Aug 22, 2016 10:18 AM
(This post was last modified: Aug 24, 2016 01:12 AM by SIM-2626129.)
imgcrypt
an almost FUD crypter source
[x] uses cloud image based storage method [x]
[x] works with native / .net apps [x]
[x] should bypass some major AVs on Runtime [x]
[x] only 1 scantime detection [x]
[x] noob friendly (easy to understand) [x]
Hey guys! What's up! For you who remember me, [ZERO] here and for those who don't, I'll just tell you that I was around HF since 2009 and at that time
I was making and releasing all sorts of tools here at HF (0 Crypter, Imperium RAT, Cybershark Keylogger). I recently came back here after a loooong break
(break happened mostly cause I lost my account here) and decided to start giving back to the community once again. Later in this thread,
I'm going to share some of my old threads from my old account, just in case somebody would need any of the methods I've shared in
the past (they are mostly in VB, but don't blame me, I was still learning C# back then). 👍
So, what do we have here now?
Well, basically I decided to test myself and see if I can make a FUD crypter once again and well, I almost had total success with it,
but as I can see, many things have changed in the meantime and bypassing AVs at the runtime is kinda different now.
What kind of a crypter this is?
It's a normal .net 2.0 crypter, but with a twist (at least in my head)! It transforms files into images, which can then be uploaded to imgur
(didn't have the patience to make this, I leave this to you guys) and later on decrypted inside of a stub, making it something like crypter/downloader.
Is it really FUD (OMG OMG OMG)?
Yeah, should be almost FUD, only one scantime detection from F-Secure (I know you guys will figure this one out, it's a piece of cake)
and at runtime, it should be mostly FUD. It isn't from AVG, that I know for sure, but it is for ESET (yay!)
You are crazy! Why are you not selling this?
Guys... I have a job lol. I don't need money from this. This was only a challenge for me and since I did it, I see no point in it anymore.
Download maybe?
Not anymore bitches. Thank those kids that trashed this thread and -repd me. Goodbye losers, rot in hell.
Looks nice man, Posting for maybe later.
We need more guys like you lol. Thanks.
Thanks you for this post, this will help me alot :)
No probs, hope you guys find it useful. :)
yhe remember you from the old days
Be Nice For Once 15hVUVz7xA4kazHdk2BuErENGCskVwjYXP
DO NOT DEAL WITH THIS MEMBER
(Aug 22, 2016 11:34 AM)SIM-2626129 Wrote: No probs, hope you guys find it useful. :)
How do I package this? I'm a complete noob, honestly. Been wanting to actually be able to distribute a RAT to my teachers this year (did it Freshman year, worked out great.) No reliable crypters and if there are, they have to be paid for, which I really don't have the money for right now.
Definitely going to be using this to hide my porn. Thanks OP!
(Aug 22, 2016 05:25 PM)Cresent Wrote: How do I package this? I'm a complete noob, honestly. Been wanting to actually be able to distribute a RAT to my teachers this year (did it Freshman year, worked out great.) No reliable crypters and if there are, they have to be paid for, which I really don't have the money for right now.
Weeeell, long story short, use imgcrypt to create an image from your rat exe and then upload that to imgur, copy the link, paste it into imgcrypt-stub line where it says: string file = "https://imgur.com/au12456"; - something like that. Build imgcrypt-stub and there you have it.
Aug 23, 2016 01:30 AM
(This post was last modified: Aug 23, 2016 01:31 AM by Aristocles.)
The source code is so messy I'm starting to guess you are new to C#. Naming Conventions, Inherits, refactoring etc y u no do this ?
quick cancer list :
https://github.com/brstefanovic/imgc/blo...er.cs#L195 -> int num99999 FTW wtf dude looks like decompiled code to me
https://github.com/brstefanovic/imgc/blo...rm1.cs#L35 -> no need to use BGWorker if you code well, goto https://hackforums.net/showthread.php?tid=5176588 or devu
https://github.com/brstefanovic/imgc/blo...ram.cs#L55 -> this code is not wrong but the fact that you are over-abusing of static shitfields makes it bad.
So message to every new C# user : do not use this project as a base, it contains bad habits and bad coding style.
Assert failure(PID 10704 [0x000029d0], Thread: 10960 [0x2ad0]): pBuffer != NULL
Aug 23, 2016 01:46 AM
(This post was last modified: Aug 23, 2016 01:53 AM by SIM-2626129.)
(Aug 23, 2016 01:30 AM)Aristocles Wrote: The source code is so messy I'm starting to guess you are new to C#. Naming Conventions, Inherits, refactoring etc y u no do this ?
quick cancer list :
https://github.com/brstefanovic/imgc/blo...er.cs#L195 -> int num99999 FTW wtf dude looks like decompiled code to me
https://github.com/brstefanovic/imgc/blo...rm1.cs#L35 -> no need to use BGWorker if you code well, goto https://hackforums.net/showthread.php?tid=5176588 or devu
https://github.com/brstefanovic/imgc/blo...ram.cs#L55 -> this code is not wrong but the fact that you are over-abusing of static shitfields makes it bad.
So message to every new C# user : do not use this project as a base, it contains bad habits and bad coding style.
No I'm not new, I simply don't care. I wanted to try to make a FUD crypter, I did it, that's all that matters to me. Was I paid any money to make this? No? Why should I bother with proper coding styles and naming conventions? Anyway, as always a wild smart ass appears, so be kind and stay off the thread if you came here to flame and under appreciate others work.
https://github.com/brstefanovic/imgc/blo...er.cs#L195 -> int num99999 FTW wtf dude looks like decompiled code to me ---> Say that to the guy who coded that RunPE, not me.
https://github.com/brstefanovic/imgc/blo...rm1.cs#L35 -> no need to use BGWorker if you code well ---> your brain stopped working? where do you see a background worker?
https://github.com/brstefanovic/imgc/blo...ram.cs#L55 -> this code is not wrong but the fact that you are over-abusing of static shitfields makes it bad. ---> Really? try making it all fuzzy and organized and scan the file online. Helllooooo Avira.
Quote:So message to every new C# user : do not use this project as a base, it contains bad habits and bad coding style.
Nobody said that this should be used as a base project. Read the OP. This is an unfinished crypter containing currently FUD methods. This source is only to be used for ideas when making crypters, not actually making a crypter out of this.
Stupid kids will be stupid.
what the peb patch doing here its not really needed
Be Nice For Once 15hVUVz7xA4kazHdk2BuErENGCskVwjYXP
Fact is, imgrypt is sloppy, in all the possible way. You entertain it as a noob-friendly project so ppl can use it and modify it but people shouldn't even fork it, the code style is bad, you give like 0 credit to the RunPE original coder, you don't try to clean its code nor to refactor it. I wouldn't recommend using this source anyway.
Assert failure(PID 10704 [0x000029d0], Thread: 10960 [0x2ad0]): pBuffer != NULL
(Aug 23, 2016 05:23 AM)Aristocles Wrote: Fact is, imgrypt is sloppy, in all the possible way. You entertain it as a noob-friendly project so ppl can use it and modify it but people shouldn't even fork it, the code style is bad, you give like 0 credit to the RunPE original coder, you don't try to clean its code nor to refactor it. I wouldn't recommend using this source anyway.
Sorry, but nobody asked you about anything. Stay of the thread flamer.
So you don't accept criticism right ? You thought you would come back with a sloppy project and ppl would say thank you amazing project, am I right ? I think I am.
Assert failure(PID 10704 [0x000029d0], Thread: 10960 [0x2ad0]): pBuffer != NULL
Great source code for the collection thanks
![[Image: vibesignature.gif]](https://i.ibb.co/8LvxwtYQ/vibesignature.gif)
The Brotherhood Vibe Legends
|