[mehtevas]

Hey guys,

i decided to release the source code of avscan an old project of mine,
The way the "detection" is detected is using screenshots, and a compare.

so if your program has a GUI it will get detected,

it uses Oracle Virtualbox for an easy API Commandline API,

if you have questions about the code just post them below.

This code is pretty ugly but it should give everyone who is wondering how a "shitty" runtime scanner works the basics to make there own.

download:

https://fuckav.xyz/runtime_scanner.zip

---

edit:

added sql file

i dont mind if you build your own runtime scanner out of this just leave credits.

for meedman / run4me:
Spoiler (Click to View)

[Toxcique]

Great share, daddy! <3333

[darky666]

lol gg good share scg, incoming rips everywhere

[TOM]

Wonderful contribution towards this section thank u so much man

[nekoochan]

Wonderful contribution towards this section thank u so much man

flowscanner coming soon

[josha28]

nice for sharing but how can i use it

[jcbullet]

From the looks of it you need to run this on a web server with access to your vms running the AV.

[josha28]

ohh thnx got it not for me then

[mehtevas]

From the looks of it you need to run this on a web server with access to your vms running the AV.

you guessed correct, a windows server

[Takehito Morokuzu]

you guessed correct, a windows server

Is this easy to setup? I might give it a go myself.

[mehtevas]

Is this easy to setup? I might give it a go myself.

yes,

install virtualbox,
check config.php for the names of the vms ( just remove / add new ones )

make sure that the path is correct in engine.php to oracle.

[G-protect]

yes,

install virtualbox,
check config.php for the names of the vms ( just remove  / add new ones )

make sure that the path is correct in engine.php to oracle.

1) Please what is the on page (Your key: ?)

2) do we need to install all the Avs list on config.php

$av_list = array("avast"=> "waiting","eset" => "waiting","kaspersky" => "waiting","malwarebytes" => "waiting","360totalsecurity" => "waiting","norton" => "waiting","avira" => "waiting","comodo" => "waiting","bitdefender" => "waiting","mcafee" => "waiting","sophos" => "waiting");

[x222]

flowscanner coming soon

AAHAHAHHAHAAHAAHAHAHAHA

[mehtevas]

1) Please what is the on  page (Your key: ?)

2) do we need to install all the Avs list on config.php

$av_list = array("avast"=> "waiting","eset" => "waiting","kaspersky" => "waiting","malwarebytes" => "waiting","360totalsecurity" => "waiting","norton" => "waiting","avira" => "waiting","comodo" => "waiting","bitdefender" => "waiting","mcafee" => "waiting","sophos" => "waiting");

you can remove / add avs in the av_list how you want,

just make sure that the vm has the same name.


if you mean the serials, please take a look in the database ( the sql file ), there are already some keys in.

[merso]

so what would be correct order of this

$connection = mysqli_connect( "localhost","root","xxxxxxxx","xxxxxxx");

in order i mean (host,database,user,passowod ) or ??