Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

C 

Builder & Stub with GUI / C & C++ / Downloader(1-4kb)

I was going to make a tutorial for a builder/stub, which would include the GUI but the source itself is quite self explanatory.

Simple downloader/builder, with GUI.
Stub size would be 1kb(!) but because of the builder and resource stuff it's 4kb.
It's not FUD, it's using the most detected way to download file - which is URLDownloadToFileA ;)

It adds the URL as icon to the stub file. Stub then reads it's own 'icon' and downloads & executes the file.

Builder is C++ and the stub is C. If you're going to add C++ code to stub, remember to configure the linker..

TODO:
Encrypt the URL
Add option to change name for the saved file
Better error handling
...and of course, make it FUD. Don't use URLDownloadToFile.
+ Lots of other stuff, this is just an example

Screen of the builder:
[Image: HE7HoZA.png]

Download sources: http://www.sendspace.com/file/8fajrx

Nothing special, but good example for total beginners.
Ps. code could be better, I've just got into GUI's with resources.

Edit: No uppercase letters on the link! By default UpdateResource adds PADDINGXX to the resources, and the stub will remove all uppercase letters. Better solution would be remove all characters after *.exe but it was just a temp solution :P
RtlCreateIrlObjectA
Why would you show how to download the most detected way? Why not use WinInet or sockets?
You're also using a static name, the builder should allow the user to input the file name to save as, save directory and so on. I know this is just meant to be a skeleton but it could have been done much much better. You also didn't provide a command line argument options, and use CreateProcess instead of shellexecute.
(Jan 29, 2014 04:00 PM)Nichole Wrote:  Why would you show how to download the most detected way? Why not use WinInet or sockets?
You're also using a static name, the builder should allow the user to input the file name to save as, save directory and so on. I know this is just meant to be a skeleton but it could have been done much much better. You also didn't provide a command line argument options, and use CreateProcess instead of shellexecute.

Because it's an example/poc how to make a builder with gui & stub, made in one hour. Yes, it could've been done better - but it shows the main points. Who ever wants to use this/is learning from it, probably will make it better, at least I hope so. Also if it was a perfect & FUD example for a -good- downloader, some people would just directly copy & shit it, and sell to someone.

And please, contribute something before nitpicking a basic tutorial. 🙂
RtlCreateIrlObjectA
(Jan 29, 2014 04:18 PM)Qmz_ Wrote:  Because it's an example/poc how to make a builder with gui & stub, made in one hour. Yes, it could've been done better - but it shows the main points. Who ever wants to use this/is learning from it, probably will make it better, at least I hope so. Also if it was a perfect & FUD example for a -good- downloader, some people would just directly copy & shit it, and sell to someone.

And please, contribute something before nitpicking a basic tutorial. 🙂

I contribute my knowledge, what more could you want?
This looks pretty nice, thanks for sharing.

Hey there,
If I have helped you or if you just enjoy my posts, please consider donating bitcoin to me 1DpL2kcxuidEsjt2MMN2AYufcVoXbi3v2X

[Image: FtwuQgr.gif]
Thank You very Much keep going am N00b as hell XD
Great job Dude I like it a lot :) !!!!
Thanks for sharing your project with us to play with
Thank you. I'm thinking to start learning c++. Thiis motivates me
No Sig
should of encrypted the source code ahha stupid google crhome dont even let you download malicous things lol getting rid of this now to many gay things on it now


oh lopok at me over reacting ahha needted to change a few settings thank god ima down load it know thanks
yep got the same chrome error here,interested in seeing the source code
It appears that this code is somehow interfering with the Google Chrome Botnet.
(Mar 9, 2014 08:39 AM)Eight Wrote:  It appears that this code is somehow interfering with the Google Chrome Botnet.

Yeh the solution is to login to your HF account with firefox or ie


Possibly Related Threads...
Thread / Author Replies Views Last Post
[C] by SIM-4717218Aug 21, 2020 11:33 AM 0 161 Aug 21, 2020 11:33 AM
Last Post: SIM-4717218
[C] by jBarrelFeb 14, 2020 03:47 AM 11 400 Feb 14, 2020 03:47 AM
Last Post: Backbone
[C] by jimcola99Jan 14, 2020 03:29 PM 1 187 Jan 14, 2020 03:29 PM
Last Post: akali