DO NOT DEAL WITH THIS MEMBER
Mar 23, 2024 06:29 AM
(This post was last modified: Mar 23, 2026 08:01 AM by Hackers.)
![[Image: bubble-pop-1.png]](https://i.ibb.co/SBBwcPd/bubble-pop-1.png)
Bubble Pop Crypter v0.0.1
TERMS OF SERVICE
Bubble Pop Crypter may only be used for personal, educational, research use cases on your personal or otherwise authorized devices, for "whitehat", legal purposes only. The software is a proof of concept for reconstructing an unencrypted program and pushing directly to calculated memory addresses, in runtime.
![[Image: bubble-pop-2.png]](https://i.ibb.co/hLv96ZJ/bubble-pop-2.png)
Version 0.0.1
Downloads:
Want to do it yourself? You'll score better ;)
These versions use a header file include instead of a resource file & will require you to have a C++ compiler:
Code DIY Mirror 1:
https://www.mediafire.com/file/9cikwcwg3t8mex8/Bubble-Pop-DIY-Source-Code-Release-v0.0.1.zip/file
DIY Mirror 2:
https://mega.nz/file/Vv1VHa7C#M5O_nMFh0AKaIkW8pW9RbDeaT-KxFpRdpCAAaCUcfdc
Choose 1 mirror download for v0.0.1 compiled programs (see note below) :
Code Mirror 1:
https://mega.nz/file/9i8nSQYR#D5VLN7TIZV95-Ita7Bv2e3m6G9v4-30R4Vdksz7tTLc
Mirror 2:
https://uploadnow.io/f/TP3rFz1
Mirror 3:
https://www.mediafire.com/file/vgbbq38or3g7ukq/BubblePop-Public-0.0.1.zip/file
Mirror 4:
https://mega.nz/file/NiM11KrZ
key: D5VLN7TIZV95-Ita7Bv2e3m6G9v4-30R4Vdksz7tTLc
Mirror 5:
https://www.mediafire.com/file/a1abcadtrysqbpu/BubblePop-Public-0.0.1%25282%2529.zip/file
Mirror 6:
https://www.mediafire.com/file/p50rn34x4e7f8v8/Bubble.exe/file
https://www.mediafire.com/file/ehazwg2md8ahd2f/Pop.exe/file
Mirror 7:
https://filebin.net/93amlszc9u1jt0gt
Auto DLL Unloader
- the auto DLL/module unloader function allows the program to kickout unwanted listeners, tools, etc
- this can cause problems if you are using unknown DLLs
- you can PM/convo me with a list of modules you need whitelisted & I'll send you a custom Pop.exe for that whitelist
Alternatively, download the Pop-NoUnload.exe for the version that doesn't use this feature:
Code https://mega.nz/file/xm9yXAqI#MiAstLXymAkQbadsCZLfvtK-MvTvriv-WbQnWAOkYSQ
DISCLAIMER: Bubble Pop Crypter does not encrypt or alter your program. This is a proof of concept software! I shall repeat: Bubble Pop Crypter does not use encryption. You can see the results for yourself and try it out if you have doubts!
![[Image: bubble-pop-3.png]](https://i.ibb.co/F8L7WBb/bubble-pop-3.png)
We're safe, bub!
Results:
v0.0.1 is the POC as-is, with 0 encryption. We still achieve 2/72 on runtime.
v0.0.2 will include encryption for scantime as well. This is due to me modifying my original program to use a resource file instead of a header include and not having time this morning to add in the new encryption model. However, this makes it more interesting because as you will see, the tool is still safe.
![[Image: AIxxLDb.png]](https://i.imgur.com/AIxxLDb.png)
Remember, Bubble Pop is for personal, educational, research purposes only for legal uses. You must agree to the terms of service to use this software on your personal devices. The core functions of this software are from my project Lucid Dream DMT (Data Management Tool). It is a no-encrypt crypting project I started a while ago that has maintained 2-4/70+ on VT runtime scans for a long time now.
Enjoy More Software, Source Code, Tools, and Tutorials
https://hackforums.net/showthread.php?tid=6265944
https://hackforums.net/showthread.php?tid=6266404
https://hackforums.net/showthread.php?tid=6265473
https://hackforums.net/showthread.php?tid=6265665
https://hackforums.net/showthread.php?tid=6266377
https://hackforums.net/showthread.php?tid=6264320
https://hackforums.net/showthread.php?tid=6263383
https://hackforums.net/showthread.php?tid=6264286
https://hackforums.net/showthread.php?tid=6264522
https://hackforums.net/showthread.php?tid=6266052
https://hackforums.net/showthread.php?tid=6265700
https://hackforums.net/showthread.php?tid=6266289
https://hackforums.net/showthread.php?tid=6265197
https://hackforums.net/showthread.php?tid=6265430
Nice share. The name cracks me up.
DO NOT DEAL WITH THIS MEMBER
(Mar 23, 2024 12:32 PM)ĐĮΜĘ Wrote: Nice share. The name cracks me up.
Thanks, named after my fiance who I call bubble / bubs :)
I added 2 new versions to Downloads:
1) The original downloads feature my auto DLL unloader which can have trouble when you use a program with unknown DLLs. PM/Convo me if you want the DLL unloader to stay & I'll send you a custom copy that whitelists your module list.
2) I added a version that does not include the unloader for people who don't need that.
3) I added a DIY version which includes the source code (slightly tweaked) of Bubble Pop, using a header include rather than a resource. This version requires that you re-compile on your own but will result in much better scores.
(Mar 23, 2024 06:29 AM)Hackers Wrote:
Bubble Pop Crypter v0.0.1
TERMS OF SERVICE
Bubble Pop Crypter may only be used for personal, educational, research use cases on your personal or otherwise authorized devices, for "whitehat", legal purposes only. The software is a proof of concept for reconstructing an unencrypted program and pushing directly to calculated memory addresses, in runtime.
Version 0.0.1
Downloads:
Want to do it yourself? You'll score better ;)
These versions use a header file include instead of a resource file & will require you to have a C++ compiler:
Code DIY Mirror 1:
https://www.mediafire.com/file/9cikwcwg3t8mex8/Bubble-Pop-DIY-Source-Code-Release-v0.0.1.zip/file
DIY Mirror 2:
https://mega.nz/file/Vv1VHa7C#M5O_nMFh0AKaIkW8pW9RbDeaT-KxFpRdpCAAaCUcfdc
Choose 1 mirror download for v0.0.1 compiled programs (see note below) :
Code Mirror 1:
https://mega.nz/file/9i8nSQYR#D5VLN7TIZV95-Ita7Bv2e3m6G9v4-30R4Vdksz7tTLc
Mirror 2:
https://uploadnow.io/f/TP3rFz1
Mirror 3:
https://www.mediafire.com/file/vgbbq38or3g7ukq/BubblePop-Public-0.0.1.zip/file
Mirror 4:
https://mega.nz/file/NiM11KrZ
key: D5VLN7TIZV95-Ita7Bv2e3m6G9v4-30R4Vdksz7tTLc
Mirror 5:
https://www.mediafire.com/file/a1abcadtrysqbpu/BubblePop-Public-0.0.1%25282%2529.zip/file
Mirror 6:
https://www.mediafire.com/file/p50rn34x4e7f8v8/Bubble.exe/file
https://www.mediafire.com/file/ehazwg2md8ahd2f/Pop.exe/file
Mirror 7:
https://filebin.net/93amlszc9u1jt0gt
Auto DLL Unloader
- the auto DLL/module unloader function allows the program to kickout unwanted listeners, tools, etc
- this can cause problems if you are using unknown DLLs
- you can PM/convo me with a list of modules you need whitelisted & I'll send you a custom Pop.exe for that whitelist
Alternatively, download the Pop-NoUnload.exe for the version that doesn't use this feature:
Code https://mega.nz/file/xm9yXAqI#MiAstLXymAkQbadsCZLfvtK-MvTvriv-WbQnWAOkYSQ
DISCLAIMER: Bubble Pop Crypter does not encrypt or alter your program. This is a proof of concept software! I shall repeat: Bubble Pop Crypter does not use encryption. You can see the results for yourself and try it out if you have doubts!
We're safe, bub!
Results:
v0.0.1 is the POC as-is, with 0 encryption. We still achieve 2/72 on runtime.
v0.0.2 will include encryption for scantime as well. This is due to me modifying my original program to use a resource file instead of a header include and not having time this morning to add in the new encryption model. However, this makes it more interesting because as you will see, the tool is still safe.
Remember, Bubble Pop is for personal, educational, research purposes only for legal uses. You must agree to the terms of service to use this software on your personal devices. The core functions of this software are from my project Lucid Dream DMT (Data Management Tool). It is a no-encrypt crypting project I started a while ago that has maintained 2-4/70+ on VT runtime scans for a long time now.
Enjoy More Software, Source Code, Tools, and Tutorials
https://hackforums.net/showthread.php?tid=6265944
https://hackforums.net/showthread.php?tid=6266404
https://hackforums.net/showthread.php?tid=6265473
https://hackforums.net/showthread.php?tid=6265665
https://hackforums.net/showthread.php?tid=6266377
https://hackforums.net/showthread.php?tid=6264320
https://hackforums.net/showthread.php?tid=6263383
https://hackforums.net/showthread.php?tid=6264286
https://hackforums.net/showthread.php?tid=6264522
https://hackforums.net/showthread.php?tid=6266052
https://hackforums.net/showthread.php?tid=6265700
https://hackforums.net/showthread.php?tid=6266289
https://hackforums.net/showthread.php?tid=6265197
https://hackforums.net/showthread.php?tid=6265430
How does it work, I'm new to this business, can you give me some information?
DO NOT DEAL WITH THIS MEMBER
(Mar 23, 2024 03:35 PM)C4nlyne Wrote: How does it work, I'm new to this business, can you give me some information?
There are 3 total tools, for 64bit original programs.
1) DIY codebase, using a header include - for best results, you use this by compiling Bubble, then once compiled open that up, type in your filepath (to original program), press enter. Once done, compile Pop and this is your final program.
2) Full release, with an auto module unloading feature. Usage is to open Bubble.exe, enter filepath & press enter - no compiling needed. However, remember that this is a public program and POC.
Option 2 also has a dll/module whitelist. this means only some libs can load in, so if you are using libs that are not on the whitelist, you should either use option 1 (or 3 below) - or msg me and I'll send you a new copy w/ your requested module whitelist.
3) Same as option 2, but without the auto unloading tool / no dll whitelist requirements.
For the other links, they can all be used to build protection software, licensing programs, and more. If you have any questions please let me know, and remember that I only authorize whitehat/legal uses for all of my programs, code, and tutorials.
(Mar 23, 2024 05:20 PM)Hackers Wrote: There are 3 total tools, for 64bit original programs.
1) DIY codebase, using a header include - for best results, you use this by compiling Bubble, then once compiled open that up, type in your filepath (to original program), press enter. Once done, compile Pop and this is your final program.
2) Full release, with an auto module unloading feature. Usage is to open Bubble.exe, enter filepath & press enter - no compiling needed. However, remember that this is a public program and POC.
Option 2 also has a dll/module whitelist. this means only some libs can load in, so if you are using libs that are not on the whitelist, you should either use option 1 (or 3 below) - or msg me and I'll send you a new copy w/ your requested module whitelist.
3) Same as option 2, but without the auto unloading tool / no dll whitelist requirements.
For the other links, they can all be used to build protection software, licensing programs, and more. If you have any questions please let me know, and remember that I only authorize whitehat/legal uses for all of my programs, code, and tutorials.
ı dont understand :)
DO NOT DEAL WITH THIS MEMBER
(Mar 24, 2024 10:29 AM)C4nlyne Wrote: ı dont understand :)
Do you have any specific questions? Happy to help :)
(Mar 24, 2024 10:29 AM)C4nlyne Wrote: ı dont understand :)
He did lay out exactly what it means. What was it that you dont understand?
(Mar 24, 2024 10:32 AM)Hackers Wrote: Do you have any specific questions? Happy to help :)
is this a Fud maker program ?
and how will I use it how will I use it with the codes you gave me what can I do encryption by doing to hide the virus file
DO NOT DEAL WITH THIS MEMBER
Mar 25, 2024 04:33 AM
(This post was last modified: Mar 25, 2024 04:33 AM by Hackers.)
(Mar 24, 2024 01:03 PM)C4nlyne Wrote: is this a Fud maker program ?
and how will I use it how will I use it with the codes you gave me what can I do encryption by doing to hide the virus file
Please make sure you read the TOS:
Quote:Bubble Pop Crypter may only be used for personal, educational, research use cases on your personal or otherwise authorized devices, for "whitehat", legal purposes only. The software is a proof of concept for reconstructing an unencrypted program and pushing directly to calculated memory addresses, in runtime.
I don't authorize the use of my software with virus files, and I don't offer BH support / help.
You are fantastic!!! I'm looking at it, I'm reading the code but logically it's completely different from the structures of other codes. It works great. I have to learn!!! thanks nodes you are great!!!
DO NOT DEAL WITH THIS MEMBER
(Mar 25, 2024 03:11 PM)White_Inky Wrote: You are fantastic!!! I'm looking at it, I'm reading the code but logically it's completely different from the structures of other codes. It works great. I have to learn!!! thanks nodes you are great!!!
You're welcome & I appreciate the comment :)
I had a feeling you would like this one - it should help you move on from the tmp file formats to this more advanced PE construction method!
Best of luck
Really cool! Will take a look at the source when I have some time later.
DO NOT DEAL WITH THIS MEMBER
Mar 25, 2024 03:53 PM
(This post was last modified: Mar 25, 2024 03:53 PM by Hackers.)
(Mar 25, 2024 03:49 PM)Zher0 Wrote: Really cool! Will take a look at the source when I have some time later.
Thanks!
Definitely recommend checking it out w/ the DIY code - One difference for the DIY versus the compiled program is that the compiled version uses a resource file, and the DIY uses a header include. For obvious reasons, header include / re-compile per crypt is the best option :)
the other main difference is that I removed the dll unloader code from the DIY source release, but you can add similar into the code from my thread here:
https://hackforums.net/showthread.php?tid=6266289
I also recommend this POC / thread of mine:
https://hackforums.net/showthread.php?tid=6266052
(Mar 23, 2024 06:29 AM)Hackers Wrote:
Bubble Pop Crypter v0.0.1
TERMS OF SERVICE
Bubble Pop Crypter may only be used for personal, educational, research use cases on your personal or otherwise authorized devices, for "whitehat", legal purposes only. The software is a proof of concept for reconstructing an unencrypted program and pushing directly to calculated memory addresses, in runtime.
Version 0.0.1
Downloads:
Want to do it yourself? You'll score better ;)
These versions use a header file include instead of a resource file & will require you to have a C++ compiler:
Code DIY Mirror 1:
https://www.mediafire.com/file/9cikwcwg3t8mex8/Bubble-Pop-DIY-Source-Code-Release-v0.0.1.zip/file
DIY Mirror 2:
https://mega.nz/file/Vv1VHa7C#M5O_nMFh0AKaIkW8pW9RbDeaT-KxFpRdpCAAaCUcfdc
Choose 1 mirror download for v0.0.1 compiled programs (see note below) :
Code Mirror 1:
https://mega.nz/file/9i8nSQYR#D5VLN7TIZV95-Ita7Bv2e3m6G9v4-30R4Vdksz7tTLc
Mirror 2:
https://uploadnow.io/f/TP3rFz1
Mirror 3:
https://www.mediafire.com/file/vgbbq38or3g7ukq/BubblePop-Public-0.0.1.zip/file
Mirror 4:
https://mega.nz/file/NiM11KrZ
key: D5VLN7TIZV95-Ita7Bv2e3m6G9v4-30R4Vdksz7tTLc
Mirror 5:
https://www.mediafire.com/file/a1abcadtrysqbpu/BubblePop-Public-0.0.1%25282%2529.zip/file
Mirror 6:
https://www.mediafire.com/file/p50rn34x4e7f8v8/Bubble.exe/file
https://www.mediafire.com/file/ehazwg2md8ahd2f/Pop.exe/file
Mirror 7:
https://filebin.net/93amlszc9u1jt0gt
Auto DLL Unloader
- the auto DLL/module unloader function allows the program to kickout unwanted listeners, tools, etc
- this can cause problems if you are using unknown DLLs
- you can PM/convo me with a list of modules you need whitelisted & I'll send you a custom Pop.exe for that whitelist
Alternatively, download the Pop-NoUnload.exe for the version that doesn't use this feature:
Code https://mega.nz/file/xm9yXAqI#MiAstLXymAkQbadsCZLfvtK-MvTvriv-WbQnWAOkYSQ
DISCLAIMER: Bubble Pop Crypter does not encrypt or alter your program. This is a proof of concept software! I shall repeat: Bubble Pop Crypter does not use encryption. You can see the results for yourself and try it out if you have doubts!
We're safe, bub!
Results:
v0.0.1 is the POC as-is, with 0 encryption. We still achieve 2/72 on runtime.
v0.0.2 will include encryption for scantime as well. This is due to me modifying my original program to use a resource file instead of a header include and not having time this morning to add in the new encryption model. However, this makes it more interesting because as you will see, the tool is still safe.
Remember, Bubble Pop is for personal, educational, research purposes only for legal uses. You must agree to the terms of service to use this software on your personal devices. The core functions of this software are from my project Lucid Dream DMT (Data Management Tool). It is a no-encrypt crypting project I started a while ago that has maintained 2-4/70+ on VT runtime scans for a long time now.
Enjoy More Software, Source Code, Tools, and Tutorials
https://hackforums.net/showthread.php?tid=6265944
https://hackforums.net/showthread.php?tid=6266404
https://hackforums.net/showthread.php?tid=6265473
https://hackforums.net/showthread.php?tid=6265665
https://hackforums.net/showthread.php?tid=6266377
https://hackforums.net/showthread.php?tid=6264320
https://hackforums.net/showthread.php?tid=6263383
https://hackforums.net/showthread.php?tid=6264286
https://hackforums.net/showthread.php?tid=6264522
https://hackforums.net/showthread.php?tid=6266052
https://hackforums.net/showthread.php?tid=6265700
https://hackforums.net/showthread.php?tid=6266289
https://hackforums.net/showthread.php?tid=6265197
https://hackforums.net/showthread.php?tid=6265430
Are you offering the source code at all for review? Would love to see how you got such great results.
|
