Spoof Call and Spoof SMS set any caller ◆ ProxiesFood: Unlimited Residential Proxy ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Cheap KYC Verifications & Openups ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Blackhat • Red Team • Offensive Security Cryptography, Encryption, and Decryption › Encrypting / Obfuscating .vbs scripts

New Reply 

Encrypting / Obfuscating .vbs scripts
A4A4ANDY
A4A4ANDY Offline
[n00b@HF:]
*
Registered
Posts:
59
Threads:
6
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Mar 30, 2017 06:28 AM
Hey,

I recently downloaded a worm that creates a .vbs client, now it is detected by 6/35 anti virus, does anyone know techniques on how I can make it harder for AV to detect it?

Thanks for your time!
SIM-3432714
SIM-3432714 Offline
...
**
HF l33t
Posts:
367
Threads:
14
Credibility:
100
Popularity:
148
βytes:
β 0
Game XP:
142
Mar 30, 2017 07:11 AM
If you want PM me, i can crypt it.
Jar Jar Binks
Jar Jar Binks Offline
Fuck HF and it's Rep Reset. Peace
**
HF l33t
Posts:
337
Threads:
30
Credibility:
000
Popularity:
16
βytes:
β 4.5
Game XP:
0
Mar 30, 2017 07:13 AM (This post was last modified: Mar 30, 2017 07:16 AM by Jar Jar Binks.)
Interesting, could you pm me the source?
A4A4ANDY
A4A4ANDY Offline
[n00b@HF:]
*
Registered
Posts:
59
Threads:
6
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Mar 30, 2017 08:57 AM (This post was last modified: Mar 30, 2017 10:42 AM by A4A4ANDY.)
(Mar 30, 2017 07:13 AM)Jar Jar Binks Wrote:  Interesting, could you pm me the source?

I'm sorry, unable to PM yet! it was the worm used in this thread: /showthread.php?tid=5427019

edit: I am able to PM and have done so to you!
Necropod
Necropod Offline
[n00b@HF:]
*
Registered
Posts:
63
Threads:
8
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Mar 30, 2017 11:17 AM
(Mar 30, 2017 06:28 AM)A4A4ANDY Wrote:  Hey,

I recently downloaded a worm that creates a .vbs client, now it is detected by 6/35 anti virus, does anyone know techniques on how I can make it harder for AV to detect it?

Thanks for your time!

maybe change icon
SIM-3432714
SIM-3432714 Offline
...
**
HF l33t
Posts:
367
Threads:
14
Credibility:
100
Popularity:
148
βytes:
β 0
Game XP:
142
Mar 30, 2017 11:23 AM
(Mar 30, 2017 11:17 AM)Necropod Wrote:  maybe change icon

-______-

really ?
Fortified Design
Fortified Design Offline
Front End Developer
***
HF l33t
Posts:
599
Threads:
93
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Mar 30, 2017 11:24 AM
(Mar 30, 2017 11:23 AM)SIM-3432714 Wrote:  -______-

really ?

Made me laugh but from what I understand you have to change methods and a lot of other things.
If you can tell a story with only six words what would it be?
Ernest Hemingway "For Sale Baby Shoes Brand New"

Codefuser
Codefuser Away
[closed@HF:]
Posts:
2,203
Threads:
39
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Mar 30, 2017 11:28 AM
(Mar 30, 2017 11:24 AM)Fortified Design Wrote:  Made me laugh but from what I understand you have to change methods and a lot of other things.

This is a VBS file and not a PE file. There are no icons/resources to be changed.
Jar Jar Binks
Jar Jar Binks Offline
Fuck HF and it's Rep Reset. Peace
**
HF l33t
Posts:
337
Threads:
30
Credibility:
000
Popularity:
16
βytes:
β 4.5
Game XP:
0
Mar 30, 2017 02:56 PM (This post was last modified: Mar 30, 2017 03:23 PM by Jar Jar Binks.)
Oh as for methods OP. You can download software like
>>caution dl link ahead<<
this and others to wrap it into an exe and then crypt that exe
This software should bring the detetion ration down to 1:54 uncrypted
EDIT:
I tested it out myself vbs to exe brings it down to 2:54
And obvs if you crypt it with a good crypter she'll be fud
A4A4ANDY
A4A4ANDY Offline
[n00b@HF:]
*
Registered
Posts:
59
Threads:
6
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Mar 30, 2017 11:51 PM
(Mar 30, 2017 02:56 PM)Jar Jar Binks Wrote:  Oh as for methods OP. You can download software like
>>caution dl link ahead<<
this and others to wrap it into an exe and then crypt that exe
This software should bring the detetion ration down to 1:54 uncrypted
EDIT:
I tested it out myself vbs to exe brings it down to 2:54
And obvs if you crypt it with a good crypter she'll be fud

Thanks! I'll take a look at it!
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by NYANxCATOct 12, 2025 09:42 PM 666 24,047 Oct 12, 2025 09:42 PM
Last Post: normalperson223
by fateerJul 14, 2025 09:24 PM 3 167 Jul 14, 2025 09:24 PM
Last Post: DramaKing
by User9990Jan 19, 2025 01:33 PM 1 184 Jan 19, 2025 01:33 PM
Last Post: Klonopin