[KillαMuvz]

[img]http://dl.dropbox.com/u/19745684/Tips%20and%20Tricks%20RATS%20copy.png[/img]

IF YOU ARE READING THIS PLEASE READ MY SIGNATURE!

---

Hello fellow HF members, I'm here to present with a gift from The RAT's Crew. This is a simple program yet very helpfull: an automatic Extension Spoofer!

---

• ScreenShot

• Type in desired extension. ANYTHING will work. [I used mp3 as an example.]

• Virus Scan

Spoiler (Click to View)File Info

Report date: 2011-06-29.
Scan Occured: [img]http://my-avscan.com/result_time.php?t=i&w=ODU3MDI=[/img]
Link to scan: http://my-avscan.com/result.php?scan=ODU3MDI=
File name: RATs_Crew_Extension_Spoofer.exe
File size: 154624 bytes
MD5 Hash: 10de59b230f071109d3ade2c795ceb1d
SHA1 Hash: 9c193bba104148809371624a01aea1e83574a909
Detection rate: 0 out of 34
Status: CLEAN

Detections

AVG - Clean.
Acavir - Clean.
Avast 5 -Clean.
Avast -Clean.
Avira -Clean.
BitDefender -Clean.
VirusBuster Internet Security -Clean.
Clam Antivirus -Clean.
COMODO Internet Security -Clean.
DrWeb -Clean.
eTrust-Vet -Clean.
F-PROT Antivirus -Clean.
F-Secure Internet Security -Clean.
G Data -Clean.
IKARUS Security-Clean.
Kaspersky Antivirus -Clean.
McAfee -Clean.
MS Security Essentials -Clean.
ESET NOD32 -Clean.
Norman -Clean.
Norton -Clean.
Panda Security -Clean.
A-Squared Security -Clean.
Quick Heal Antivirus -Clean.
Rising Antivirus -Clean.
Solo Antivirus -Clean.
Sophos -Clean.
Trend Micro Internet Security -Clean.
VBA32 Antivirus -Clean.
Vexira Antivirus -Clean.
Webroot Internet Security -Clean.
Zoner AntiVirus -Clean.
AhnLab V3 Internet Security -Clean.
Bullguard -Clean.
Scan report generated by
my-avscan.com

• Download Link

CLICK HERE

• Win xp users read this : http://www.azhagi.com/uniset.html

It is not password protected, but I expect you to post before/after downloading.

• Credits
  • KillαMuvz - Code
    
  • Aeonhack OR Marvinn - Theme [ if I'm wrong please tell me.]
    

[Magnus]

This will be very useful if you want to hide your executable and mask them to make it look like it's an mp3 file.

[Mr. 8]

Does this work on windows xp also? I only ask as xp has problems with right to left unicode.

Great share though. Thanks for giving back to the community.

[KillαMuvz]

It does not work on win XP . Still a great contribution :)

check the bottom of the thread.

[我是欧米茄]

Hey seems to be a nice tool !! Thanks Spoiler (Click to View) contribution to hf

[cOld fus1on]

Nice gift Killa! Will download when I get home..., this will definetly be useful!

[Killer12]

very very useful, iv been looking for something like this for ages
thanks a shitload
and it works perfectly too :D

[Water Antilope]

cool program mate and thanks for releasing it for free

[KillαMuvz]

Thanks, you're welcome! Enjoy!

[KillαMuvz]

serverexe.txt? change the icon to make it look like a .txt
This is just spoofing the extension not actually changing it.

[Cяιмιηαℓ]

another awesome share..:) Thanks Killa bro
m going to try this out...

[Ir00tstuff]

This is awesome nice man!
Going to download now.

[ckay2010]

KillαMuvz is just awesome, right guys?? :D

[TheUzuki.']

That is great. Just discovered it now..
Thank you. I'm going to try this..

[Blackstrac]

It seems very usefull for spreading bind files :) but on XP i've this error when i try to open a file :

Code

See the end of this message for details on invoking
just-in-time (JIT) debugging instead of this dialog box.

** Exception Text **
System.Security.SecurityException: Request for the permission of type 'System.Security.Permissions.FileIOPermission, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed.
   at System.Security.CodeAccessSecurityEngine.Check(Object demand, StackCrawlMark& stackMark, Boolean isPermSet)
   at System.Security.CodeAccessPermission.Demand()
   at System.Windows.Forms.IntSecurity.DemandFileIO(FileIOPermissionAccess access, String fileName)
   at System.Windows.Forms.FileDialog.get_FileName()
   at WindowsApplication1.ExtensionSpoofer.CypherxButtonV21_Click(Object sender, EventArgs e)
   at System.Windows.Forms.Control.OnClick(EventArgs e)
   at System.Windows.Forms.Control.WmMouseUp(Message& m, MouseButtons button, Int32 clicks)
   at System.Windows.Forms.Control.WndProc(Message& m)
   at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m)
   at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)
   at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)
The action that failed was:
Demand
The type of the first permission that failed was:
System.Security.Permissions.FileIOPermission
The Zone of the assembly that failed was:
Intranet

** Loaded Assemblies **
mscorlib
    Assembly Version: 2.0.0.0
    Win32 Version: 2.0.50727.42 (RTM.050727-4200)
    CodeBase: file:///c:/WINDOWS/Microsoft.NET/Framework/v2.0.50727/mscorlib.dll
--
RATs Crew Product
    Assembly Version: 5.3.2.3
    Win32 Version: 5.3.2.3
    CodeBase: file:///E:/Mes%20Documents/T%E9l%E9chargements/RATs%20Crew%20Extension%20Spoofer.exe
--
Microsoft.VisualBasic
    Assembly Version: 8.0.0.0
    Win32 Version: 8.0.50727.42 (RTM.050727-4200)
    CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/Microsoft.VisualBasic/8.0.0.0__b03f5f7f11d50a3a/Microsoft.VisualBasic.dll
--
System
    Assembly Version: 2.0.0.0
    Win32 Version: 2.0.50727.42 (RTM.050727-4200)
    CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll
--
System.Windows.Forms
    Assembly Version: 2.0.0.0
    Win32 Version: 2.0.50727.42 (RTM.050727-4200)
    CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll
--
System.Drawing
    Assembly Version: 2.0.0.0
    Win32 Version: 2.0.50727.42 (RTM.050727-4200)
    CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll
--
System.Runtime.Remoting
    Assembly Version: 2.0.0.0
    Win32 Version: 2.0.50727.42 (RTM.050727-4200)
    CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System.Runtime.Remoting/2.0.0.0__b77a5c561934e089/System.Runtime.Remoting.dll
--

** JIT Debugging **
To enable just-in-time (JIT) debugging, the .config file for this
application or computer (machine.config) must have the
jitDebugging value set in the system.windows.forms section.
The application must also be compiled with debugging
enabled.

For example:

<configuration>
    <system.windows.forms jitDebugging="true" />
</configuration>

When JIT debugging is enabled, any unhandled exception
will be sent to the JIT debugger registered on the computer
rather than be handled by this dialog box.

could you tell me a way for fix it ?? THX bro