Jul 7, 2012 08:03 AM
(This post was last modified: Oct 18, 2015 03:15 AM by DragonHunter.)
Hey guys whats up
I was thinking of sharing this because it's really awesome to have since there are just too many crackers now
So what LiteCode will do basically is connecting to a server using the SSP protocol (http://ssp.codeplex.com) for creating a encrypted/compressed secure connection
And what it will allow is asking the server if he will for us execute some code instead of the client having the code
So see it as a proxy for the code you want to execute
So for example a scenario without LiteCode:
1. You start ur crypter and u login
2. You fillin some settings and u press crypt
3. The crypter will now crypt your .exe but all the code is stored in the .exe and so if you bypass the login you're still able to crypt your file
A scenario with LiteCode:
1. You start ur crypter and u login
2. You fillin some settings and u press crypt
3. The crypter will now send his .exe you wanted to crypt + settings to the server so now at server side hes able to crypt your file and sending back the FUD .exe
This way you don't need the code at the crypter.exe so if they will bypass your login system they wouldn't be able to crypt ther file
And now you can even update the crypter remotely incase it will become detectable 🤝
What you'll get from using LiteCode:
Smaller executables
The private code will be 100% private
Your code cannot be seen anymore by a cracker or decompiler
No obfuscation required
The code can be updated remotely this will allow you quick bug fixing and no more .exe downloads everytime something is updated
Everyone is having the same version since all of your code is ran at the server everyone will use
Don't worry about JIT Hooking since this will be useless now
When your not using LiteCode:
Your code can be cracked/stolen
Everyone can see your code
You need to use obfuscation but even that can be deobfuscated by de4dot or any other deobfuscator
... and many more reasons
Github - Opensource: https://github.com/AnguisCaptor/LiteCode
Since you don't need a lot of knowledge about networking other then that u need to know how to port forward u'll be fine
Most of the code you write will look the same like you had before
For example lets take this class which is normally in your .exe
When you look at this example you can clearly see your password can be stolen
Now lets take a look when your doing it in LiteCode
Client side class
Server side class:
As you can see the method bodies in the client side are empty but in the server side you can see the password and in CallMe what it returns "Hello World"
While in the client side you can't even see what it returns so that's for the server to decide
Also you can see both the server and client are using the ITest interface which is
Pretty straight forward interface, just 1 method "CallMe" and both in Server/Client classes you need to have the RemoteExecution attribute for security reasons
The code looks pretty much the same and you need to think about the the client side class methods will never be called it's just a dummy class
So now when your opening your .Net Reflector opening the client.exe you'll see there is no password what so ever
If you would do in the CallMe method "return this.Password;" only then you will get the password
Also keep in mind that you don't want to change anything in a Form or maybe calling API's since it will be done server sided
So all the code which has nothing to do design/visual u need to put it in the Litecode so it can stay hidden and not cracked
Now you can also create the best login system since no one can crack the server side code
You can simply create a login system and do extra checks at methods to see if ur really loggedin etc... if not don't execute the code it's that simple and it can't be executed by the cracker by forcing it
Here is example code you need to use for the server to get it up and running
Here is example code you need to use for the client to get it up and running
any comments/questions are welcome 🤝
I was thinking of sharing this because it's really awesome to have since there are just too many crackers now
So what LiteCode will do basically is connecting to a server using the SSP protocol (http://ssp.codeplex.com) for creating a encrypted/compressed secure connection
And what it will allow is asking the server if he will for us execute some code instead of the client having the code
So see it as a proxy for the code you want to execute
So for example a scenario without LiteCode:
1. You start ur crypter and u login
2. You fillin some settings and u press crypt
3. The crypter will now crypt your .exe but all the code is stored in the .exe and so if you bypass the login you're still able to crypt your file
A scenario with LiteCode:
1. You start ur crypter and u login
2. You fillin some settings and u press crypt
3. The crypter will now send his .exe you wanted to crypt + settings to the server so now at server side hes able to crypt your file and sending back the FUD .exe
This way you don't need the code at the crypter.exe so if they will bypass your login system they wouldn't be able to crypt ther file
And now you can even update the crypter remotely incase it will become detectable 🤝
What you'll get from using LiteCode:
Smaller executables
The private code will be 100% private
Your code cannot be seen anymore by a cracker or decompiler
No obfuscation required
The code can be updated remotely this will allow you quick bug fixing and no more .exe downloads everytime something is updated
Everyone is having the same version since all of your code is ran at the server everyone will use
Don't worry about JIT Hooking since this will be useless now
When your not using LiteCode:
Your code can be cracked/stolen
Everyone can see your code
You need to use obfuscation but even that can be deobfuscated by de4dot or any other deobfuscator
... and many more reasons
Github - Opensource: https://github.com/AnguisCaptor/LiteCode
Since you don't need a lot of knowledge about networking other then that u need to know how to port forward u'll be fine
Most of the code you write will look the same like you had before
For example lets take this class which is normally in your .exe
When you look at this example you can clearly see your password can be stolen
Code
class TestClass
{
private string Password;
public TestClass()
{
this.Password = "VerySecretPassword";
}
public string CallMe()
{
return "Hello World";
}
}Now lets take a look when your doing it in LiteCode
Client side class
Code
class TestClass : ITest
{
public TestClass()
{
}
[RemoteExecution]
public string CallMe()
{
return "";
}
}Server side class:
Code
class TestClass : ITest
{
private string Password;
public TestClass()
{
this.Password = "VerySecretPassword";
}
[RemoteExecution]
public string CallMe()
{
return "Hello World";
}
}As you can see the method bodies in the client side are empty but in the server side you can see the password and in CallMe what it returns "Hello World"
While in the client side you can't even see what it returns so that's for the server to decide
Also you can see both the server and client are using the ITest interface which is
Code
public interface ITest
{
string CallMe();
}Pretty straight forward interface, just 1 method "CallMe" and both in Server/Client classes you need to have the RemoteExecution attribute for security reasons
The code looks pretty much the same and you need to think about the the client side class methods will never be called it's just a dummy class
So now when your opening your .Net Reflector opening the client.exe you'll see there is no password what so ever
If you would do in the CallMe method "return this.Password;" only then you will get the password
Also keep in mind that you don't want to change anything in a Form or maybe calling API's since it will be done server sided
So all the code which has nothing to do design/visual u need to put it in the Litecode so it can stay hidden and not cracked
Now you can also create the best login system since no one can crack the server side code
You can simply create a login system and do extra checks at methods to see if ur really loggedin etc... if not don't execute the code it's that simple and it can't be executed by the cracker by forcing it
Here is example code you need to use for the server to get it up and running
Code
namespace Server
{
class Program
{
static void Main(string[] args)
{
LiteServer server = new LiteServer(1234);
server.onClientConnect += (Client c) =>
{
c.ShareClass("test", typeof(TestClass), c);
};
Console.WriteLine("Providing remote code at port 1234");
Process.GetCurrentProcess().WaitForExit();
}
}
class TestClass : ITest
{
public Client client;
public TestClass(Client c)
{
this.client = c;
}
[RemoteExecution]
public string TestMe()
{
return "Hello World, I bet u couldn't get this code above :)";
}
[RemoteExecution]
public int GetRandomNumber()
{
Random rnd = new Random(DateTime.Now.Millisecond);
return rnd.Next(int.MinValue, int.MaxValue);
}
}
public interface ITest
{
string TestMe();
int GetRandomNumber();
}
}Here is example code you need to use for the client to get it up and running
Code
namespace Client
{
class Program
{
static void Main(string[] args)
{
LiteClient client = new LiteClient("YOUR IP ADDRESS", 1234);
ITest test = client.GetSharedClass<ITest>("test", typeof(Dummy_Testy));
}
}
public class Dummy_Testy : ITest
{
[RemoteExecution]
public string TestMe()
{
return "";
}
[RemoteExecution]
public int GetRandomNumber()
{
return 0;
}
}
public interface ITest
{
string TestMe();
int GetRandomNumber();
}
}
ReadMe: http://pastebin.com/EscqLWyY
