+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: Why stub is called "stub"? (/showthread.php?tid=6133823)
Why stub is called "stub"? - AuJezus - Jan 14, 2021
Hello,
It might be a dumb question, but please don't judge me I just got started. So why is it called "stub"? From what I found online stub is dummy code to test program, but why would you need dummy code on a working crypter? It must have some other meaning, anyone knows what meaning?
RE: Why stub is called "stub"? - 【ＢＡＤＭＡＮ】 - Jan 14, 2021
Try to read what exactly something says and understand what exactly it says not what you want.
RE: Why stub is called "stub"? - StarZ - Jan 14, 2021
(Jan 14, 2021 07:03 PM)fed. Wrote: Try to read what exactly something says and understand what exactly it says not what you want.
I had an aneurysm and fucking died trying to read your post...
We should really be calling crypter "stubs" loaders, as it 'off-loads' your payload to execute, via memory injection or dropping it on the disc. Keyloggers/rats/bots/etc should be templates, as we replace variables/resources and never really change the core functionality. However, I doubt it will ever migrate, stub is a simpler term that is so widespread and such a blanket term so it's easier for newbies to comprehend.
RE: Why stub is called "stub"? - AuJezus - Jan 15, 2021
(Jan 14, 2021 07:23 PM)StarZ Wrote: I had an aneurysm and fugging died trying to read your post...
We should really be calling crypter "stubs" loaders, as it 'off-loads' your payload to execute, via memory injection or dropping it on the disc. Keyloggers/rats/bots/etc should be templates, as we replace variables/resources and never really change the core functionality. However, I doubt it will ever migrate, stub is a simpler term that is so widespread and such a blanket term so it's easier for newbies to comprehend.
So stub is basically the piece of code that decrypts a crypted program and executes it on the computer?
Sorry for stupid questions I just started yesterday on crypters and when googled what is stub got a result that it's like dummy code.
RE: Why stub is called "stub"? - Voidlight - Jan 15, 2021
(Jan 15, 2021 05:04 AM)AuJezus Wrote: So stub is basically the piece of code that decrypts a crypted program and executes it on the computer?
Sorry for stupid questions I just started yesterday on crypters and when googled what is stub got a result that it's like dummy code.
A crypter will combine your malware with a "stub" or "payload" which has the job of decrypting and injecting your malware that gets packed and encrypted inside it. When victim executes it, the stub will have the code required in it to decrypt the malware and will also contain the code to inject/drop it.
Crypter -> Stub + Malware = FUD Malware
RE: Why stub is called "stub"? - AuJezus - Jan 16, 2021
(Jan 15, 2021 02:51 PM)Hideki Ryuga Wrote: A crypter will combine your malware with a "stub" or "payload" which has the job of decrypting and injecting your malware that gets packed and encrypted inside it. When victim executes it, the stub will have the code required in it to decrypt the malware and will also contain the code to inject/drop it.
Crypter -> Stub + Malware = FUD Malware
Oh okay thank you, now I understand.
RE: Why stub is called "stub"? - tux1 - Jan 16, 2021
The users above are correct, but just to add.
Think of a crypter stub like a decrypter with a 'container' attached to it, so the crypter will get your target file and encrypt it, then it will make a copy of the stub and put the encrypted program in it (think of the container as holding it) and this will be the new output file. Now when the person runs the output the decryption part of the program runs and get the encrypted file from the 'container' and decrypts it at run time.