Tuesday, June 29, 2010

My Simple Crypter


I'm releasing my simple crypter to public. Well there is not much in this crypter as i am looking foward for any suggestion to improve it. It's totally fud especially from AVIRA! Yeah, i know u like it. Please only scan on novirusthanks.org to keep it fud.

I'm saving some money for my new semester, plz do the survey it's how i making money plus that will encourage me to update the crypter. Here is the download link

-Link removed-

I am going to focus on update version. Going to sell once it complete.
For compatibility, try public one.

Monday, June 28, 2010

Release my Public Crypter



I am working on this crpter 2 months ago, but due to some problem i didnt continue this project. Ok this crypter use AES encryption with some extra features such as

-usb spread
-av site blocker
-antis
-add to startup

Bad gui, i'm not good at it. I'm releasing this because i have other things in my mind,might continue developing it in the features. It's only been detected by Avira, enough of it so here you go.

http://adf.ly/3akd

Tuesday, June 22, 2010

1-Click Cleaner



I made a 1-click cleaner in vb. Well basically this app just clean your recycle bin, yeah very useful for those who are lazy enough to move around their mouse, oops it's me of coz. With this simple app, you can skip ->right click-> empty recycle bin,just with a click and it will empty your recycle bin. There is no big deal with this app, i am just using it for personal usage. Incase someone might be interested with it ^^.

http://adf.ly/3Oym

Monday, June 21, 2010

New Type of Phishing Attack?

Hai, first of all i was busy for the past two weeks. Have not been able to update my blog for a while. Anyway let us go straight foward to our topic. Recently a new type of phishing attack known as Tabnabbing are being used.

How Tabnabbing works?

1. The attackers must have website

2. The user will visit attacker site which is look like a normal site.

3. The user switches from this attacker site tab and opens another site in new tab, leaving this attacker site tab open. Assume that user opens many tabs.

4. While the user browses another site, the attacker site which is left open in previous tab changes or redirects itself to a phishing page say Gmail login.

5. Now, when the user returns back to this tab, he may not remember exactly which site he had opened. He will now see fake Gmail login and will think that he has left this Gmail login tab open.
So, now, without checking out url of the site, the user is most probable of logging in to his account.

6. Once we enter our login user id and password in his/her phisher, this information is sent to their inbox or any online account. Thus, our account hacked using this Tabnabbing

Sunday, June 20, 2010

Ebooks

Here is some collection of books worth reading.

No Tech Hacking

Thursday, June 10, 2010

Simple Crypter Refud

Hello. Here is another crypter refud by some member on some famous forum. Btw this crypter is detected by bitdefender and nod32 only.
Enjoy!

Not FUD anymore!

-Link Removed-

Monday, June 7, 2010

My crypter (update-2)

I been working a while on my crypter! It took me one month to change the building method. I think i will be getting pimples because of stress lol~
Anymore here is some preview on my crypter, plus it's only for my personal usage.

Features

-Fud scantime & runtime
-melt function
-spreading
-site blocker
-It bypass Avira! Ya, u heard me..it bypass avira the most annoying AV ( I'm using Avira btw)

stub size - 24kb
scan result - 0/20

Going to continue this project later. For now, enough is enough. Wait till another detection comes out ^^

Tuesday, June 1, 2010

Quick list on how to bypass antivirus

1. Encryptors/Compressors:

Most of us would think this should be the easiest way to UD (Undetect) a Trojan...unfortunately, it is not. The problem is that most people use the same Trojans and Packers so often that Anti-Virus software knows pretty much all the signatures. They use UPX, PECompress, AsPack, Mophine etc. Again, none of these work because all the signatures have been flagged. The best way this option will work is to find lesser known Packers to use with. Unless you want to buy private packers.

2. Byte Adders:

This technique allows you to add junk bytes to your Trojan as to confuse Anti-Virus software. It does this by moving the code around inside the executable as the bytes are being added. This means that the signature will not be in the place the Anti-Virus expects it to be. This will make your server fud, but sometimes it just might corrupted your server.

3. Source:

This the very easy way to make your server fud. If you have source for crypter, just mod it and make it private for your own usage! This will keep your tools fud for a long time. Take as example, my binder been fud for 2 months and it's private.

4. Manually packing your server

This is the hard way but very effective! You will be needing Ollydbg to do this. I'm not familiar with this method, you need to find info yourself.

5. Find the signature which been flagged by AV

Most of Av wiil tagged some offset in app. U can find it manually by splitting it with d-split. When you found the signature, edit it with Hex Editor.

You can apply those tips, but I suggest you do some research on the net to get better understanding.