DO NOT DEAL WITH THIS MEMBER
Nov 22, 2015 01:02 AM
(This post was last modified: Dec 20, 2015 12:15 PM by N3Cr0M0rPh.)
Hello HF, I am here with my IRC bot, THANATOS, it is a part of my new slew of thanatos products.
Features: - UDP Flood
- TCP Flood
- HTTP GET Flood
- HTTP POST Flood
- TCP Connect/SYN Flood
- Download and execute
- Visit website
- Powerful install
- Switch chan
- Say message
- Great Stability
- ~18kb stub
- FULL ring3 rootkit, wipes process name completely from memory.
- 8/35 http://nodistribute.com/result/mgDYk6HVEjaJB
I only accept BTC payments my address is: 1PhzY3oowgCE2wK46zqi4ZTScLdB6qmGK8
The cost is 25$.
This is a very HQ product. 🤝
Nov 22, 2015 01:04 AM
(This post was last modified: Nov 22, 2015 01:04 AM by ΔΔΔΔΔΔ.)
I would like a vouch copy
Reserving this place for the vouch
seems like a decent bot will wait to see vouches.
DO NOT DEAL WITH THIS MEMBER
UPDATES: I added UAC bypass and a Ring3 rootkit :)
If you need a vouch i would love to try it out man. Shoot me a PM if you're interested in a review of the product.
DO NOT DEAL WITH THIS MEMBER
I can already tell this is fake.
You claim TCP SYN flood capabilities.
Windows computers can not do a syn flood. Raw sockets have been removed! Not in C# OR even in C++, asm, C or any other low lvl lang. Maybe it is possible with hardcore hacking, which i seriously doubt.
DO NOT DEAL WITH THIS MEMBER
(Dec 10, 2015 02:23 PM)jujuger Wrote: I can already tell this is fake.
You claim TCP SYN flood capabilities.
Windows computers can not do a syn flood. Raw sockets have been removed! Not in C# OR even in C++, asm, C or any other low lvl lang. Maybe it is possible with hardcore hacking, which i seriously doubt.
Its not fake, lmao. It uses normal TCP connect sockets and leaves them open.
DO NOT DEAL WITH THIS MEMBER
Updated the rootkit, it now hides the process and wipes it completely from memory.
if there is a vouch copy , I would interested in writing a review :)
DO NOT DEAL WITH THIS MEMBER
any vouch copies left i would like one vouch after if working and as good as he claims it to be!
DO NOT DEAL WITH THIS MEMBER
Dec 16, 2015 04:28 AM
(This post was last modified: Dec 16, 2015 04:28 AM by N3Cr0M0rPh.)
Just updated, stub is now 40kb and is now NEARLY FUD
6/35 AV
http://v2.scan.majyx.net/?page=results&sid=926087
Filename: Windows Logon Application.exe
Type: File
Filesize: 44544 bytes
Date: 16/12/2015 - 12:25 GMT+2
MD5: 8d726d14cb9b0447b250e849ce226b50
SHA1: dfaeec517b0f5935da9b978dc9e9ca33ca240dd0
Status: Infected
Result: 6/35
AVG Free - OK
Avast - OK
AntiVir (Avira) - BDS/Backdoor.Gen
BitDefender - Gen:Heur.MSIL.Krypt.2
Clam Antivirus - OK
COMODO Internet Security - OK
Dr.Web - OK
eTrust-Vet - OK
F-PROT Antivirus - OK
F-Secure Internet Security - Gen:Heur.MSIL.Krypt.2
G Data - Gen:Heur.MSIL.Krypt.2
IKARUS Security - OK
Kaspersky Antivirus - OK
McAfee - OK
MS Security Essentials - OK
ESET NOD32 - OK
Norman - OK
Norton Antivirus - OK
Panda Security - OK
A-Squared - OK
Quick Heal Antivirus - OK
Solo Antivirus - OK
Sophos - OK
Trend Micro Internet Security - OK
VBA32 Antivirus - OK
Zoner AntiVirus - OK
Ad-Aware - Gen:Heur.MSIL.Krypt.2
BullGuard - Gen:Variant.Symmi.38296
FortiClient - OK
K7 Ultimate - OK
NANO Antivirus - OK
Panda CommandLine - OK
SUPERAntiSpyware - OK
Twister Antivirus - OK
VIPRE - OK
Scan Result: http://v2.scan.majyx.net/?page=results&sid=926087
Scan by MaJyx Scanner
DO NOT DEAL WITH THIS MEMBER
Dec 20, 2015 12:16 PM
(This post was last modified: Dec 20, 2015 12:16 PM by N3Cr0M0rPh.)
I have just upgraded to l33t. I am a very trustworthy member. And this is a very HQ product.
DO NOT DEAL WITH THIS MEMBER
Dec 22, 2015 06:55 PM
(This post was last modified: Dec 22, 2015 06:58 PM by jujuger.)
(Dec 10, 2015 04:05 PM)N3Cr0M0rPh Wrote: Its not fake, lmao. It uses normal TCP connect sockets and leaves them open.
I just remembered this thread, dude, leaving a tcp stream open is not a syn flood. Please remove the false advertising!
(Dec 14, 2015 03:44 AM)N3Cr0M0rPh Wrote: Updated the rootkit, it now hides the process and wipes it completely from memory.
How do you wipe a process from memory? You mean you terminated it? If you 'wipe it from memory', it gets terminated.
DO NOT DEAL WITH THIS MEMBER
(Dec 22, 2015 06:55 PM)jujuger Wrote: I just remembered this thread, dude, leaving a tcp stream open is not a syn flood. Please remove the false advertising!
How do you wipe a process from memory? You mean you terminated it? If you 'wipe it from memory', it gets terminated.
Not it replaces the process name using WriteProcessMemory() and also scans through processes
|
