+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Hacking Tools and Programs (https://hackforums.net/forumdisplay.php?fid=10)
+---- Thread: PE Binder in C++ & C# (/showthread.php?tid=6318969)
PE Binder in C++ & C# - CL1B - Feb 2, 2026
Saw this thread https://hackforums.net/showthread.php?tid=6318965
PE Binding can be approached in numerous ways, but 1 thing: Your payloads have to be clean.
Doesn't have to but you know what I mean.
Here's my 30 minute POC in ++ and #:
- A stub (if you truly care for evasion you can write a real loader. Since payload is clean, not needed that much)
- A 16b footer metadata (sizes and magic marker)
- When executed, the stub reads itself, extracts the payloads and runs both with current privs
The footer at the end allows the stub to locate and extract the bound executables without scanning for marker.
POC
This is barebones don't hate.
C#
++
AV Performance:
![[Image: chrome-J3-AOH7-Hx-XY.png]](https://i.ibb.co/39ZCHJmC/chrome-J3-AOH7-Hx-XY.png)
For educational purposes only.
RE: PE Binder in C++ & C# - NotYourFriend - Feb 2, 2026
(Feb 2, 2026 07:24 AM)MarlboroMan Wrote: For educational purposes only.
Interesting. In a known crybercrime forum.
RE: PE Binder in C++ & C# - ShellPower - Feb 2, 2026
Still not sure what to do with it, but i will dive deeper later today, thanks for taking the time to answer
RE: PE Binder in C++ & C# - CL1B - Feb 2, 2026
(Feb 2, 2026 11:40 AM)ShellPower Wrote: Still not sure what to do with it, but i will dive deeper later today, thanks for taking the time to answer
What do you mean not sure what to do with it?
RE: PE Binder in C++ & C# - ShellPower - Feb 2, 2026
(Feb 2, 2026 12:03 PM)MarlboroMan Wrote: What do you mean not sure what to do with it?
What to do to make this piece of code usable :)
RE: PE Binder in C++ & C# - Hackers - Feb 2, 2026
(Feb 2, 2026 08:10 AM)NotYourFriend Wrote: Interesting. In a known crybercrime forum.
This is not a cybercrime forum, illegal activity is specifically banned. Not sure why people think HackForums is blackhat, we are on clearnet, and a lot of users are only here to research, help provide info for cybersecurity experts to analyze, and create tech.
For example, this PE binder can be used as a whitehat program to combine a main program and its corresponding update-fetcher that might run in background silently. That would be a good quality of life improvement so someone does not need to run 2 programs, which could be too technical for Gen Z or other less savvy users.
(Feb 2, 2026 02:25 PM)ShellPower Wrote: What to do to make this piece of code usable :)
compile it and then run the command given for exec program 1, 2, and then output.exe
RE: PE Binder in C++ & C# - Endorphins - Feb 3, 2026
(Feb 2, 2026 02:31 PM)nodes Wrote: This is not a cybercrime forum, illegal activity is specifically banned. Not sure why people think HackForums is blackhat, we are on clearnet, and a lot of users are only here to research, help provide info for cybersecurity experts to analyze, and create tech.
For example, this PE binder can be used as a whitehat program to combine a main program and its corresponding update-fetcher that might run in background silently. That would be a good quality of life improvement so someone does not need to run 2 programs, which could be too technical for Gen Z or other less savvy users.
I think he's mocking this forum as a whole "cry"ber crime. He's basically just trolling.