+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: evade av and private stub (/showthread.php?tid=6192371)
evade av and private stub - SIM-4924227 - Feb 6, 2022
hello, how much is a private stub?
how encrypted stub work and evade av?
RE: evade av and private stub - mose3c - Feb 6, 2022
(Feb 6, 2022 04:56 AM)SIM-4924227 Wrote: hello, how much is a private stub?
how encrypted stub work and evade av?
It depends on your Stub Native or .Net for native i use RunPe with few changes will give 5/20 runtime and Bypass WD
for .Net i use different technique give me 0/20-2/20 on runtime and OFC bypass WD
RE: evade av and private stub - SIM-4924227 - Feb 6, 2022
(Feb 6, 2022 08:03 AM)mose3c Wrote: It depends on your Stub Native or .Net for native i use RunPe with few changes will give 5/20 runtime and Bypass WD
for .Net i use different technique give me 0/20-2/20 on runtime and OFC bypass WD
can you tell me more how to do it?
RE: evade av and private stub - mose3c - Feb 6, 2022
(Feb 6, 2022 08:09 AM)SIM-4924227 Wrote: can you tell me more how to do it?
for Runpe first you lunch a process in suspended mode then you get image base address for x64 u can find from rdx + sizeof DWORD64 *2
then unmap the distination image and copy section headers for soruce image to distination image , copy section table , set dist image entry point to source image base address
resume thread
for my crypt it cost 499$ for private handmade crypt no Builder only 1 build
RE: evade av and private stub - lululululu - Feb 6, 2022
(Feb 6, 2022 08:18 AM)mose3c Wrote: for Runpe first you lunch a process in suspended mode then you get image base address for x64 u can find from rdx + sizeof DWORD64 *2
then unmap the distination image and copy section headers for soruce image to distination image , copy section table , set dist image entry point to source image base address
resume thread
for my crypt it cost 499$ for private handmade crypt no Builder only 1 build
This technique is old af
RE: evade av and private stub - mose3c - Feb 6, 2022
(Feb 6, 2022 09:31 AM)lululululu Wrote: This technique is old af
Stop posting trash and spamming you have thread asking for help for same RUNPE i think you are 12years old