Source code of an runtime scanner (avscan)

Source code of an runtime scanner (avscan) - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: Source code of an runtime scanner (avscan) (/showthread.php?tid=5819012)

Pages: Pages 1 2 3

Source code of an runtime scanner (avscan) - mehtevas - Apr 1, 2018

Hey guys,

i decided to release the source code of avscan an old project of mine,
The way the "detection" is detected is using screenshots, and a compare.

so if your program has a GUI it will get detected,

it uses Oracle Virtualbox for an easy API Commandline API,

if you have questions about the code just post them below.

This code is pretty ugly but it should give everyone who is wondering how a "shitty" runtime scanner works the basics to make there own.

download:

https://fuckav.xyz/runtime_scanner.zip

edit:

added sql file

i dont mind if you build your own runtime scanner out of this just leave credits.

for meedman / run4me:
Spoiler (Click to View)

RE: Source code of an runtime scanner (avscan) - Toxcique - Apr 1, 2018

Great share, daddy! <3333

RE: Source code of an runtime scanner (avscan) - darky666 - Apr 1, 2018

lol gg good share scg, incoming rips everywhere

RE: Source code of an runtime scanner (avscan) - TOM - Apr 1, 2018

Wonderful contribution towards this section thank u so much man

RE: Source code of an runtime scanner (avscan) - nekoochan - Apr 1, 2018

(Apr 1, 2018 07:22 AM)Tom Cruise Wrote: Wonderful contribution towards this section thank u so much man

flowscanner coming soon

RE: Source code of an runtime scanner (avscan) - josha28 - Apr 1, 2018

nice for sharing but how can i use it

RE: Source code of an runtime scanner (avscan) - jcbullet - Apr 1, 2018

From the looks of it you need to run this on a web server with access to your vms running the AV.

RE: Source code of an runtime scanner (avscan) - josha28 - Apr 1, 2018

ohh thnx got it not for me then

RE: Source code of an runtime scanner (avscan) - mehtevas - Apr 1, 2018

(Apr 1, 2018 03:25 PM)jcbullet Wrote: From the looks of it you need to run this on a web server with access to your vms running the AV.

you guessed correct, a windows server

RE: Source code of an runtime scanner (avscan) - Takehito Morokuzu - Apr 3, 2018

(Apr 1, 2018 03:53 PM)mehtevas Wrote: you guessed correct, a windows server

Is this easy to setup? I might give it a go myself.

RE: Source code of an runtime scanner (avscan) - mehtevas - Apr 3, 2018

(Apr 3, 2018 01:31 PM)therulerofall Wrote: Is this easy to setup? I might give it a go myself.

yes,

install virtualbox,
check config.php for the names of the vms ( just remove / add new ones )

make sure that the path is correct in engine.php to oracle.

RE: Source code of an runtime scanner (avscan) - G-protect - Apr 4, 2018

(Apr 3, 2018 01:32 PM)mehtevas Wrote: yes,

install virtualbox,
check config.php for the names of the vms ( just remove / add new ones )

make sure that the path is correct in engine.php to oracle.

1) Please what is the on page (Your key: ?)

2) do we need to install all the Avs list on config.php

$av_list = array("avast"=> "waiting","eset" => "waiting","kaspersky" => "waiting","malwarebytes" => "waiting","360totalsecurity" => "waiting","norton" => "waiting","avira" => "waiting","comodo" => "waiting","bitdefender" => "waiting","mcafee" => "waiting","sophos" => "waiting");

RE: Source code of an runtime scanner (avscan) - x222 - Apr 4, 2018

(Apr 1, 2018 07:49 AM)nekoochan Wrote: flowscanner coming soon

AAHAHAHHAHAAHAAHAHAHAHA

RE: Source code of an runtime scanner (avscan) - mehtevas - Apr 4, 2018

(Apr 4, 2018 07:50 AM)G-protect Wrote: 1) Please what is the on page (Your key: ?)

2) do we need to install all the Avs list on config.php

$av_list = array("avast"=> "waiting","eset" => "waiting","kaspersky" => "waiting","malwarebytes" => "waiting","360totalsecurity" => "waiting","norton" => "waiting","avira" => "waiting","comodo" => "waiting","bitdefender" => "waiting","mcafee" => "waiting","sophos" => "waiting");

you can remove / add avs in the av_list how you want,

just make sure that the vm has the same name.

if you mean the serials, please take a look in the database ( the sql file ), there are already some keys in.

RE: Source code of an runtime scanner (avscan) - merso - Apr 4, 2018

so what would be correct order of this

Quote:$connection = mysqli_connect( "localhost","root","xxxxxxxx","xxxxxxx");

in order i mean (host,database,user,passowod ) or ??