Jan 6, 2017 06:05 PM
(This post was last modified: Jan 6, 2017 06:08 PM by Infamia.)
FTP MODULE
MAIN MODULE
My apologies if it isn't the most readable thing; it's not meant to be, it's a virus after-all, I don't really know what to add on. It connects to an FTP server and uploads every file on the Desktop by ZIPing it into one and sending it off; think of it now I think I should just do it via iterations rather- so if the user cancels it, I'll still get some files.
Anyone mind adding some ideas or something? It uses a ROT13 type of cipher but it increments the letter by 1 or minus 1, to encrypt/decrypt you call lambda functions dec/enc.
This is all hard-coded, so it's kind of hard to change.
ideas ideas pls
Contact for professional programming services.
unazed#5906
Jan 6, 2017 08:16 PM
(This post was last modified: Jan 6, 2017 08:17 PM by Goodies.)
Do not write malware in Python.
The server can be, though. There are some great frameworks that let you design your own protocol. Highly recommend twisted or asyncio.
(Jan 6, 2017 08:16 PM)Goodies Wrote: Do not write malware in Python.
The server can be, though. There are some great frameworks that let you design your own protocol. Highly recommend twisted or asyncio.
Oh, I kind of tried to design a virus regardless in Python; and then to mask it up- of course as you can see- I used a simple hard-coded cipher which is solved and then executed.
I understand it's interpreted and open-source, but I enjoy it's syntax and general fluidity.
Also what'd'ya mean by server? The FTP server? I don't really get how it could do much.
Contact for professional programming services.
unazed#5906
Jan 7, 2017 02:08 PM
(This post was last modified: Jan 7, 2017 02:09 PM by Goodies.)
No. By "server" I'm referring to the C&C server that the malware connects to. Malware should not be written in such a high level language. It should be very low level. Dropper written in C/++ or ASM. Something I'm working on is 100% ASM and is entirely positionally independent meaning it can migrate from process to process.
(Jan 7, 2017 02:08 PM)Goodies Wrote: No. By "server" I'm referring to the C&C server that the malware connects to. Malware should not be written in such a high level language. It should be very low level. Dropper written in C/++ or ASM. Something I'm working on is 100% ASM and is entirely positionally independent meaning it can migrate from process to process.
Ooh, OK. I get you, I think I'll recode the virus to interface with a C/D server somehow, perhaps let Python run a cgi-bin server secretly and let me upload C/D scripts which can be executed on the machine.
Of course this solely relies on if the person has GCV/MinGW, else I can just provide a nasm.exe and rename it; then execute Assembly scripts.
Tbh I could do anything.
Contact for professional programming services.
unazed#5906
(Jan 7, 2017 06:31 PM)Infamia Wrote: Ooh, OK. I get you, I think I'll recode the virus to interface with a C/D server somehow, perhaps let Python run a cgi-bin server secretly and let me upload C/D scripts which can be executed on the machine.
Of course this solely relies on if the person has GCV/MinGW, else I can just provide a nasm.exe and rename it; then execute Assembly scripts.
Tbh I could do anything.
Depending on exactly what you're attacking, good malware is generally very portable to different kinds of architectures and operating system versions. I'm currently working on something that is a pure ASM stager that will download and map into memory various DLLs based on the process/system architecture.
Python is both the web server that gives the file to be downloaded and the C&C server that gives commands, but the DLLs are in C++ and the stager is in ASM.
(Jan 7, 2017 07:56 PM)Goodies Wrote: Depending on exactly what you're attacking, good malware is generally very portable to different kinds of architectures and operating system versions. I'm currently working on something that is a pure ASM stager that will download and map into memory various DLLs based on the process/system architecture.
Python is both the web server that gives the file to be downloaded and the C&C server that gives commands, but the DLLs are in C++ and the stager is in ASM.
I think I'll stick with Windows purely because I know its file structure better and what to do around the system. I think my main languages would be C, ASM, Python. A mix of super-high, low-ish and pure low.
My idea is to just access other program's memory and completely fuck it up by writing 'DICK' everywhere slowly. Also take PNGs and corrupt them, and if I can change the Windows startup logo to a big cock or something.
Then alas' I'll try to overwrite the MBR and remove winsock.DLL and then peace out.
Contact for professional programming services.
unazed#5906
|
