(1) experienced member that will like to review the product, test it for like 2 days and create report thread for his/her review.
If you're interested plz apply.
Application requirements:
Positive Reputation
Experience with Formgrabbers
Member can provide domain and hosting for his/her test.
Questions are welcome if you guys have any, thanks.
* - ng-Coder - Feb 12, 2016
(Feb 12, 2016 05:10 AM)The Watcher Wrote: FormBook - The Ebook that's actually a Form Grabber! I like it. Not sure if it will be allowed to be sold here though? l0l
How much were you thinking about selling this for? I'd be interested in taking a read.
It's not Ebook :), why will it not allow? many Formgrabber are sold here, I appreciate your interest but I feel you're not having experience with formgrabber 😅
* - FSBN - Feb 12, 2016
I would like to get a free copy for a review. Let me know.
* - ng-Coder - Feb 12, 2016
(Feb 12, 2016 05:29 AM)The Watcher Wrote: For fuck sake I want to read it, how much? 😵
It's not a book pal...
* - bluntly - Feb 12, 2016
I might seem unexperienced, but I think I know pretty much about formgrabbers. What method do you use? Do you create an Add-On? Or do you simply hook your app. to certain pointers of the browser ? I'm really interested to see how you made it work and see it in action : )
* - ng-Coder - Feb 12, 2016
(Feb 12, 2016 05:37 AM)bluntly Wrote: I might seem unexperienced, but I think I know pretty much about formgrabbers. What method do you use? Do you create an Add-On? Or do you simply hook your app. to certain pointers of the browser ? I'm really interested to see how you made it work and see it in action : )
No Add-On, FormBook first Injects itself into windows trusted process and inject the browsers from there, full PE injection.
* - bluntly - Feb 12, 2016
(Feb 12, 2016 05:49 AM)ng-Coder Wrote: No Add-On, FormBook first Injects itself into windows trusted process and inject the browsers from there, full PE injection.
How long have you been coding?
* - Shoe - Feb 12, 2016
FormGrabbers aren't allowed, I do believe. I could be wrong but last time I heard they aren't allowed.
* - ng-Coder - Feb 12, 2016
(Feb 12, 2016 06:02 AM)bluntly Wrote: How long have you been coding?
🙂 Does that matter? Well 12 yrs now.
(Feb 12, 2016 06:06 AM)Shoe Wrote: FormGrabbers aren't allowed, I do believe. I could be wrong but last time I heard they aren't allowed.We have many Formgrabber out here, they are dead because of lack of update.
* - bluntly - Feb 12, 2016
Just wondered how much experience is put into this FormGrabber :D
* - Shoe - Feb 12, 2016
(Feb 12, 2016 06:15 AM)ng-Coder Wrote: We have many Formgrabber out here, they are dead because of lack of update.
That doesn't matter, how dead they are. What matters is whether or not HF allows formgrabbers to be discussed.
* - Amerikanski - Feb 12, 2016
What do you do when chrome updates the functions to be hooked. Can you hook x64 browsers?
Also what is the lagos method? Can I try your software?
* - ng-Coder - Feb 12, 2016
(Feb 12, 2016 06:39 AM)Shoe Wrote: That doesn't matter, how dead they are. What matters is whether or not HF allows formgrabbers to be discussed.
Yes it's allowed. formgrabbers are sold here, this is not bot and it has no plugin, external extension nor webinject it's mere browser-keylogger. Plus you're not allow to target unauthorised computer, I never advice you to violate your country's law...
(Feb 12, 2016 06:45 AM)Amerikanski Wrote: What do you do when chrome updates the functions to be hooked. Can you hook x64 browsers?
Also what is the lagos method? Can I try your software?
If Chrome update and FormBook hook is patched, all customer will have update for free in less than 24hrs.
X64 browser works with only iexplore, there is no x64 Firefox, I'll add x64 Chrome-Beta if I see it ever getting popular.
Lagos Island is a neat and yet very effective userland rootkit You can learn more about it in some underground forum you can try to search.
* - Green Goblin - Feb 12, 2016
this is pretty cool, if its legit lmao
* - NTTITONV326 - Feb 12, 2016
What about the quic protocol? How are you bypassing Spdy?