+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: How to ReFUD? (How to update crypter?) (/showthread.php?tid=6194532)
How to ReFUD? (How to update crypter?) - pedrosegundo - Feb 21, 2022
I am making my crypter.
But I am not clear how can I refud when my stub is detected.
Please let me know about ReFUD methods. (I think this is how to update crypter)
Thank you.
RE: How to ReFUD? (How to update crypter?) - PixelRain - Mar 2, 2022
You will need to go function/sub by function/sub until you find the one that is detected. Then remove line by line until it is undetected, you'll find the line that is detected that way. Then re-work that line of code.
RE: How to ReFUD? (How to update crypter?) - Aphosis - Mar 2, 2022
(Mar 2, 2022 07:11 AM)PixelRain Wrote: You will need to go function/sub by function/sub until you find the one that is detected. Then remove line by line until it is undetected, you'll find the line that is detected that way. Then re-work that line of code.
What PixelRain said is a good idea of ReFUD'ing but depending on what has already been implemented into the crypter certain methods of executing and doing things to handle execution can be detected so it isn't just only changing code to do the same thing. In the most basic example no matter how much unique you make a section of code in relevance to API hooks it will still be detected you need to implement methods of mitigating things like this.