[CaptainBri]

As a 'celebration' of my 300th post on LeetCoders, I'm releasing a so called 'Crypter-DLL' to crypt from within a DLL file.

[img]http://img263.imageshack.us/img263/2540/screenshot2011090223275.png[/img]


Options:

• Twelve RunPE's to choose from
  


• RunPE as Base64 string storage
  


• Resource storage method for files
  


• Written in C# 2.0
  


• Randomized variable names
  


• Add the crypted file to startup
  


• Unique variable naming
  


• Over 790 lines of code! [img]http://img710.imageshack.us/img710/3238/screenshot2011090216112.png[/img]
  
  


• Configure Assembly:
  • Title
    
  
  
  • Description
    
  
  
  • Copyright
    
  
  
  • Company
    
  
  
  • Product
    
  
  
  • Version
    
  
  
  • FileVersion
    
  
  
  
  
  


• Install the crypted file:
  • Application Data
    
  
  
  • Temp folder
    
  
  
  • No install
    
  
  
  
  
  


• Inject into:
  • Default Browser
    
  
  
  • VBC
    
  
  
  • CSC
    
  
  
  • Manual injection (for ex. svchost.exe)
    
  
  
  
  
  


• A bunch of encryptions to choose from:
  • DES
    
  
  
  • TripleDES
    
  
  
  • Rijndael
    
  
  
  • RC4
    
  
  
  • XOR
    
  
  
  • Symentric
    
  
  
  • RC2
    
  
  
  • PolyRev
    
  
  
  • PolyStairs
    
  
  
  • DEX
    
  
  
  • PolyBaby
    
  
  
  • AES
    
  
  
  • Cloud
    
  
  
  • Stairs
    
  
  
  • PolyCloud
    
  
  
  • Poly3DES
    
  
  
  • PolySymentric
    
  
  
  • PolyRC2
    
  
  
  • PolyDEX
    
  
  
  • PolyAES
    
  
  
  • PolyRijndael
    
  
  
  
  

To use it, simply add the DLL as a reference and make a new CrypterClass. Set the options, then use the function "Encrypt" from the CrypterClass.

Code

CrypterClass Class = new CrypterClass();
Class.Encrypt("C:\\File1.exe", "C:\\File2.exe");

Note: You can also use the DLL in VB.NET!

Download: http://dl.dropbox.com/u/23840983/LC/DLL%...h%20ad.rar
Password: leetcoders.org

For the version without an ad & the source: Download

Have a nice day,
CaptainBri

[Local Celeb]

Time to see a load of new crypters coming up.
Nonetheless, nice work.

[dwarf2000]

Nah this ain't nice, not at all.

This is fucking orgasmic.

[DeMoNi]

Nah this ain't nice, not at all.

This is fucking orgasmic.

Lol yeah you make me laugh XD, btw nice share =)

[Ethernal Five]

Hey, once again an epic share from Mr Bri. 🤝

[SequenceInitiated]

Injection into default browser? Since when is Mozilla, IE, Opera, or any major browser coded in .net? Unless you've made your own RunPE that's able to inject a native into a non-native, there's no use or it.

[hacphongthan]

very nice
i'm trying to learn C#
good example

[Imaginary]

Very nice relase, thank you for this.

[MoonWalker]

Awesome share, as always. Thanks a lot CaptainBri. :)

[Malitastic]

What an insane release, thanks for this :D

[Banksу]

Figures that one of the only things that gets noticed anymore is something that has to do with crypters.

[Silicon]

Who tipped a load of jizz in my pants?
Oh no nevermind. I just came when I saw this. <3

[Xori]

I highly suggest removing PolyCloud; it throws random input-length related bitchfits... Nice job though, maybe also put injection methods into a separate DLL because people will most likely need to encrypt it to keep FUD...

[Ωмεɢα]

Lol, I just went to see that Leetforums of yours and went to the c sharp section... Your tutorials are pretty freaking good :)

[Xori]

Injection into default browser? Since when is Mozilla, IE, Opera, or any major browser coded in .net? Unless you've made your own RunPE that's able to inject a native into a non-native, there's no use or it.

Are you an idiot, do you realize that the most popular RATs are coded in VB6 or Delphi? (BS = VB6, CG/SpyNet/DC = Delphi)