Hack Forums
Spoov v2: HF's #1 free shortcut builder - embed scripts, bypass SmartScreen & more - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Hacking Tools and Programs (https://hackforums.net/forumdisplay.php?fid=10)
+---- Thread: Spoov v2: HF's #1 free shortcut builder - embed scripts, bypass SmartScreen & more (/showthread.php?tid=5326530)

Pages: Pages 1 2 3 4 5

Spoov v2: HF's #1 free shortcut builder - embed scripts, bypass SmartScreen & more - Vuln - Jul 4, 2016

This project is no longer maintained - download link removed

Spoov is a program that can build shell links (Windows file shortcuts) with embedded scripts. It offers some features that are not available through the "Create Shortcut Wizard".

[Image: JjVbHws.png]

A default template in action (FUD download & execute)
Spoiler (Click to View)

Custom template creator
Spoiler (Click to View)

Features
- 2 default templates: download & execute + execute local file
- Create custom templates
- Bypass SmartScreen
- Set a custom shell mouse hover tooltip
- Hide command-line arguments
- File extension spoofer
- Update checker (notification only, no automatic downloading)

Execute local file
- Works on all Windows versions.
- No errors if the file doesn't exist
- Copies target file into Windows Temp folder before executing
- Can execute any file type.
- Executable file types can have non-executable file extensions.

Download & Execute
- Works on Windows 7/8/8.1/10, and also on Windows XP if the SP 2 Support Tools have been installed.
- Can download & execute any file type.
- Executable file types can have non-executable file extensions.
- If no internet connection is available or another problem occurs, it will keep silently retrying for the next 14 days.

Default template drawbacks
- If someone removes the shortcut's read-only file attribute, it will no longer work. This also means that it would be recommended to archive the shortcut prior to uploading/sharing it.
- When using the download&execute template, a command prompt window will briefly flash.

Builder dependencies
.NET Framework 4.0

* - danielribero07 - Jul 7, 2016

heard mediafire distributes isn't it a bad idea to upload it there? just curious, but thanks for the write up and content. looks good i'll check it out

* - Vuln - Jul 7, 2016

(Jul 7, 2016 01:21 AM)danielribero07 Wrote:  heard mediafire distributes isn't it a bad idea to upload it there? just curious, but thanks for the write up and content. looks good i'll check it out

MediaFire does indeed scan and distribute all files, but I don't mind, it's only the builder, and it's not going to affect the generated shortcuts. But I don't care about the shortcuts being distributed either, their simplicity makes detections unlikely.

The generated downloaders I scanned on VT a few years ago are still FUD today. Well, except for 1 weird TrendMicro heuristic detection, but I could probably get rid of that by contacting TrendMicro. Also, I'm guessing that it's only detected by VT's version of TrendMicro, and not even by the public commercial and free version. But I need someone to confirm that.

So, have you tried it yet? Any remarks or suggestions?

I'm thinking about doing a project overhaul, so that users can also choose to embed their own batch scripts. And I also want to get rid of the current shitty GUI.

* - Will Grigg - Jul 7, 2016

Can you send this to me would love to try it out.

* - Vuln - Jul 7, 2016

(Jul 7, 2016 05:42 AM)Will Grigg Wrote:  Can you send this to me would love to try it out.

There's a download link at the bottom of the OP. Big yellow text.

* - FRIΞDBAO™ - Jul 7, 2016

There are alot of shorcut builder and compiler and this one works the best thx!

* - Welshdroo - Jul 7, 2016

Looks good OP ... Thank you , Going try it out :D

(Jul 7, 2016 02:18 PM)100thieves Wrote:  Can you send this to me would love to try it out.

Link in Post, Didn't you not see it?

(Jul 4, 2016 07:26 AM)Jailbyte Wrote:  Download link
http://www.mediafire.com/download/gbc4xxc8fg2653z/Spoov_v1.0.zip


* - RobinVJ - Jul 7, 2016

Pm me with the details OP. Thanks btw

* - Vuln - Jul 7, 2016

In a few days I will be releasing a new version. It will have more options and a pretty GUI. If anyone wants me to add a specific feature, please do let me know.

(Jul 7, 2016 09:32 AM)FireGaming123 Wrote:  There are alot of shorcut builder and compiler and this one works the best thx!

Thank you, although I've only seen 1 other shortcut builder on HF, and it was meh.

(Jul 7, 2016 02:44 PM)Welshdroo Wrote:  Looks good OP ... Thank you , Going try it out :D

Let me know how it goes!

(Jul 7, 2016 02:44 PM)Welshdroo Wrote:  Link in Post, Didn't you not see it?

I guess the big yellow text wasn't big and yellow enough...

* - FreginFantasmic - Jul 9, 2016

This is very good tool, will be trying it out soon.

* - BluWave - Jul 10, 2016

Looks good. Keep up the hard work.

* - Kisame - Jul 10, 2016

AVG detected it as malware..?

* - Vuln - Jul 10, 2016

(Jul 10, 2016 04:30 AM)BluWave Wrote:  Looks good. Keep up the hard work.

Thank you, I will.

(Jul 10, 2016 07:19 AM)marcova99 Wrote:  AVG detected it as malware..?

I really need more info. What kind of detection was it? And what was detected? The builder, the generated shortcuts, or a file with a spoofed extension? And was it a scantime or runtime detection?

I just generated a shortcut downloader, and it's still (scantime) undetected by AVG. Maybe you entered a detected string, like a flagged domain or file name. Or perhaps you used a detected icon.

If you can't figure it out, please post a screenshot of your current input and settings.

* - Elitas - Jul 10, 2016

This tool looks really cool. 🤝

* - Don Genovese - Jul 14, 2016

Looks very nice. Will be trying this out soon. Good luck with future development.