+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Keyloggers (https://hackforums.net/forumdisplay.php?fid=113)
+---- Thread: Yoshistr FUD Keylogger: Advanced Remote Keylogger, File Downloader (/showthread.php?tid=71771)
Yoshistr FUD Keylogger: Advanced Remote Keylogger, File Downloader - Yoshistr - Apr 27, 2009
Site: http://yoshistr.com - Yoshistr Productions
Software: Yoshistr Deluxe Keylogger
ETA of next update: June 25th, 2009
Features of next update:
-Firefox decrypt passwords integrated tool
-Log viewer (quick & efficient text viewer)
-Help page update
-& More (if you have a request please let us know)
Update Release (6/14/09)
Please visit the site: http://yoshistr.com/ login with your Premium Member account, you can find the download details inside the thread located here:
Yoshistr Productions Forums > Yoshistr Productions Software > Yoshistr Deluxe Keylogger Forum > Yoshistr Deluxe Keylogger - Upgrades SubForum
If you login as a premium member you can go to the section directly by clicking this link: http://yoshistr.com/showthread.php?tid=12
Update Notes (6/14/09):
-MSN stored password thief
-Trillian stored password thief
-Command.html file stabilized, allowing for dynamic command processing
-File Listing automatically sent to FTP server
-New Command.html / Command.txt file creator
-Can now use a Command.txt file instead of html
-New Insert Hashed Aim Passwords into Registry
Watch the video:
To read the help documentation file:
Current Yoshistr Keylogger Documentation
Previous Yoshistr Keylogger Documentation
Yoshistr Keylogger boasts the following feature set:
§ Takes screen shots at intervals defined by you and uploads them to your ftp server
§ Completely FUD, marked as "MicrosoftUpdate.exe" with company name as "Microsoft Corporation"
§ Hides in the process list, auto starts with Windows as a hidden file and hides all log files
§ Send logs & passwords via FTP at selected intervals defined by you
§ Bind any file type of your choice to the keylogger to have it open on first run. (binder included).
§ Select the file icon right from the program (Comes with a free image [jpg, gif, png, bmp, etc] converter to icon file type [ico]
§ Option to delete the exe file right after execution or have it replaced with the binded file, keeping the keylogger discrete from the user.
§ Sends you a text message or email the first time it is run directly to your cell phone [major cell phone carriers supported] so you know exactly when and which computer installed your program no matter where you are (No more wondering if the person actually ran the file or if you have logs coming to your ftp server)!
§ Steals Firefox stored passwords immediately on load
§ Steals stored AIM passwords
§ Remote shutoff feature allowing you to turn it off or on as you choose
§ Remote change upload rate feature letting you change the intervals it sends the logs to your server (even after it has been remotely installed)
§ Remote run command feature allowing you to run multiple commands through the command prompt (full access) with the output sent to your FTP server
§ Encrypted Log File on remote computer rather than plain text using a 9 character IV key with the resulting hash being salted (more secure).
§ Yoshistr Smart Backspace (Shows all typed keys but also lets you instantly remove all backspace characters from the logs with our Backspace remover tool - included).
§ Special turn off remote feature using the "TurnOffRemote=" command to turn off the keylogger until the command is removed.
§ Special FTP feature allowing the use of a remote "FTPU=" command to upload a specific file from the remote computer to the server (dynamic).
§ Special download feature allowing the use of a remote "FTPD=" command to download a file from the internet to the remote computer to a predetermined directory.
§ Special upload directory feature allowing the use of a remote "FTPUDir=" command to upload all files in a directory from the remote computer.
§ Special download & execute feature allowing the use of a remote "FTPDExec=" command to download a exe file to a specific directory and then execute it on the remote computer.
§ More features are constantly being updated, if you are planning on purchasing the product or have already and desire a specific feature please post it here so I can let you know if we can implement it in a future update.
Price(Standard) [Currently not being offered]: $25 (USD) - Includes all the green colored features as well as help on how to setup everything.
Price(Deluxe): $50 (USD) - Includes all the green colored features as well as the gold features, additionally you will get personal assistance from Yoshistr Productions and gain access to our Premium Member's help desk at http://www.yoshistr.com where we answer any questions you may have.
PM me now to get your keylogger or send a payment to [email protected] through paypal for the amount of the version you want to purchase as well as an email to [email protected] so we can set it up for you.
File Info
Report generated: 16.5.2009 at 12.10.31 (GMT 1)
Filename: MicrosoftUpdate.exe
File size: 68 KB
MD5 Hash: 474593D93EF8FE66B0FA24BD4F7E58C2
SHA1 Hash: B1AF869B7FB3061CC119C71105CC8CA5DE3C287E
Packer detected: Microsoft Visual C# / Basic .NET
Self-Extract Archive: Nothing found
Binder Detector: Nothing found
Detection rate: 0 on 23
Detections
a-squared - Nothing found!
Avira AntiVir - Nothing found!
Avast - Nothing found!
AVG - Nothing found!
BitDefender - Nothing found!
ClamAV - Nothing found!
Comodo - Nothing found!
Dr.Web - Nothing found!
Ewido - Nothing found!
F-PROT 6 - Nothing found!
IkarusT3 - Nothing found!
Kaspersky - Nothing found!
McAfee - Nothing found!
MHR (Malware Hash Registry) - Nothing found!
NOD32 v3 - Nothing found!
Norman - Nothing found!
Panda - Nothing found!
Quick Heal - Nothing found!
Solo Antivirus - Nothing found!
Sophos - Nothing found!
TrendMicro - Nothing found!
VBA32 - Nothing found!
Virus Buster - Nothing found!
Scan report generated by
NoVirusThanks.org
Additional programs used to run scans with no detection:
-Malwarebytes Anti-malware
(Please do not upload the file to any anti-virus program other than novirusthanks.org and make sure you check the do not distribute option off!)
Your ultimate hacking tools...
-Yoshistr
- redpee - Apr 27, 2009
mmm I think i LOVE YOU :D thanks
(i hope I can use it as soon as posible.)
- nob - Apr 27, 2009
i want a FUD keylogger can you make one for me? lol
- MaryLamb - Apr 27, 2009
It should be hidden etc
Also when the logs are dropped in FTP, at the top of each log it should filter out potential passwords/usernames
- Yoshistr - Apr 27, 2009
FUD - I'm trying to make it hidden but haven't uploaded it to any Virus scanner yet because I don't want it to get flagged and make it useless.
@exoblivione: finding out possible password/username combinations will be difficult because there is usually no way of knowing what is being typed, this is easier done after it is uploaded by a script you run to remove any dictionary words from the file, basically I can write a separate program which won't be installed on the target computer but you can use to remove dictionary words from the log file, which will leave everything else including passwords, etc but it will definitely be in a separate program upcoming.
- MaryLamb - Apr 27, 2009
Couldn't it work like this
Logger writes keystrokes to a tempoary file
At every x minutes it searches the temp file and copies down emails and passes to passes.txt
Then the rest of the temp log is sent to ftp
Or rather than directly FTP
It saves logs as txt on target computer where it can filter them
- Evolution - Apr 27, 2009
Ill have one .. and with logs anyways i can always tell what is passwords and what is it not lol its easy enough to work out .. because people for one dont leave spaces in between there passwords its always a word say .. hackforums123 etc so you will no its for password
no chance of screenshot feature
- MaryLamb - Apr 27, 2009
He hasn't made it yet......
- Evolution - Apr 27, 2009
i no he hasnt made it yet lol ...
- MaryLamb - Apr 27, 2009
Oh I didn't see feature after screenshot
Fuck my eyes
- Evolution - Apr 28, 2009
haha no problem .. screenshot feature would be cool only a few keyloggers seem to have it not many im quite a nosey person so id like to see there screen aswell as every key the press :P haha
- Yoshistr - Apr 28, 2009
@exoblivione: It would be fairly simple to sift the file for the "@" character then copy a few lines above and below the text to make sure the email and password are stored but it makes no sense to do this because it can be done post processing. Meaning after it has been uploaded it is a lot less CPU intensive to just run a program on your side to do this. Trust me, if it made sense I would definitely add this feature but a whole text file is still small like about 50kb at most before uploading so copying passwords over before uploading will only increase the chance that vital information is not passed over. It makes perfect sense to write a small piece of code which will remove common words from the file after you download the log from the FTP server then you will be left with less information to sift through.
@Hutchy: Some of it is already coded but I didn't want to reveal that yet, and yes it can and does take pictures every X seconds and uploads them via FTP with the logs, here is one such screen shot when run on my computer:
http://yoshistr.netau.net/Logs/MasterWUpd4.27.4.19.281.png ... (Can't use hyperlink "http://something.com," where there is a comma at the end on a forum, lmao come on HackForums use a better parse method!) where the file name is "Master" or my computer username followed with "WUpd", short for WindowsUpdate which is the program's name "WindowsUpdate.exe", and "4.27.4.22.969" is "Month.Day.Hour.Minute.Millisecond" when the screenshot was taken, I know I didn't include the Seconds part but I can add that if it is really that important lol.
I don't have an example of an uploaded log file because I deleted them off the FTP server for obvious reasons and won't post it here :).
The thing is it can take screen shots at different time intervals compared to logs so it can take a picture every X minutes. I'm not sure if I want to send the logs separate from the images, but right now it sends it together. It also has an email feature to send an email to a GMail account but currently I disabled that feature because no point in having FTP and Email together for beta testing.
Thanks for the tips, keep them coming...
- Evolution - Apr 28, 2009
Looks good mate you should only give limited copies out because it will even up detected in couple of days stuff always does on here lol always people who scan with virus total or just leech and send it to all there mates then there mates end up scanning with virus total ..etc lol
- Yoshistr - Apr 28, 2009
That is what I was thinking too, how long will it remain FUD, since the last keylogger I wrote remained hidden for a few years and I was the only one who ever used it and never submitted it to any antivirus software. (Unfortunately I lost the source code when my computer crashed a while back and it was a really powerful piece of programming, hoping to make something here to rival that)
I'm considering only distributing to active members here who have some +Rep or something and let them know not to upload to virus checkers.
Any Ideas Here?
-Oh yeah the screen shots are ~110Kb each to capture the whole screen, I can make it to capture only the active window when taken but I prefer to get the whole image to see what is also being run in the background. Obviously taking a screen shot every minute will create 60 PNG files totaling 6600Kbs or ~6.6Mbs which might be a problem uloading to a free FTP server or if the user has a slow 56Kb/s modem connection (you'd be surprised how many people still use dial-up).
- walley - Apr 28, 2009
I need one. I am waiting.