+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: Alpha Crypter V2 - Development thread (/showthread.php?tid=5892805)
Alpha Crypter V2 - Development thread - Securifier - Oct 7, 2018
Hey HackForums. I'm coding Alpha Crypter V2.
It will be the most modular crypter ever.
Very small video about the GUI here
Tons of options will be available, in a drag n drop intuitive GUI.
The GUI id divided in two parts : Action to execute on first run, and action to execute at every start.
The execution flow is customizable by the user.
The more high you put it, the first it will be executed.
Take a look at this :
![[Image: 988d818fc20c08f261194ad246f7d618.png]](https://i.gyazo.com/988d818fc20c08f261194ad246f7d618.png)
In this case, on execution :
[ONLY AT First Run]
1) A message box is shown to the user
2) The binded file drops and executed
3) The file install itself to the computer
4) A downloaded file is dropped and executed
[At every run]
5) The program sleeps 20s
6) It gets admin rights by the force
7) It inject the crypted payload with a RunPe method
More options are comming !
When clicking Build, the informations are parsed and send to a remote build server, that will select only the lines of code you need, and randomize all to create a nearly unique stub.
The build server will compile, obfuscate, add icon and assembly, and then, send you back the crypted file.
The crypter GUI is coded in ElectronJS, the BuildServer in C#.
Stub will be C#, compiled in .NET 2.0.
This crypter will be compatible with almost all programs, native and .NET.
Injection methods are : Runpe (Itself, vbc, cvtres) and Reflection.
If you have any question, just ask :)
If you are WebDesigned and you want to help me with front-end, post here (electron Js is Js + Html + css).
Current Alpha Crypter users will keep their subscription on this crypter (maybe on a lite version).
It will be the most modular crypter ever.
Very small video about the GUI here
Tons of options will be available, in a drag n drop intuitive GUI.
The GUI id divided in two parts : Action to execute on first run, and action to execute at every start.
The execution flow is customizable by the user.
The more high you put it, the first it will be executed.
Take a look at this :
In this case, on execution :
[ONLY AT First Run]
1) A message box is shown to the user
2) The binded file drops and executed
3) The file install itself to the computer
4) A downloaded file is dropped and executed
[At every run]
5) The program sleeps 20s
6) It gets admin rights by the force
7) It inject the crypted payload with a RunPe method
More options are comming !
When clicking Build, the informations are parsed and send to a remote build server, that will select only the lines of code you need, and randomize all to create a nearly unique stub.
The build server will compile, obfuscate, add icon and assembly, and then, send you back the crypted file.
The crypter GUI is coded in ElectronJS, the BuildServer in C#.
Stub will be C#, compiled in .NET 2.0.
This crypter will be compatible with almost all programs, native and .NET.
Injection methods are : Runpe (Itself, vbc, cvtres) and Reflection.
If you have any question, just ask :)
If you are WebDesigned and you want to help me with front-end, post here (electron Js is Js + Html + css).
Current Alpha Crypter users will keep their subscription on this crypter (maybe on a lite version).
RE: Alpha Crypter V2 - Development thread - 3DES - Oct 7, 2018
Why so many options? Crypters job is to crypt with minimal everything. Not this BS
RE: Alpha Crypter V2 - Development thread - Tempr5 - Oct 7, 2018
Will this be working with netwire?
RE: Alpha Crypter V2 - Development thread - Dmannman - Oct 7, 2018
Hey bro good luck, cant wait for it to come out. Any ETA in mind? 👍
RE: Alpha Crypter V2 - Development thread - Securifier - Oct 8, 2018
(Oct 7, 2018 12:12 PM)3DES Wrote: Why so many options? Crypters job is to crypt with minimal everything. Not this BS
This is exactly Alpha Crypter V1, no options, just FUD.
I will implement a Lite and a Pro version.
Lite with Encrypted Payload injection, and Startup.
And Pro with all options.
(Oct 7, 2018 07:07 PM)Tempr5 Wrote: Will this be working with netwire?
I think yes. Tested and working with IM5 (obfuscated .NET), RevengeRAT (Standar .NET) and Native programs (as netwire).
RE: Alpha Crypter V2 - Development thread - Tempr5 - Oct 8, 2018
(Oct 8, 2018 02:30 AM)Alpha Coder Wrote: This is exactly Alpha Crypter V1, no options, just FUD.
I will implement a Lite and a Pro version.
Lite with Encrypted Payload injection, and Startup.
And Pro with all options.
I think yes. Tested and working with IM5 (obfuscated .NET), RevengeRAT (Standar .NET) and Native programs (as netwire).
Cool. I appreciate the reply thank you.
RE: Alpha Crypter V2 - Development thread - Securifier - Oct 8, 2018
(Oct 7, 2018 09:02 PM)Dmannman Wrote: Hey bro good luck, cant wait for it to come out. Any ETA in mind? 👍
I think the first release will be in less than one month.
Options will come with time.
RE: Alpha Crypter V2 - Development thread - Cød3ing - Oct 8, 2018
(Oct 7, 2018 11:25 AM)Alpha Coder Wrote: BuildServer in C#.
say no more
RE: Alpha Crypter V2 - Development thread - Securifier - Oct 8, 2018
(Oct 8, 2018 02:37 AM)Cød3ing Wrote: say no more
Wtf ? Whats wrong with a C# Build server ?
The Electron Desktop app will just connect to a remote server, with build informations.
The server will compile the app as the user asked, and send it back to desktop app.
C# is good for this task.
Support of WebSockets and HTTP Request (asp.net) allows me to create a powerful API.
Easy strings manipulation, and multithreading support allows me to create unique sources automatically under user demand.
External compiler, and obfuscator will be called after the source is generated.
RE: Alpha Crypter V2 - Development thread - NYANxCAT - Oct 8, 2018
(Oct 8, 2018 03:12 AM)Alpha Coder Wrote: Wtf ? Whats wrong with a C# Build server ?
The Electron Desktop app will just connect to a remote server, with build informations.
The server will compile the app as the user asked, and send it back to desktop app.
C# is good for this task.
Support of WebSockets and HTTP Request (asp.net) allows me to create a powerful API.
Easy strings manipulation, and multithreading support allows me to create unique sources automatically under user demand.
External compiler, and obfuscator will be called after the source is generated.
Good job and good luck. You don't have to explain why you use c#. Ignore stupid people and move on.
RE: Alpha Crypter V2 - Development thread - MemoryLeak0 - Oct 8, 2018
(Oct 8, 2018 03:12 AM)Alpha Coder Wrote: Wtf ? Whats wrong with a C# Build server ?
The Electron Desktop app will just connect to a remote server, with build informations.
The server will compile the app as the user asked, and send it back to desktop app.
C# is good for this task.
Support of WebSockets and HTTP Request (asp.net) allows me to create a powerful API.
Easy strings manipulation, and multithreading support allows me to create unique sources automatically under user demand.
External compiler, and obfuscator will be called after the source is generated.
I agree with you. C# is not a bad thing for a Build Server. But tbh, I don't understand why you code your stub in C# with .NET dependencies and not in a native language like C.
RE: Alpha Crypter V2 - Development thread - Securifier - Oct 8, 2018
(Oct 8, 2018 08:57 AM)MemoryLeak0 Wrote: I agree with you. C# is not a bad thing for a Build Server. But tbh, I don't understand why you code your stub in C# with .NET dependencies and not in a native language like C.
Yes... Thats an intresting topic...
.NET framework offer advantages next to C.
I code a lot of C, that's not the problem.
With C# :
- Strong post build obfucations possible
- Easy to code features / options (fast recode for refud)
- Stable host process for managed programs (itself injection). Most good rats rat .NET, being .net compatible is crucial.
Moreover, .NET 2.0 is included by default in Windows since Windows 7.
But, i totally agree with your post. C is better than C#.
RE: Alpha Crypter V2 - Development thread - MemoryLeak0 - Oct 8, 2018
(Oct 8, 2018 09:16 AM)Alpha Coder Wrote: Yes... Thats an intresting topic...
.NET framework offer advantages next to C.
I code a lot of C, that's not the problem.
With C# :
- Strong post build obfucations possible
- Easy to code features / options (fast recode for refud)
- Stable host process for managed programs (itself injection). Most good rats rat .NET, being .net compatible is crucial.
Moreover, .NET 2.0 is included by default in Windows since Windows 7.
But, i totally agree with your post. C is better than C#.
I also coded a cryter in the past with C#. It wasn't that bad for scantime I have to admit, but when it comes to runtime stuff C (or another native language) is superior in my opinion.
For example, how do you prevent user-mode API hooks of AV's? Behind the scenes, even C# uses the Native Windows API. In C you can use direct system calls with inline assembler to evade the ntdll hooking or you simply overwrite the hooked function with the original code.
RE: Alpha Crypter V2 - Development thread - borito80 - Oct 8, 2018
(Oct 8, 2018 09:16 AM)Alpha Coder Wrote: Moreover, .NET 2.0 is included by default in Windows since Windows 7.
Actually starting from windows 8 it is not activated by default .net 2
RE: Alpha Crypter V2 - Development thread - Securifier - Oct 9, 2018
First file created with the build server :)
Adding features and GUI improvements.