Jul 7, 2018 03:42 PM
(This post was last modified: Jul 7, 2018 03:44 PM by gigajew.)
C#
VB.NET
VB.NET
![[Image: Syr3DlV.png]](https://i.imgur.com/Syr3DlV.png)
|
C#
Load an assembly using the internal method (.NET 2.0, 3.0, 3.5, 4.0 AND UP) |
Jul 7, 2018 04:50 PM
(This post was last modified: Jul 7, 2018 04:51 PM by Washi.)
I don't want to be rude, but how many of the same threads are you going to post in the future? I listed a few of your threads below that pretty much do exactly the same thing, even containing samples using the nLoadImage method instead (some of which you also don't reply on questions that are being asked :/). How does this compare to all the other threads you made about the same subject with almost the same code?
https://github.com/Washi1337
"I'll tell you this UDP joke, and I don't care if you will get it or not."  (Jul 7, 2018 04:50 PM)Washi Wrote: I don't want to be rude, but how many of the same threads are you going to post in the future? I listed a few of your threads below that pretty much do exactly the same thing, even containing samples using the nLoadImage method instead (some of which you also don't reply on questions that are being asked :/). How does this compare to all the other threads you made about the same subject with almost the same code? I also recognized this. I am a VB.Net "newbie" and i like the little differences for the same purpose. Every contribution is a good contribution. Maybe someone gets annoyed by these posts but i can say for myself that i like gigajews posts. Also i really like washi's posts to the vb.net topic. Best wishes to you guys 
Jul 10, 2018 03:05 AM
(This post was last modified: Jul 10, 2018 03:07 AM by Electron.)
(Jul 10, 2018 03:00 AM)alexconnolly Wrote: Out of interest, what sort of thing are you intending on using this for? Loading a lib without detection from an AV? Surely if you read the file of said library you are already going to send the AV into meltdown? Loading an executable (.exe) file in memory to prevent scantime (right click -> Scan) detections but it's not going to help for runtime detections. (Jul 4, 2018 04:09 PM)Tommy Chong- Wrote: Is there any reason why you want to use tasks over threadpool? Alright, this makes sense. But can't they just scan the other exe file...
Jul 10, 2018 03:59 AM
(This post was last modified: Jul 10, 2018 04:02 AM by Electron.)
(Jul 10, 2018 03:24 AM)alexconnolly Wrote: Alright, this makes sense. But can't they just scan the other exe file... No, they can't. Look at the function, it requires a byte[] as a parameter. It means that you have to store your .exe's bytes somewhere in the same executable, usually in Resources. If the byte array isn't encrypted, it will be detected but if it's encrypted, it won't be. Anyway, Avira and its Cloud Protection can decrypt your encryption, so but there are tricks to bypass the Cloud. Avira's Cloud is only being activated only if you have Internet connection. That was just an example but the main idea is the executable's bytes has to be stored in encrypted form, so in the process of scanning, the AVs won't know what those encrypted bytes are because they can't decrypt it. An exception is Avira's Cloud as stated above. (Jul 10, 2018 03:59 AM)Electron Wrote: No, they can't. Look at the function, it requires a byte[] as a parameter. It means that you have to store your .exe's bytes somew Sure, makes sense. I'm new to things like this (although not programming), so it's nice to hear how shit works even though I'll probably never use it. ty. (Jul 7, 2018 04:50 PM)Washi Wrote: I don't want to be rude, but how many of the same threads are you going to post in the future? I listed a few of your threads below that pretty much do exactly the same thing, even containing samples using the nLoadImage method instead (some of which you also don't reply on questions that are being asked :/). How does this compare to all the other threads you made about the same subject with almost the same code? (Jul 7, 2018 08:28 PM)gigajew Wrote: I was trying to simplify things to catch new users interest.. (Jul 10, 2018 04:37 AM)alexconnolly Wrote: Sure, makes sense. He caters to skids, degenerates, and STI's He's better off being a Feminazi, especially after you see what he posts.. |
|
|
