(Jun 22, 2022 07:22 PM)Super Wrote:  Seems really cool, but I have a couple questions about it.

What does WD exclusions folder mean?
Also, does the UAC bypass work on the latest version of Windows 11, or is it targeting outdated systems?

(Jun 22, 2022 07:39 PM)NotKover Wrote:  WD exclusions folder is a windows defender exclusions folder where windows defender and a alright handful of other AVs will not scan the selected locations, and my UAC exploit i use works on the newest version of w10 and w11 with nearly every AV, i can send some runtime scans using my uac exploit

Scans using the exploit:
https://checkzilla.io/scan/2319e9a3-69cc-4f28-85aa-c8b692e8e7ef
https://checkzilla.io/scan/8b34995d-11f2-41bd-831d-6bf1af453f26
(Some major changes have happened between those scans with my dropper)

---

Also when this is ready for sale ill probably move over to one of my better exploits i have saved away to ensure the best results

(Jun 22, 2022 08:31 PM)Super Wrote:  That's amazing you have a working UAC exploit, most of the ones I know about have gotten patched by now.

Seems like it will be a good product, GLWS.

(Jun 23, 2022 12:36 AM)TheGate Wrote:  Are you going to give any vouchies for this?

(Jun 23, 2022 07:55 AM)__Digital__ Wrote:  Good luck with your project, i understand why people are using rust. Because it remains fud longer due to avs not caught with it yet. It just reminds me of the good old autoit binary. but with rust they are 10mb easy. As i said good luck with your project hope it is very successful.

(Jun 23, 2022 09:58 AM)Dyne Wrote:  I would love to see how this fares up against HP Wolf Security with dynamic detection. Businesses, banks in the western world have been transitioning workstations to HP infrastructure and subscribing to their dynamic detection modules. Which has proven to be quite good.
A simple subscription costs a proof of business, consultation and about $5k USD/year for a company.
Not to be confused with HP Wolf Essential Security for home/business use included in newer desktops for free.

The past few months I have been researching this myself and confess myself impressed. Even with heavily encrypted remote malware (consistent connection) bypassing ZoneAlarm runtime.

(Jun 22, 2022 08:36 PM)NotKover Wrote:  Thank you very much, if you have any suggestions please let me know because i dont really know what i should and shouldnt add

(Jun 23, 2022 07:54 PM)AnonTri Wrote:  If it does not already it should allow for loading both exe and dll from disk and memory as well as having multiple fallback c2 servers if not giving it a DGA. Though if it does have DGA please allow for fallback c2 to prevent sinkholing. Other than that good persistence and a stable/secure connection will be your biggest selling points for a loader. Anything that makes it more resilient or more likely to last is worth more than any specific features (in terms of logging or proxies or anything not directly related to a loader)

(Jun 24, 2022 09:02 AM)0xj4y Wrote:  how effective would you say it is to learn for malware development?

(Jun 24, 2022 09:02 AM)0xj4y Wrote:  I'm currently looking into learning C++ or C, but Rust seems interesting to me also, I'll be learning from the start so i'd rather get locked in to one, which would you recommend?