Spoof Call and Spoof SMS set any caller ◆ Cheap KYC Verifications & Openups ◆ Anvilpoint CyberOps - Hacker for Hire ◆ ProxiesFood: Unlimited Residential Proxy ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Tech Coding Software Development › [C#] Block file removal with a simple trick

New Reply 
C# 

Block file removal with a simple trick
Paskowsky
Paskowsky Offline
Unknown coder
**
HF l33t
Posts:
174
Threads:
19
Credibility:
100
Popularity:
49
βytes:
β 0
Game XP:
0
Jun 11, 2020 03:47 AM
Block file removal with a simple trick

[Image: errormessage.png]

How it works?
  • Use “CreateFile” to get handle from file path
  • Look for processes where to “inject” the handle
  • Use “DuplicateHandle” to duplicate the original handle in the selected process
  • Close the original handle

You can check out the code in my blog post here!

Or directly on Gist!

Regards,
Paskowsky
Paskowsky's coding service
- C# - VB.NET - NodeJs -
Accord
Accord Offline
[bin@HF:]
***
HF l33t
Posts:
1,510
Threads:
15
Credibility:
400
Popularity:
200
βytes:
β 0
Game XP:
4,545
Jun 11, 2020 04:07 AM
Another interesting release, great job paskowsky!!
/3f577][Image: 2eb99610.gif]
SaketSaket
SaketSaket Offline
Decide... Commit... Succeed... ;)
***
HF Ub3r
Posts:
1,275
Threads:
23
Credibility:
000
Popularity:
1,752
βytes:
β 163
Game XP:
0
Jun 11, 2020 01:16 PM
Nice work... Keep posting... keep rocking...
BTC - bc1q3efew3yzfwhdz290dafykaw0a2w56g2j69g2c6
ETH - 0xf1c873217032468990D3313da6509D1b813c4671
USDT - 0xf1c873217032468990D3313da6509D1b813c4671
PP - [email protected]
7
7 Offline
✟ цифровой бог ✟
**********
Legends
Posts:
6,553
Threads:
345
Credibility:
13500
Popularity:
4,050
βytes:
β 50.6
Game XP:
7,386
Jun 11, 2020 01:18 PM
Yet another layer of simple persistence. Thanks OP
[Image: vibesignature.gif]
The Brotherhood Vibe  Legends
FrenchTech
FrenchTech Offline
Hacking the Gibson
*
HF l33t
Posts:
9
Threads:
1
Credibility:
100
Popularity:
8
βytes:
β 0
Game XP:
0
Jun 11, 2020 04:15 PM
Interesting code! Thanks for sharing.
VisualSoft
VisualSoft Offline
Repping you back !
***
HF l33t
Posts:
3,464
Threads:
19
Credibility:
7100
Popularity:
1,138
βytes:
β 0
Game XP:
0
Jun 12, 2020 03:35 AM
Interesting release, Keep up the good work.
[Image: 6xBycLk.gif]

Website: nomorehome.work
Klonopin
Klonopin Offline
#!/bin/bash
**********
Legends
Posts:
2,640
Threads:
67
Credibility:
5201
Popularity:
1,929
βytes:
β 1,190.36
Game XP:
1,977
Jul 27, 2020 09:47 PM
Great share OP!

interesting post, keep up with the grind
<~buy this signature space~>
looking for work
tux1
tux1 Offline
rep 4 rep
*****
HF Ub3r
Posts:
10,922
Threads:
54
Credibility:
100
Popularity:
1,202
βytes:
β 0
Game XP:
3
Jul 29, 2020 01:56 PM
Interesting trick, thanks for sharing!
Hey there,
If I have helped you or if you just enjoy my posts, please consider donating bitcoin to me 1DpL2kcxuidEsjt2MMN2AYufcVoXbi3v2X

[Image: FtwuQgr.gif]
Scapula™
Scapula™ Offline
Alea jacta est
**
HF Ub3r
Posts:
418
Threads:
6
Credibility:
300
Popularity:
835
βytes:
β 0
Game XP:
0
Jul 29, 2020 09:25 PM
Nice trick, thanks for sharing.
Freak_OG
Freak_OG Offline
[closed@HF:]
Posts:
315
Threads:
45
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
135
Jul 30, 2020 12:37 AM (This post was last modified: Jul 30, 2020 12:37 AM by Freak_OG.)
this is great! Wow such rootkit many haxes, wow, thanks bro!
Exalted
Exalted Away
? ?
***
HF l33t
Posts:
2,972
Threads:
70
Credibility:
1600
Popularity:
1,592
βytes:
β 0
Game XP:
966
Jul 30, 2020 12:38 AM
Interesting, thanks for sharing this OP. Keep them coming!
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
[Shell] by zaskApr 14, 2017 10:52 AM 0 122 Apr 14, 2017 10:52 AM
Last Post: zask
[C] by crosseraJan 9, 2016 01:47 PM 9 211 Jan 9, 2016 01:47 PM
Last Post: 0xDEAD10CC
[C#] by ImmortalAug 1, 2015 02:55 PM 15 580 Aug 1, 2015 02:55 PM
Last Post: Immortal