Hey ppl!
I know that a lot of people new to hacking don't know how to Hex edit files. This isn't always the most efficient way to make a file UD but it works 😁
Ok lets get started.
The first thing you need to do before we get started is download a hex editor. I prefer Hex Workshop:
http://http://download.cnet.com/Hex-Work...tag=button
Now we open it up and this is what it should look like:[img]http://m47r1x.webs.com/hexworkshopfrstopen.jpg[/img]
Next we're going to open our RAT server or whatever for editing. Go to File>Open and open your file. Now you'll see a ton of numbers and letters like this:[img]http://m47r1x.webs.com/sub7servopen.jpg[/img]
If you want to know what all this crap means click the spoiler, but if you don't care then just skip over it. Trust me I won't get pissed off at all if you do.
Spoiler (Click to View)
The First thing you need to do is cut the file in half. So go to the middle of the file in the hex section and highlight all the way down to the bottom and then right-click, and choose fill and then type "00" without quotes and remeber the Offset(left most section) you cut it at!!. Next go to File>Save as and type something like tophalf.exe. Now your file should look like this at the middle:
[img]http://m47r1x.webs.com/tophalf1.jpg[/img]
After you save it re-open your original file and this time cut off the top half above the offset that you cut the bottom half from. Save as bottomhalf.exe.
Now you should have 2 files. Scan both with your AV. If both of the files are detected Congratz! you just isolated all of the detected signatures to two files. If one files are detected you're in luck! Go all the way back to step 1 and split the file again until both files are detected. Now that you have 2 files open one for editing and keep filling the lines about 50 at a time with 00, saving as a new filename and scanning(remember where you cut it each time). Finally, when the file isn't detected anymore, open it and if you can remember what offset you cut it at, go down one line at a time and fill it and save it until it isn't detected. When it isn't detected you're almost done! Not many people are this patient. Go to the Line that's detected
[img]http://m47r1x.webs.com/detectedarray.jpg[/img]
Note: your file will probably not look like this.
and look at the Section to the right. There should be some numbers, letters and dots. all you should have to do to make the file UD is change an uppercase letter into a lowercase letter. Or you can change a letter like "N" into "O". Now scan the file with your AV to make sure it isn't detected. REMEMBER THE OFFSET AND WHAT YOU CHANGED!!!. do the exact same thing you did with bottom half that you did with the top half. Now that you have both lines to make the file undetectable, go to the original file and replace the two lines with the two UD lines. Now scan it and it shouldn't be Detected!! Have fun with your new UD file!!
All Comments are appreciated!
I know that a lot of people new to hacking don't know how to Hex edit files. This isn't always the most efficient way to make a file UD but it works 😁
Ok lets get started.
The first thing you need to do before we get started is download a hex editor. I prefer Hex Workshop:
http://http://download.cnet.com/Hex-Work...tag=button
Now we open it up and this is what it should look like:[img]http://m47r1x.webs.com/hexworkshopfrstopen.jpg[/img]
Next we're going to open our RAT server or whatever for editing. Go to File>Open and open your file. Now you'll see a ton of numbers and letters like this:[img]http://m47r1x.webs.com/sub7servopen.jpg[/img]
If you want to know what all this crap means click the spoiler, but if you don't care then just skip over it. Trust me I won't get pissed off at all if you do.
Spoiler (Click to View)
The First thing you need to do is cut the file in half. So go to the middle of the file in the hex section and highlight all the way down to the bottom and then right-click, and choose fill and then type "00" without quotes and remeber the Offset(left most section) you cut it at!!. Next go to File>Save as and type something like tophalf.exe. Now your file should look like this at the middle:
[img]http://m47r1x.webs.com/tophalf1.jpg[/img]
After you save it re-open your original file and this time cut off the top half above the offset that you cut the bottom half from. Save as bottomhalf.exe.
Now you should have 2 files. Scan both with your AV. If both of the files are detected Congratz! you just isolated all of the detected signatures to two files. If one files are detected you're in luck! Go all the way back to step 1 and split the file again until both files are detected. Now that you have 2 files open one for editing and keep filling the lines about 50 at a time with 00, saving as a new filename and scanning(remember where you cut it each time). Finally, when the file isn't detected anymore, open it and if you can remember what offset you cut it at, go down one line at a time and fill it and save it until it isn't detected. When it isn't detected you're almost done! Not many people are this patient. Go to the Line that's detected
[img]http://m47r1x.webs.com/detectedarray.jpg[/img]
Note: your file will probably not look like this.
and look at the Section to the right. There should be some numbers, letters and dots. all you should have to do to make the file UD is change an uppercase letter into a lowercase letter. Or you can change a letter like "N" into "O". Now scan the file with your AV to make sure it isn't detected. REMEMBER THE OFFSET AND WHAT YOU CHANGED!!!. do the exact same thing you did with bottom half that you did with the top half. Now that you have both lines to make the file undetectable, go to the original file and replace the two lines with the two UD lines. Now scan it and it shouldn't be Detected!! Have fun with your new UD file!!
All Comments are appreciated!