+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] [VB .NET] Write/Read Resource! (Bypass Avira) - Modded (/showthread.php?tid=551942)
[VB .NET] Write/Read Resource! (Bypass Avira) - Modded - pr3fix - Jul 19, 2010
Write/Read Resource! (Bypass Avira)
Hello everyone. Well, recently some guy asked me to make an example on this how to use. So I made it, plus I modded it a bit so you can declare custom resource's name. Anyways, hope you'll like it and please post or send me PM if you have any problem. Also I want to say thanks & to regard Deathader, Aeonhack & Fenimin!
This method will easily bypass Avira. Leave a comment and rate thread. Thanks & Good luck!
Usage:
[img]http://ploader.net/files/44ad80e04617412d0bf82785eda7e6a4.gif[/img]
[img]http://ploader.net/files/44ad80e04617412d0bf82785eda7e6a4.gif[/img]
Download:
Code
http://uppit.com/5y8cw28s1cmh/Code.rarBuilder Password:
Spoiler (Click to View)
Stub Password:
Spoiler (Click to View)
Tip: To decrypt, you will have to use your brain. Not only copy/paste to decrypters. Best Regards!
- pr3fix
* - PAGMAN - Jul 19, 2010
Wow. Surprised no one has commented yet. Good job pr3fix. This may help get stubs FUD again once WriteResource is detected .
EDIT: I just decrypted the stub password. There is an error on the last decryption cycle of ATOM-128. I got all of the password except for two non-ascii characters at the end.
* - pr3fix - Jul 19, 2010
(Jul 19, 2010 01:14 AM)PAGMAN Wrote: Wow. Surprised no one has commented yet. Good job pr3fix. This may help get stubs FUD again once WriteResource is detected .
Ah, it will be FUD for long time.
EOF was FUD for years, I doubt this one wont be FUD that long if you use your imagination.
* - Exploitations - Jul 19, 2010
(Jul 19, 2010 01:14 AM)PAGMAN Wrote: Wow. Surprised no one has commented yet. Good job pr3fix. This may help get stubs FUD again once WriteResource is detected .
Thats cause it takes forever to decrypt this.
* - PAGMAN - Jul 19, 2010
(Jul 19, 2010 01:16 AM)Exploitations Wrote: Thats cause it takes forever to decrypt this.
True that. Did you successfully decrypt it? I got two non-ascii characters at the end of the password for the stub.
* - pr3fix - Jul 19, 2010
Guys I think I didn't wrote something right for stub's password, I'll post new one in 20 minutes. :/
* - Exploitations - Jul 19, 2010
(Jul 19, 2010 01:24 AM)PAGMAN Wrote: True that. Did you successfully decrypt it? I got two non-ascii characters at the end of the password for the stub.
yeah the pass doesn't work for the builder. Idk about the stub yet.
* - pr3fix - Jul 19, 2010
(Jul 19, 2010 01:35 AM)Exploitations Wrote: yeah the pass doesn't work for the builder. Idk about the stub yet.
Works perfect, I have just tested it.
* - CYSER - Jul 19, 2010
So old :(, thats not a thanks worth if you can't modify it your own u should leave it!
* - pr3fix - Jul 19, 2010
(Jul 19, 2010 02:00 AM)CYSER Wrote: So old :(, thats not a thanks worth if you can't modify it your own u should leave it!
Ehm what? What do you mean, it's not old? This is one of the latest methods in VB8. I can modify, and I have modified it already.
* - Numair - Jul 19, 2010
This is wonderful thanks pr3fix.
* - pr0t0typ3 - Jul 19, 2010
That looks quite nice.. I also did it a while ago and had some problems with the names....
Then I found out , that I need to use numbers for them
* - µnKn0wn_H4CK3r - Jul 19, 2010
Hi!
Hmm... I also got 2 non-ASCII characters for the stub password..
I use my brain but 😧 ...
* - 50GTB - Jul 19, 2010
man this is the easy think ever and their is people getting money to setup for them wtf..
* - Asus - Jul 19, 2010
How does this work? You attach the stub to the builder and change strings?