ProxiesFood: Unlimited Residential Proxy ◆ Spoof Call and Spoof SMS set any caller ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Cheap KYC Verifications & Openups ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Tech Coding Software Development › [Java] Check a source for backdoor

New Reply 
Java 

Check a source for backdoor
Josh‎
Josh‎ Offline
Nickname: Hampo
***
HF Ub3r
Posts:
2,439
Threads:
263
Credibility:
000
Popularity:
13
βytes:
β 0
Game XP:
0
Feb 9, 2016 11:29 AM
Hi all,

Could anyone check the source of something for a backdoor for me please? It is obfuscated and in Java 8. PM me for the download (don't want to publicly link something potentially backdoored)

Thanks to anyone who can.
hintss
hintss Offline
[closed@HF:]
Posts:
334
Threads:
17
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Feb 10, 2016 04:24 AM
How big is this thing that you want checked?
Swish
Swish Offline
[bin@HF:]
***
HF Ub3r
Posts:
1,221
Threads:
140
Credibility:
000
Popularity:
10
βytes:
β 0
Game XP:
0
Feb 10, 2016 05:31 AM
Wondering the same as the above question.
Josh‎
Josh‎ Offline
Nickname: Hampo
***
HF Ub3r
Posts:
2,439
Threads:
263
Credibility:
000
Popularity:
13
βytes:
β 0
Game XP:
0
Feb 11, 2016 02:42 AM
(Feb 10, 2016 04:24 AM)hintss Wrote:  How big is this thing that you want checked?

(Feb 10, 2016 05:31 AM)Swish Wrote:  Wondering the same as the above question.

It's just over 7MB
Key Punch
Key Punch Offline
[bin@HF:]
***
HF Ub3r
Posts:
506
Threads:
107
Credibility:
000
Popularity:
120
βytes:
β 0
Game XP:
0
Feb 11, 2016 02:46 AM (This post was last modified: Feb 11, 2016 02:48 AM by Key Punch.)
(Feb 11, 2016 02:42 AM)Josh‎ Wrote:  It's just over 7MB

I can do 2 things for you..
1. Run it through my local cuckoo sandbox on a one of the headless vm's which will suport .jar.

2. Manually look through the java for anything..

I can do either one or 1 and 2..

PM me if you still are in need of said check.
Sogomn
Sogomn Offline
Hello!
***
HF Ub3r
Posts:
799
Threads:
29
Credibility:
000
Popularity:
30
βytes:
β 0
Game XP:
28
Feb 11, 2016 04:37 AM
Just use a decompiler and look for classes that might be suspicious.
Hey I have a signature.
Josh‎
Josh‎ Offline
Nickname: Hampo
***
HF Ub3r
Posts:
2,439
Threads:
263
Credibility:
000
Popularity:
13
βytes:
β 0
Game XP:
0
Feb 11, 2016 04:46 AM
(Feb 11, 2016 04:37 AM)Sogomn Wrote:  Just use a decompiler and look for classes that might be suspicious.

That would require me to have more than a basic understanding of Java. It's heavily obfuscated which makes it even harder for me
Sogomn
Sogomn Offline
Hello!
***
HF Ub3r
Posts:
799
Threads:
29
Credibility:
000
Popularity:
30
βytes:
β 0
Game XP:
28
Feb 11, 2016 05:01 AM
(Feb 11, 2016 04:46 AM)Josh‎ Wrote:  That would require me to have more than a basic understanding of Java. It's heavily obfuscated which makes it even harder for me

Copy to Eclipse -> Control + Shift + F -> Formatted.
Hey I have a signature.
Folks
Folks Offline
Go Enthusiast
***
HF Ub3r
Posts:
1,134
Threads:
224
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 11, 2016 01:48 PM
(Feb 11, 2016 05:01 AM)Sogomn Wrote:  Copy to Eclipse -> Control + Shift + F -> Formatted.

Obfuscation doesn't just rearrange the code so formatting it correctly won't help, also he said he doesn't have more than a basic understand of java.
BTC - 15Cn2u7onAuPaMFGmT4qbEhWgzsKSvMEn6
ETH - 0x5198A50b164a14Df7eAB562da7b440197cb9808B
[Image: folks.gif]

CodeLeaks™
CodeLeaks™ Offline
[user@HF:]
**
HF l33t
Posts:
135
Threads:
5
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 11, 2016 02:19 PM
(Feb 11, 2016 04:37 AM)Sogomn Wrote:  Just use a decompiler and look for classes that might be suspicious.

On 7mb of code? Yeah, good luck and have fun with that.

Surely I don't have a better answer because I'd suggest the same thing, but it's still going to suck. And since it's obfuscated, it's going to be even worse.
Signature space available.
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
[C] by chill3d_boiJan 8, 2020 02:52 AM 10 816 Jan 8, 2020 02:52 AM
Last Post: strikemike
[C] by XMRFISHYSep 15, 2019 05:25 AM 4 267 Sep 15, 2019 05:25 AM
Last Post: malpwn
[.NET] by spartanier7777Jan 24, 2013 03:23 PM 64 9,723 Jan 24, 2013 03:23 PM
Last Post: wοrlockt