DO NOT DEAL WITH THIS MEMBER
Jan 27, 2020 12:27 PM
(This post was last modified: Jan 27, 2020 12:28 PM by Jean-Jacques Rousseau.)
Public beta for net2native.tk.
Your bot or RAT is .NET, but your crypter only supports native files? Or you code injection works for native exe, but never for .NET exe?
Use net2native.tk, which will do it for you.
Tested with:
- NET 2.0
- NET 3.0-3.5
- NET 4.0-4.8
Features:
- No malicious code ( https://antiscan.me/scan/new/result?id=9rLJFd2J4nHx)
- No drop to disk
- Extremely stable
- No suspicious API calls
Stub size: 7-11KB.
Public beta starting now.
Use key:
"PUBLICBETA"
http://net2native.tk/
I'd like everyones opinion before I close the beta and start sales. Thank you!
DO NOT DEAL WITH THIS MEMBER
(Jan 27, 2020 12:42 PM)M0HX Wrote: Jean-Jacques Rousseau Id love to try it out. about year ago or so, someone here had similar service but it only supported .NET 2.0
I wonder how this works lol. pretty awesome!
Iv few more questions:
does it support 64-bit executables as well?
what is the output lang?
is the output 32 or 64 bit?
Thanks, I'll try with few .net rats and a native crypt.
Just tried 64 bit .NET executable, worked for me, though I do not have time to test all scenarios, that's why there's an open beta :).
The output is a native file. The code is written in C++.
The output is a 32 bit file.
Previous projects I looked at did all of this so very wrong, no wonder they only supported .NET 2.0 if they ripped from internet. Also, the execution is made in memory. Nothing is dropped to disk. This is unique.
DO NOT DEAL WITH THIS MEMBER
(Jan 27, 2020 01:05 PM)M0HX Wrote: tested 32bit .net rat and it works flawlessly! the crypted file works as well just as it should be:
![[Image: zCHiVqj.gif]](https://i.imgur.com/zCHiVqj.gif)
last question: does the target computer require .NET framework in order to run the native output? my guess is that it should?
Sadly, it requires a .NET framework. This shouldn't be an issue for execution rates however, since most computers have that installed.
I'm glad it works for you :D
Works flawless , good luck on sales.
Tested ASyncRAT with this, and as the others have stated, works perfectly! Great job with this, hard work has paid off! :)
Is this a c++ binary that hosts the CLR and executes the binary packed inside in memory?
Regards,
Paskowsky
DO NOT DEAL WITH THIS MEMBER
(Jan 28, 2020 01:38 AM)Paskowsky Wrote: Is this a c++ binary that hosts the CLR and executes the binary packed inside in memory?
Regards,
Paskowsky
In short, yes.
![[Image: p_1488ml4g51.png]](https://i.top4top.io/p_1488ml4g51.png)
faced this issues it auto download with the .bin when i change it to exe it wont work well 😵
DO NOT DEAL WITH THIS MEMBER
Jan 28, 2020 10:59 AM
(This post was last modified: Jan 28, 2020 12:30 PM by Jean-Jacques Rousseau.)
(Jan 28, 2020 09:54 AM)Seif Mahmmued Wrote: ![[Image: p_1488ml4g51.png]](https://i.top4top.io/p_1488ml4g51.png)
faced this issues it auto download with the .bin when i change it to exe it wont work well 😵
I need more information. What are you using? .NET framework installed? This isn’t a fault of my code since if it would fail, it would do so silently.
Unless there are no new feedbacks, I am ready to close beta soon and prepare for sales.
Thank you for those who have came with feedback.
Works flawlessly. Good luck mate with sales.
DO NOT DEAL WITH THIS MEMBER
Thank you.
Key removed, and public beta therefore closed. Prepare for sales thread soon.
DO NOT DEAL WITH THIS MEMBER
This service has been moved to https://hackforums.net/showthread.php?tid=6045369
Thank you for those who have participated in the open beta and helped improve the product.
So is it really converting your net file to native. or is it just making a native downloader that downloads your net file?
I'm sure he use, CorBindToRuntimeEx,GetDefaultDomain,QueryInterface,SafeArrayAccessData,Load,Invoke
so it's a classical .net bootstrapper exe
(Feb 18, 2020 09:53 AM)M0HX Wrote: it will wrap it into c++ bin, it will still require .NET framework which it is initially depended on, so no It won't magically convert it to native code. 👍
edit: also It's not a downloader / dropper. It executes from memory so nothing is dropped to disk. the file will be treated as native just like any native file.
Thank you mate <3 for answering in detail !!!
|