Hack Forums
UAC Bypass - Admin cmd.exe - Windows C++ Program - Runtime & Scantime Protection - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Marketplace (https://hackforums.net/forumdisplay.php?fid=105)
+--- Forum: Premium (https://hackforums.net/forumdisplay.php?fid=451)
+---- Forum: Cryptography and Encryption Market (https://hackforums.net/forumdisplay.php?fid=299)
+---- Thread: UAC Bypass - Admin cmd.exe - Windows C++ Program - Runtime & Scantime Protection (/showthread.php?tid=6265218)

UAC Bypass - Admin cmd.exe - Windows C++ Program - Runtime & Scantime Protection - Hackers - Mar 3, 2024

No longer available.



Spoiler (Click to View)

RE: Easy & Instant - Admin Command Prompt - Windows C++ Program - Precrypted! - Syndicate - Mar 3, 2024

Thank you for providing this great tool to the community, my friend! Hackers is a trustworthy guy :)

RE: UAC Bypass - Admin cmd.exe - Windows C++ Program - Runtime & Scantime Protection - Scrubspoof - Mar 3, 2024

Why did you use virustotal?

RE: UAC Bypass - Admin cmd.exe - Windows C++ Program - Runtime & Scantime Protection - Hackers - Mar 4, 2024

(Mar 3, 2024 08:01 PM)Syndicate Wrote:  Thank you for providing this great tool to the community, my friend! Hackers is a trustworthy guy :)

Thanks Syndicate, appreciate it!

(Mar 3, 2024 09:13 PM)Scrubspoof Wrote:  Why did you use virustotal?

Honestly? Nobody would help me test this, I wanted to make sure it was a clean program, and it's my first program like this.
I also should be able to rebuild it if needed in future. The admin cmd program is serialized from a memory pointer and then injected into new memory, but this uses no encryption currently - just a PE broken into sections/headers/code blocks, then that is serialized and then when you run the program it is re-assembled and pushed to a new protected memory block.
Once I reach a final stopping point on the Lucid Dream DMT tool I'll be more careful about using VT (or not using it), but for now I wanted to just get this up & running and prove to myself that what I made isn't just a 1-off success on only my personal computers.

I use Virus Total to show you that my downloads are clean.

I also know how easy it is to be at 0-1/40 on a scantime scanner like kleenscan, but still be at 10-15+ on Virus Total, so I wanted to make sure what I built was clean in runtime, not just scantime.

RE: UAC Bypass - Admin cmd.exe - Windows C++ Program - Runtime & Scantime Protection - Klonopin - Mar 4, 2024

(Mar 3, 2024 09:13 PM)Scrubspoof Wrote:  Why did you use virustotal?

Using virus total is the real strong way to test your stub 😎
If your stub doesn't get degraded over time then you know you did a good job:^)

RE: UAC Bypass - Admin cmd.exe - Windows C++ Program - Runtime & Scantime Protection - Hackers - Mar 4, 2024

(Mar 4, 2024 07:06 AM)Klonopin Wrote:  Using virus total is the real strong way to test your stub 😎
If your stub doesn't get degraded over time then you know you did a good job:^)

It's staying at 3-4 for new builds, I know if I put it up on VT then a single file can creep to 5-6/72, but overall it has gone well.
I agree - I would like to be able to write code that is safe according to VT, not tell people they can't scan on VT. That "rule" that is imposed here bothers me because anything I would want to give people should always be considered safe by VT in runtime, but I know what you mean ;)

RE: UAC Bypass - Admin cmd.exe - Windows C++ Program - Runtime & Scantime Protection - an4l 1st - Mar 4, 2024

does download.txt contain links to the source or to the compiled program?

RE: UAC Bypass - Admin cmd.exe - Windows C++ Program - Runtime & Scantime Protection - Hackers - Mar 4, 2024

(Mar 4, 2024 07:20 AM)an4l 1st Wrote:  does download.txt contain links to the source or to the compiled program?

This links to the compiled program.
I'll re-release the compiled prog again in future for new builds.

I'm still working on Lucid Dream DMT and it's very effective so I'm not willing to give that out publicly yet.
I'd give the source for the admin cmd.exe program, but without Lucid it won't work. So I figured best case scenario here was to give what I can - the working program.




Remember, USE A CONTRACT & I will send you the most recent version of this.

Results from today - to prove that my software is SAFE :

[Image: RMWQw1f.png]