Return Styles: Pseud0ch, Terminal, Valhalla, NES, Geocities, Blue Moon. Entire thread

WTF did I made?

Name: WWW.NET 2011-08-28 20:45

So I learned AutoIt a while back, and now I've created a script that disables WFP and UAC silently and you won't notice unless you know exactly what size some of your critical system files should be, Especially when you're using WIN_7 and notice that nothing happens when you click on "FireWall" in your OEM C-P.

And once set, it dictates processes in kernel mode, so only another kernel mode driver can unload my script that can't be seen or stopped by the normal task manager.

When first run, it highjacks one of svchosts processes and lies dormant until you try to switch your PC off, thats when all HELL breaks loose "And if you just unplug it, it'll still be there.. waiting" , it'll intercept the windows shutdown message and undo the shutdown initiation and unload some dlls and disable error reporting and it'll even activate your Win_OS if its not.

It even changes the Boot Screen when run in XP, so that the microsoft copyright reads "© Microsoft Shit" and after you reboot, it replaces explorer and can basically do stuff you want it to do, I was originally making some kind of call home anti-theft script and ended up with a crude rootkit, I didn't think AutoIt was capable of this shit but things are possible when using drivers made with MASM32.

Any body interested in helping me develop this shit?

Name: Anonymous 2011-08-28 20:51

September is near.

Name: Anonymous 2011-08-28 21:06

Source code please.

Name: WWW.NET 2011-08-28 21:14

@3, Sounds more like you just wan't the source and will probably never contribute so no faggot.

Name: Anonymous 2011-08-28 21:23

>>2
Haven't you heard, lithpfaggrampth? It's eternal September. We have won. Fuck off and die.

Name: Anonymous 2011-08-28 21:25

>>4
Hey, I've never used this language but I'm willing to give it a shot. If I make any changes I'll post them here.

Cool tool anyway, thanks for showing it me.

Name: WWW.NET 2011-08-28 21:42

@6, Glad you found it interesting, but if you don't have any exp, then giving you the source will be like giving a dog a gun, and explaining to the dog how to use his new gun isn't something I feel like doing.

Name: Anonymous 2011-08-28 21:56

>>7
Hey, I know a little perl and and some visual basic, but don't tell anyone. I reckon I could understand what it was doing well enough. I can see you just want to keep it though, fair enough.

You probably won't find many overtly blackhat people here, and I doubt you'll find anyone who already knows the language. Your best shot if you want to get someone to help you develop it is to just throw it out there. You seem to be doing quite well already anyway.

Name: Anonymous 2011-08-28 23:19

I like this man.

Name: WWW.NET 2011-08-28 23:49

@8, While your philosophy sounds legit, when's the last time any of use can remember stumbling across the source code of anything like what we're talking about?

Not even once.

Oh, wait.. Now that I think about it, I found the source to StuxNets rootkit shortly after reading about it being leaked.

Name: Anonymous 2011-08-29 0:50

>>10
s/Not even once/Every goddamn day/

Name: Anonymous 2011-08-29 0:58

Cool. All the programmers left. Now we can enjoy /b/ quality thread...

Name: Anonymous 2011-08-29 2:05

>>11
I know right? This guy must be new to the internet.

Name: Anonymous 2011-08-29 2:36

>>12
It was already a /b/ QUALITY thread the moment you created it. Woho, so you wrote another run-out-of-the-mill rootkit. Great job, now all that is left is to unleash it on humanity and watch it wreak havok. I bet you're mother would be proud of what an upstanding civilian you have become.

Name: Anonymous 2011-08-29 3:02

>>14
You're trying to troll me, right? Do I look like >>1 ?

Name: Anonymous 2011-08-29 4:26

>>15
Yes.

Name: Anonymous 2011-08-29 4:56

>>5
So why not spam the link to /prog/ on /b/ and just finish off this place for good. It seems like nothing less will satisfy you.

Name: Anonymous 2011-08-29 5:07

>>17
I will now go to sleep. When I wake up, if the front page is still shitty... I'll fucking do it.

Name: Anonymous 2011-08-29 5:23

>>18
bump for this

Name: Anonymous 2011-08-29 5:25

>>1
You sounded intelligent until you've mentioned AutoIt.

Name: Anonymous 2011-08-29 5:45

>>1 AutoIt

Name: n3n7i 2011-08-29 6:23

AutoIt not too bad =)
Modd'ed myself a little (~370Kb exe) clock from the Examples....

...Attach rootKit....

???

...Would rather do something 'nicer' though
...Visual alerts // Alternate functions??

Eg Clock moves randomly // does a little spin or something
>for> computer being Port Scanned / Remote User logon / ??

Name: Anonymous 2011-08-29 7:11

>>1
Don't remove processes from the process list unless you actually kill them. It makes the kernel crash.

Name: Anonymous 2011-08-29 10:35

AutoIsm

Name: Anonymous 2011-08-29 11:14

This actually sounds cool but I have no experience with such low level programming (drives, not AutoIt, obviously.) Do you have a way we can talk?

Name: n3n7i 2011-08-29 21:24

I locked myself out of admin once =) something like this:

net user admin /active:yes
>Set admin password
net user admin /active:no

Name: WWW.NET 2011-08-29 22:16

@25, Its great because it Uses a very "special" kernel mode driver, so just think of AutoIt transforming into a super sayan 5 or something as soon as the drivers loaded, all of a sudden AutoIt has the capability to turn your PC into North Korea with a single call to DeviceIoControl func in kernel32, so you won't really have to worry about the low level stuff.
            
mov eax, [esi].AssociatedIrp.SystemBuffer
                  mov eax, [eax+8]
                  cmp eax, 2
                  jz iswin7
                  cmp eax, 0
                  jz notvista
                  push 0
                  pushad
                    mov eax, killethread
                    mov ebx, [eax+0260h]
                    and ebx, NOT 16
                    push ebx
                    pop [eax+0260h]
                  popad

Name: Anonymous 2011-08-29 22:20

Sounds trivial enough to do, but why bother with AutoIt, also for Windows7 and Vista, you would have to find reliable ways of disabling PatchGuard and allow you to load your drivers which last across updates (the second part is challenging).

Name: WWW.NET 2011-08-29 22:45

Well, to begin with, like I said, its a crude rootkit because in order to have it work, it needs to be run with admin privileges and it won't initiate otherwise, so the victim has to be an idiot, else it will never work, after one whole fucking year I've finally finished this fucking script and I just fucking thought it would be cool if I could find another black hat who knows autoit so we could fabricate ideas and improvements.

Like discovering how windows explorer decrypts special registry keys using CryptUnProtectData and similar stuff.

The script was originally designed by me to just call home with a perpetrators IP a year ago, it was made to lye dormant with an enticing name in a usb, so if the removable drive way stolen, it would hopefully be activated by the jackass who took it and I'd have their IP, from there, I wanted more, and ended up having it do all this crazy wicked shit and now it a fucken root kit.

Name: Anonymous 2011-08-30 0:26

>>29
WOW I'VE NEVER HEARD OF THIS CONCEPT BEFORE!

Name: Anonymous 2011-08-30 0:40

>>29
thought it would be cool if I could find another black hat
Don't you think you're giving your ``hacking'' skills a bit more credit than it is due? Well, kudos, had a good laugh.

Name: Anonymous 2011-08-30 1:17

READ SICP EVERYDAY. IT MAKES SCRIPT KIDDIES LESS ANNOYING.

Name: WWW.NET 2011-08-30 1:48

>>32
HAHAHAHAHAHAHAHHAHAHAHAAHAHAAAA!!!
you think your tough huh?
one word KEVIN MITNICK THE CONDOR.
i have rooted two mainframe servers at the same time in less than 5 seconds i have been training for 3 years.
also hacker academy grade best practices.
your firewall might be bigger than me,but i know my trojan is smarter and quicker.
my rootkit is 130 kb pure lean VB.
one keystroke and i'll deface your website.
your the one whose a nerd.i can hide in your router anytime i want you probably haven't ever touched your router settings before.
you probably have sex with your computer.
you don't even know me,and you don't want to.
you'll be lucky if your even worth my attention one look at my virii and you'll dissappear forever.
though i'd be happy to humiliate you in front of all your friends.
btw IM the expertest.
i have published in packetstorm, phrack, exploit-db, hackthissite, encyclopediadramatica, Lulzec
always 0day exploit!
im undefeated in competitive wep cracking.
im on my way to DEFCON.
go ahead and come step anytime you want.b*tch

Name: Anonymous 2011-08-30 2:04

You talk so much about programming, but you cant talk about hacking because you cant actually do anything. I run a hacked network of computers that I programmed to click on googles ads in my secret website. I even write my own viruses to make people get hacked into my network. I work at home and have a bunch of screens showing me what people on my network are doing on their screens. I can even set it so that i can see the code of their computers. can you guys do any of that? I dont think so. I bet you dont know where all the websites real hackers hang out are either? if you name them, I just might tell them that WwW.net sent you.

Name: Anonymous 2011-08-30 2:08

I'm not a group of hacker, I'm single hacker with experience of 1000 hackers, I'm single programmer with experience of 1000 programmers, I'm single planner/project manager with experience of 1000 project managers, so you are right, it's managed by a group of hackers, but it was only I with experience of 1000 hackers.

Name: Anonymous 2011-08-30 6:43

ITT: viruzmafia

Name: Anonymous 2011-08-30 9:19

>>33
HAHAHAHAHAHAHAHHAHAHAHAAHAHAAAA!!!
you think your tough huh?
two words PEDO PHILE.
i have taken out two lolis at the same time in less than 5 seconds i have been training for 3 years.
you might be the FBI,but i know im smarter and quicker.
i only raped pure and clean underaged children.
once raped by me they'll never forget.
your the one whose a normal.i can get loli anytime i want you probably haven't ever been with loli before.
you probably have sex with your computer.
you don't even know me,and you don't want to.
you'll be lucky if your even get my screenshot having hot sex with them
though i'd be hapy to humiliate you in front of all your friends.
btw IM the best.
i have raped loli in maine, new hampshire, new york,utah, colorado,florida,bahamas.
never get captured by the local authority!
im undefeated in competitive Loli Lovers Association/LLA.
im on my way to ULC.
go ahead and come step anytime you want.b*tch

Name: WWW.NET 2011-08-31 6:12

Every post pretending to be me after post 29 is a huge faggot.

Anyway, I'm still monitoring this thread and if anybody want's to get involved with my project, hit me up through 27.

Name: Anonymous 2011-08-31 7:33

>>38
PARADOXES

Name: WWW.NET 2011-08-31 8:55

      _く`)<´ ̄ ̄` 、
      └‐ァヘ ,ィ∠ニ_    \
       / / ‐-‐  ̄|ィ   ヽ
     / / ◯    { |,イ  、}_
  -=イ//        `  |/ヽr=‐′
   彳l/八       ◯ / ,/|,} -- what?
    / ̄`つ、 ()       / ,/ ノ
  /j    } \, -─-∠_,//
// \_rイ\//守)(__う{
/ \/ヘ|,/l `ー´ /守)}ヘ!
{_/{__ラf ̄八‐-、_`ー'´ノ
   // >'/>、_>イ

Newer Posts
Don't change these.
Name: Email:
Entire Thread Thread List