Destripador para el Bifrost
[Enlace externo eliminado para invitados]
Sacacorchos v1.0
Destripador del Poison Ivy y Bifrost
[Enlace externo eliminado para invitados] (Link actualizado 13/08/2012)
Aero RAT Server Analyzer 0.1
Destripador para el Troyano Aero
[Enlace externo eliminado para invitados]
Slh4.5 Server Analyzer 0.1
Destripador para el troyano SLH
[Enlace externo eliminado para invitados]
Spy-Net Server Identifier v1.0
Destripador de servidores del Spy-Net.
Compatible con las versiones 2.3, 2.4, 2.5 y 2.6
[Enlace externo eliminado para invitados]
Creditos: Yeikel
IStealer
Código: Seleccionar todo
//iStealer5
#include <iostream>
#include <windows.h>
int main()
{
HINSTANCE module = LoadLibrary("C:\\stub.exe"); //Cambiar por nombre y ruta del servidor de iStealer
if(module == NULL)
{
std::cout << "Fallo al cargar";
return 0;
}
HRSRC rsrc = FindResource(module, MAKEINTRESOURCE(1),RT_RCDATA);
if(!rsrc)
{
std::cout << "FindResource -> Error";
return 0;
}
DWORD Size = SizeofResource(module , rsrc);
HGLOBAL MemoryHandle = LoadResource(module,rsrc);
if(MemoryHandle == NULL)
{
std::cout << "MemoryHandle -> Error";
return 0;
}
LPBYTE lpFile;
lpFile = (LPBYTE)LockResource(MemoryHandle);
if(lpFile == NULL)
{
std::cout << "LockResource -> Error";
return 0;
}
std::cout << "isVirtual -> " << ((lpFile[0] == 1) ? "1":"0") << std::endl;
std::cout << "isWireShark -> " << ((lpFile[1] == 1) ? "1":"0") << std::endl;
std::cout << "isOllyDbg -> " << ((lpFile[2] == 1) ? "1":"0") << std::endl;
std::cout << "isProcmon -> " << ((lpFile[3] == 1) ? "1":"0") << std::endl;
std::cout << "isMelt -> " << ((lpFile[4] == 1) ? "1":"0") << std::endl;
std::cout << "isMsnMessenger -> " << ((lpFile[5] == 1) ? "1":"0") << std::endl;
std::cout << "isGoogleTalk -> " << ((lpFile[6] == 1) ? "1":"0") << std::endl;
std::cout << "isTrillian -> " << ((lpFile[7] == 1) ? "1":"0") << std::endl;
std::cout << "isPidgin -> " << ((lpFile[8] == 1) ? "1":"0") << std::endl;
std::cout << "isPaltalk -> " << ((lpFile[9] == 1) ? "1":"0") << std::endl;
std::cout << "isSteam -> " << ((lpFile[10] == 1) ? "1":"0") << std::endl;
std::cout << "isNoIp -> " << ((lpFile[11] == 1) ? "1":"0") << std::endl;
std::cout << "isFirefox -> " << ((lpFile[12] == 1) ? "1":"0") << std::endl;
std::cout << "isInternetExplorer -> " << ((lpFile[13] == 1) ? "1":"0") << std::endl;
std::cout << "isFileZilla -> " << ((lpFile[14] == 1) ? "1":"0") << std::endl;
std::cout << "URL -> ";
for(int i = 15; i < Size; i++)
{
if(lpFile[i] == 0)
{
break;
}
lpFile[i] ^= (i % 5) + 1;
std::cout << char(lpFile[i]);
}
std::cout << std::endl;
if(lpFile[115] == 1)
{
std::cout << "Binded -> 1\n";
/* //No recuerdo exactamente porque no finalice esta parte (vagueria seguro xD)
std::cout << "[+] Name: ";
for(int a = 116; a < Size; a++)
{
if(lpFile[a] == 0)
{
break;
}
lpFile[a] ^= (a % 5) + 1;
std::cout << (char)lpFile[a];
}
*/
}else{
std::cout << "Binded -> 0\n";
}
*/
return 0;
}Saludos!
ANTRAX
