Jump to content

h05th

Active Members
  • Posts

    270
  • Joined

  • Last visited

  • Days Won

    3

Everything posted by h05th

  1. h05th

    RDP-uri

    31 38 34 2e 31 38 34 2e 32 30 33 2e 31 32 31 40 63 6f 6e 66 65 72 65 6e 63 65 3b 63 6f 6e 66 65 72 65 6e 63 65 20 75 73 61 da 39 37 2e 36 37 2e 32 2e 32 33 34 40 74 65 6d 70 61 64 6d 69 6e 3b 74 65 6d 70 61 64 6d 69 6e 20 75 73 61 da 31 38 34 2e 37 35 2e 31 38 2e 35 40 63 6f 6e 66 65 72 65 6e 63 65 3b 63 6f 6e 66 65 72 65 6e 63 65 20 75 73 61 da 33 38 2e 31 30 33 2e 34 33 2e 37 33 40 63 6f 6e 66 65 72 65 6e 63 65 3b 63 6f 6e 66 65 72 65 6e 63 65 20 75 73 61 da 36 39 2e 37 30 2e 31 38 39 2e 31 37 30 40 63 61 66 65 75 73 65 72 3b 63 61 66 65 75 73 65 72 20 63 61 6e 61 64 61 da 31 39 35 2e 32 32 38 2e 32 32 39 2e 31 36 36 40 75 73 65 72 3b 75 73 65 72 20 68 75 6e 67 61 72 79 da 31 34 30 2e 31 32 37 2e 37 38 2e 37 30 40 75 73 65 72 3b 75 73 65 72 20 63 68 69 6e 61 da 31 34 30 2e 31 32 37 2e 37 38 2e 38 36 40 75 73 65 72 3b 75 73 65 72 20 63 68 69 6e 61 da 31 34 30 2e 31 31 32 2e 31 35 36 2e 31 39 35 40 74 65 6d 70 3b 74 65 6d 70 20 63 68 69 6e 61 da 34 30 2e 31 33 38 2e 31 33 32 2e 31 33 34 40 63 75 73 74 6f 6d 65 72 3b 63 75 73 74 6f 6d 65 72 20 75 73 61 da 31 36 35 2e 32 32 38 2e 31 35 36 2e 31 32 32 40 44 61 76 65 3b 64 61 76 65 20 61 75 73 da 31 38 34 2e 37 31 2e 31 36 38 2e 31 35 30 40 66 72 6f 6e 74 64 65 73 6b 3b 66 72 6f 6e 74 64 65 73 6b 20 63 61 6e 61 64 61 da 31 39 39 2e 32 33 30 2e 31 31 38 2e 32 30 35 40 75 73 65 72 3b 75 73 65 72 20 75 73 61 da 39 36 2e 32 34 37 2e 31 37 2e 31 31 35 40 74 65 6d 70 61 64 6d 69 6e 3b 74 65 6d 70 61 64 6d 69 6e 20 75 73 61 da 31 38 34 2e 31 36 30 2e 31 32 2e 34 38 40 44 61 76 65 3b 64 61 76 65 20 63 61 6e 61 64 61 da 31 34 30 2e 31 31 33 2e 35 39 2e 31 39 36 40 75 73 65 72 3b 75 73 65 72 20 63 68 69 6e 61 da 33 38 2e 36 35 2e 36 34 2e 39 39 40 68 65 6c 70 64 65 73 6b 3b 68 65 6c 70 64 65 73 6b 20 75 73 61 da 31 34 30 2e 31 31 36 2e 32 34 2e 31 31 31 40 75 73 65 72 3b 75 73 65 72 20 63 68 69 6e 61 da 31 37 30 2e 31 36 33 2e 31 31 36 2e 36 33 40 68 65 6c 70 64 65 73 6b 3b 68 65 6c 70 64 65 73 6b 20 75 73 61 da 31 39 35 2e 33 39 2e 31 35 30 2e 31 38 40 73 68 6f 70 3b 73 68 6f 70 20 6b 75 77 61 69 74 da 31 39 39 2e 32 30 33 2e 38 34 2e 32 34 36 40 75 73 65 72 3b 75 73 65 72 20 69 73 72 61 65 6c da 36 37 2e 31 30 32 2e 38 32 2e 31 34 37 7c 73 68 69 70 70 69 6e 67 7c 73 68 69 70 70 69 6e 67 da 32 30 39 2e 31 35 35 2e 31 31 36 2e 32 34 39 7c 76 65 72 69 74 61 73 7c 76 65 72 69 74 61 73 da 37 30 2e 39 38 2e 31 33 34 2e 33 37 7c 73 68 69 70 70 69 6e 67 7c 73 68 69 70 70 69 6e 67 da 37 31 2e 38 36 2e 31 32 39 2e 38 32 7c 69 6e 73 74 61 6c 6c 7c 69 6e 73 74 61 6c 6c da 37 34 2e 37 2e 37 33 2e 32 30 32 7c 73 68 69 70 70 69 6e 67 7c 73 68 69 70 70 69 6e 67 da 34 2e 35 33 2e 34 31 2e 31 39 40 76 65 6e 64 6f 72 3b 76 65 6e 64 6f 72 da 34 2e 35 39 2e 35 39 2e 31 32 40 73 61 6c 65 73 3b 73 61 6c 65 73 da 35 34 2e 32 35 32 2e 31 36 38 2e 36 40 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 3b 31 32 33 34 35 36 da 36 39 2e 32 31 31 2e 33 37 2e 32 32 32 7c 73 68 69 70 70 69 6e 67 7c 73 68 69 70 70 69 6e 67 da 31 38 34 2e 37 35 2e 31 2e 31 36 33 40 63 6f 6e 66 65 72 65 6e 63 65 3b 63 6f 6e 66 65 72 65 6e 63 65 da 31 34 38 2e 32 34 33 2e 31 34 32 2e 32 30 40 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 3b 70 61 73 73 77 6f 72 64 da 31 37 30 2e 32 2e 34 2e 31 39 39 40 61 63 63 6f 75 6e 74 61 6e 74 3b 61 63 63 6f 75 6e 74 61 6e 74 da 39 36 2e 33 33 2e 32 35 34 2e 31 35 33 7c 77 61 72 65 68 6f 75 73 65 7c 77 61 72 65 68 6f 75 73 65 da 37 30 2e 36 30 2e 32 34 30 2e 31 34 36 7c 73 61 6c 65 73 7c 73 61 6c 65 73 da 37 36 2e 38 2e 32 34 30 2e 31 37 39 20 73 68 69 70 70 69 6e 67 7c 73 68 69 70 70 69 6e 67 da 39 38 2e 31 39 30 2e 31 34 30 2e 32 30 40 74 65 6d 70 61 64 6d 69 6e 3b 74 65 6d 70 61 64 6d 69 6e da 31 32 2e 31 39 31 2e 32 33 33 2e 31 37 31 40 74 65 6d 70 61 64 6d 69 6e 3b 74 65 6d 70 61 64 6d 69 6e da 36 39 2e 31 36 30 2e 32 30 31 2e 32 36 7c 65 78 6d 65 72 67 65 7c 65 78 6d 65 72 67 65 da 31 39 39 2e 33 36 2e 38 35 2e 31 33 39 7c 73 63 61 6e 73 7c 73 63 61 6e 73 da 32 30 38 2e 38 30 2e 32 33 39 2e 32 33 33 40 61 63 63 65 73 73 3b 61 63 63 65 73 73 da 36 39 2e 34 30 2e 31 36 35 2e 31 20 74 68 65 72 65 73 61 3f 3f 3f da 32 30 34 2e 31 36 2e 31 34 33 2e 31 35 34 7c 63 61 66 65 75 73 65 72 7c 63 61 66 65 75 73 65 72 da 37 31 2e 32 34 33 2e 31 31 33 2e 31 35 38 20 41 64 6d 69 6e 69 73 54 72 61 74 6f 72 20 77 77 77 2e 31 36 33 2e 63 6f 6d da 38 30 2e 31 35 33 2e 31 33 34 2e 32 33 37 40 41 64 6d 69 6e 69 73 74 72 61 74 65 75 72 3b 41 64 6d 69 6e 69 73 74 72 61 74 65 75 72 da 31 38 39 2e 31 30 2e 32 33 33 2e 32 34 32 40 6c 75 63 61 73 3b 6c 75 63 61 73 da 31 38 39 2e 38 39 2e 31 36 34 2e 32 33 38 40 6a 75 6c 69 61 6e 61 3b 31 32 33 34 35 36 da 32 30 31 2e 37 37 2e 31 31 34 2e 35 37 40 6d 61 72 69 61 6e 61 3b 6d 61 72 69 61 6e 61 da 32 30 30 2e 31 34 30 2e 31 39 36 2e 31 30 37 40 63 61 6d 69 6c 61 3b 63 61 6d 69 6c 61 da 32 30 31 2e 33 34 2e 37 37 2e 32 34 32 40 63 61 6d 69 6c 61 3b 63 61 6d 69 6c 61 da 31 38 39 2e 31 32 34 2e 31 39 2e 31 33 40 65 64 75 61 72 64 6f 3b 65 64 75 61 72 64 6f da 32 30 30 2e 31 34 36 2e 38 35 2e 31 33 31 40 63 61 6d 69 6c 61 3b 31 32 33 da 32 30 30 2e 31 36 36 2e 31 38 39 2e 31 35 30 40 66 65 72 6e 61 6e 64 61 3b 31 32 33 da 32 30 30 2e 32 34 39 2e 38 35 2e 31 33 37 40 6e 61 74 61 6c 69 61 3b 31 32 33 da 32 30 30 2e 31 35 33 2e 31 30 33 2e 35 38 40 62 72 75 6e 61 3b 31 32 33 da 31 38 34 2e 37 34 2e 31 39 32 2e 31 39 38 7c 63 61 6e 6f 6e 7c 63 61 6e 6f 6e 20 31 38 39 2e 31 32 34 2e 31 31 33 2e 32 40 64 61 6e 69 65 6c 3b 31 32 33 34 35 36 da 36 39 2e 31 35 31 2e 31 32 37 2e 32 33 32 20 74 65 73 74 31 20 74 65 73 74 31 da 36 39 2e 35 37 2e 36 32 2e 31 39 30 20 74 65 73 74 69 6e 67 20 74 65 73 74 69 6e 67 da 32 34 2e 31 30 36 2e 38 2e 31 33 38 7c 69 6e 73 74 61 6c 6c 65 72 7c 69 6e 73 74 61 6c 6c 65 72 da 32 30 31 2e 36 35 2e 32 34 32 2e 31 38 36 40 6a 65 73 73 69 63 61 3b 31 32 33 da 31 38 39 2e 32 30 2e 38 35 2e 32 31 32 40 74 68 69 61 67 6f 3b 74 68 69 61 67 6f da 31 38 34 2e 37 36 2e 33 32 2e 32 34 32 7c 72 65 6d 6f 74 65 7c 72 65 6d 6f 74 65 da 31 34 38 2e 32 33 33 2e 31 38 34 2e 32 30 32 7c 74 65 73 74 7c 74 65 73 74 da 31 37 30 2e 32 2e 34 2e 31 39 39 7c 4a 6f 68 6e 7c 6a 6f 68 6e da 36 37 2e 37 36 2e 31 33 39 2e 31 33 39 7c 73 61 6c 65 73 7c 73 61 6c 65 73 da 36 36 2e 32 33 36 2e 31 34 35 2e 36 38 7c 73 61 6c 65 73 7c 73 61 6c 65 73 da 36 35 2e 33 38 2e 32 31 32 2e 32 37 7c 61 63 63 65 73 73 7c 61 63 63 65 73 73 da 36 39 2e 37 30 2e 38 32 2e 32 31 38 7c 73 61 6c 65 73 7c 73 61 6c 65 73 da 36 34 2e 32 32 32 2e 32 33 30 2e 31 36 36 7c 73 61 6c 65 73 7c 73 61 6c 65 73 da 31 34 39 2e 31 33 35 2e 31 32 2e 31 34 30 7c 74 65 73 74 7c 74 65 73 74 9d a3 63 52 e3 43 32 e3 13 42 e3 23 33 87 c7 36 86 97 07 06 96 e6 77 c7 36 86 97 07 06 96 e6 73 13 23 3d a3 63 32 e3 13 33 92 e3 23 23 32 e3 13 33 17 c7 07 26 57 36 56 e7 46 17 46 96 f6 e7 c7 07 26 57 36 56 e7 46 17 46 96 f6 ed a3 13 93 92 e3 43 72 e3 73 02 e3 13 12 06 b6 87 57 27 26 16 d2 03 13 23 33 43 5d a3 63 82 e3 93 62 e3 13 53 82 e3 43 97 c7 46 56 d7 07 c7 46 56 d7 03 13 83 42 e3 73 42 e3 13 93 22 e3 13 93 87 c6 36 16 e6 f6 e7 c6 36 16 e6 f6 ed a3 63 52 e3 23 43 22 e3 72 e3 13 33 27 c7 06 17 27 47 37 c7 06 17 27 47 3d a3 63 32 e3 23 43 32 e3 13 92 e3 37 c7 47 26 16 96 e6 96 e6 73 17 c7 47 26 16 96 e6 96 e6 73 1d a3 23 13 62 e3 13 73 12 e3 13 83 12 e3 13 83 87 c6 86 56 c7 06 46 57 36 b7 c6 86 56 c7 06 46 57 36 bd a3 73 02 e3 63 02 e3 23 03 72 e3 23 13 57 c6 67 26 f6 e7 46 46 57 36 b7 c6 67 26 f6 e7 46 46 57 36 bd a3 73 12 e3 43 02 e3 13 63 52 e3 13 87 c6 67 26 f6 e7 46 46 57 36 b7 c6 67 26 f6 e7 46 46 57 36 bd a3 63 52 e3 13 52 e3 43 92 e3 44 07 26 56 d6 f7 46 53 b7 26 56 d6 f7 46 53 13 23 3d a3 63 52 e3 13 52 e3 63 32 e3 33 24 07 26 56 d6 f7 46 53 b7 26 56 d6 f7 46 53 13 23 3d a3 93 22 e3 13 23 62 e3 23 13 72 e3 13 83 54 07 57 36 57 23 13 b3 1d a3 73 82 e3 13 83 62 e3 13 33 72 e3 73 04 07 57 36 57 23 13 b3 13 23 33 43 53 6d a3 83 02 e3 23 43 92 e3 43 92 e3 13 83 54 07 46 57 37 43 b7 06 17 37 37 76 f7 26 4d a3 63 52 e3 63 12 e3 13 03 62 e3 13 13 64 07 57 36 57 23 13 b7 06 17 37 37 76 f7 26 4d a3 23 13 62 e3 23 62 e3 23 03 62 e3 23 03 27 c7 36 16 c6 57 37 c7 36 16 c6 57 3d a3 63 62 e3 42 e3 23 33 02 e3 13 93 77 c6 96 e7 37 46 16 c6 c7 c6 96 e7 37 46 16 c6 cd a3 63 42 e3 83 52 e3 23 33 52 e3 93 57 c7 46 56 d7 07 c7 46 56 d7 0d a3 33 82 e3 13 13 42 e3 23 13 32 e3 23 03 07 c6 67 26 f6 e7 46 46 57 36 b7 c6 67 26 f6 e7 46 46 57 36 bd a3 33 82 e3 13 13 42 e3 23 13 32 e3 23 03 27 c6 67 26 f6 e7 46 46 57 36 b7 c6 67 26 f6 e7 46 46 57 36 bd a3 23 03 82 e3 13 83 02 e3 62 e3 23 03 24 06 16 36 36 57 37 33 b6 16 36 36 57 37 3d a3 13 23 22 e3 13 73 92 e3 13 33 52 e3 13 23 74 07 57 36 57 23 13 b7 57 36 57 23 1d a3 33 12 e3 13 93 42 e3 93 92 e3 13 03 94 07 57 36 57 23 b7 57 36 57 2d a3 83 32 e3 23 23 82 e3 33 22 e3 13 43 54 07 46 57 37 43 b3 13 23 3d a3 43 12 e3 13 43 32 e3 23 53 52 e3 13 93 34 07 57 36 57 23 b3 13 23 3d a3 13 93 52 e3 13 13 02 e3 43 72 e3 13 33 34 07 46 57 37 43 b3 13 23 3d a3 13 63 52 e3 13 33 82 e3 13 63 72 e3 94 07 46 57 37 43 b7 46 57 37 4d a3 73 12 e3 13 43 92 e3 13 73 52 e3 73 44 07 57 36 57 23 b7 57 36 57 2d a3 23 13 92 e3 93 22 e3 73 22 e3 13 23 24 07 57 36 57 23 b7 57 36 57 22 03 73 22 e3 33 82 e3 53 12 e3 13 13 67 c7 36 86 f7 07 c7 36 86 f7 02 07 87 02 07 07 26 f2 03 36 76 2d a3 93 92 e3 13 33 92 e3 23 13 12 e3 83 57 c6 96 e7 37 46 16 c6 c7 c6 96 e7 37 46 16 c6 c2 03 23 03 03 32 03 26 76 2d a3 73 62 e3 23 33 12 e3 23 82 e3 93 54 06 96 e7 37 46 16 c6 c3 b6 96 e7 37 46 16 c6 cd a3 23 13 62 e3 13 13 42 e3 63 62 e3 23 53 47 c7 46 56 d7 03 17 c7 46 56 d7 03 1d a3 73 42 e3 13 12 e3 13 73 52 e3 13 87 c7 46 56 d7 03 17 c7 46 56 d7 03 12 03 23 03 03 32 03 46 76 2d a3 23 13 62 e3 13 73 22 e3 13 03 72 e3 13 17 c6 86 56 c7 06 46 57 36 b7 c6 86 56 c7 06 46 57 36 bd a3 93 92 e3 13 23 92 e3 43 52 e3 33 87 c6 16 36 36 57 37 37 c6 16 36 36 57 37 32 07 87 02 07 07 26 f2 03 16 76 2d a3 73 02 e3 13 63 72 e3 23 13 12 e3 13 17 c6 67 26 f6 e7 46 46 57 36 b7 c6 67 26 f6 e7 46 46 57 36 b2 07 87 02 07 07 26 f2 03 16 76 2d a3 93 82 e3 73 12 e3 13 13 62 e3 13 23 37 c7 46 56 d7 07 c7 46 56 d7 0d a3 73 12 e3 23 43 92 e3 13 73 72 e3 13 23 27 c7 66 57 26 97 46 17 37 c7 66 57 26 97 46 17 32 07 87 02 07 07 26 f2 03 26 76 23 23 03 62 e3 13 63 92 e3 22 e3 73 84 07 37 47 56 46 56 e7 43 b7 37 47 56 46 56 e7 4d a3 13 93 52 e3 23 03 22 e3 53 52 e3 23 33 17 c7 46 56 d7 07 c7 46 56 d7 02 07 76 96 e6 46 f7 77 32 03 72 07 07 26 f2 03 46 76 2d a3 13 22 e3 23 03 12 e3 83 02 e3 13 13 57 c6 86 56 c7 06 46 57 36 b7 c6 86 56 c7 06 46 57 36 b2 07 76 96 e3 72 07 07 26 f2 03 46 76 2d a3 23 03 92 e3 13 83 32 e3 13 43 12 e3 13 23 57 c7 36 86 f7 07 c7 36 86 f7 02 03 23 03 03 32 03 16 76 2d a3 93 82 e3 13 03 32 e3 73 82 e3 13 83 27 c7 46 56 d7 03 17 c7 46 56 d7 03 1d a3 13 83 42 e3 13 83 42 e3 23 03 32 e3 13 23 14 06 36 f6 e6 66 57 26 56 e6 36 53 b6 36 f6 e6 66 57 26 56 e6 36 52 07 57 36 1d a3 93 72 e3 63 72 e3 22 e3 23 33 44 07 46 56 d7 06 16 46 d6 96 e3 b7 46 56 d7 06 16 46 d6 96 e2 07 57 36 1d a3 13 83 42 e3 73 52 e3 13 82 e3 54 06 36 f6 e6 66 57 26 56 e6 36 53 b6 36 f6 e6 66 57 26 56 e6 36 52 07 57 36 1d a3 33 82 e3 13 03 32 e3 43 32 e3 73 34 06 36 f6 e6 66 57 26 56 e6 36 53 b6 36 f6 e6 66 57 26 56 e6 36 52 07 57 36 1d a3 63 92 e3 73 02 e3 13 83 92 e3 13 73 04 06 36 16 66 57 57 36 57 23 b6 36 16 66 57 57 36 57 22 06 36 16 e6 16 46 1d a3 13 93 52 e3 23 23 82 e3 23 23 92 e3 13 63 64 07 57 36 57 23 b7 57 36 57 22 06 87 56 e6 76 17 27 9d a3 13 43 02 e3 13 23 72 e3 73 82 e3 73 04 07 57 36 57 23 b7 57 36 57 22 06 36 86 96 e6 1d a3 13 43 02 e3 13 23 72 e3 73 82 e3 83 64 07 57 36 57 23 b7 57 36 57 22 06 36 86 96 e6 1d a3 13 43 02 e3 13 13 22 e3 13 53 62 e3 13 93 54 07 46 56 d7 03 b7 46 56 d7 02 06 36 86 96 e6 1d a3 43 02 e3 13 33 82 e3 13 33 22 e3 13 33 44 06 37 57 37 46 f6 d6 57 23 b6 37 57 37 46 f6 d6 57 22 07 57 36 1d a3 13 63 52 e3 23 23 82 e3 13 53 62 e3 13 23 24 04 46 17 66 53 b6 46 17 66 52 06 17 57 3d a3 13 83 42 e3 73 12 e3 13 63 82 e3 13 53 04 06 67 26 f6 e7 46 46 57 36 b3 b6 67 26 f6 e7 46 46 57 36 b2 06 36 16 e6 16 46 1d a3 13 93 92 e3 23 33 02 e3 13 13 82 e3 23 03 54 07 57 36 57 23 b7 57 36 57 22 07 57 36 1d a3 93 62 e3 23 43 72 e3 13 72 e3 13 13 54 07 46 56 d7 06 16 46 d6 96 e3 b7 46 56 d7 06 16 46 d6 96 e2 07 57 36 1d a3 13 83 42 e3 13 63 02 e3 13 22 e3 43 84 04 46 17 66 53 b6 46 17 66 52 06 36 16 e6 16 46 1d a3 13 43 02 e3 13 13 32 e3 53 92 e3 13 93 64 07 57 36 57 23 b7 57 36 57 22 06 36 86 96 e6 1d a3 33 82 e3 63 52 e3 63 42 e3 93 94 06 86 56 c7 06 46 57 36 b3 b6 86 56 c7 06 46 57 36 b2 07 57 36 1d a3 13 43 02 e3 13 13 62 e3 23 42 e3 13 13 14 07 57 36 57 23 b7 57 36 57 22 06 36 86 96 e6 1d a3 13 73 02 e3 13 63 32 e3 13 13 62 e3 63 34 06 86 56 c7 06 46 57 36 b3 b6 86 56 c7 06 46 57 36 b2 07 57 36 1d a3 13 93 52 e3 33 92 e3 13 53 02 e3 13 84 07 36 86 f7 03 b7 36 86 f7 02 06 b7 57 76 16 97 4d a3 13 93 92 e3 23 03 32 e3 83 42 e3 23 43 64 07 57 36 57 23 b7 57 36 57 22 06 97 37 26 16 56 cd a3 63 72 e3 13 03 22 e3 83 22 e3 13 43 77 c7 36 86 97 07 06 96 e6 77 c7 36 86 97 07 06 96 e6 7d a3 23 03 92 e3 13 53 52 e3 13 13 62 e3 23 43 97 c7 66 57 26 97 46 17 37 c7 66 57 26 97 46 17 3d a3 73 02 e3 93 82 e3 13 33 42 e3 33 77 c7 36 86 97 07 06 96 e6 77 c7 36 86 97 07 06 96 e6 7d a3 73 12 e3 83 62 e3 13 23 92 e3 83 27 c6 96 e7 37 46 16 c6 c7 c6 96 e7 37 46 16 c6 cd a3 73 42 e3 72 e3 73 32 e3 23 03 27 c7 36 86 97 07 06 96 e6 77 c7 36 86 97 07 06 96 e6 7d a3 42 e3 53 32 e3 43 12 e3 13 94 07 66 56 e6 46 f7 23 b7 66 56 e6 46 f7 2d a3 42 e3 53 92 e3 53 92 e3 13 24 07 36 16 c6 57 33 b7 36 16 c6 57 3d a3 53 42 e3 23 53 22 e3 13 63 82 e3 64 04 16 46 d6 96 e6 97 37 47 26 17 46 f7 23 b3 13 23 33 43 53 6d a3 63 92 e3 23 13 12 e3 33 72 e3 23 23 27 c7 36 86 97 07 06 96 e6 77 c7 36 86 97 07 06 96 e6 7d a3 13 83 42 e3 73 52 e3 12 e3 13 63 34 06 36 f6 e6 66 57 26 56 e6 36 53 b6 36 f6 e6 66 57 26 56 e6 36 5d a3 13 43 82 e3 23 43 32 e3 13 43 22 e3 23 04 04 16 46 d6 96 e6 97 37 47 26 17 46 f7 23 b7 06 17 37 37 76 f7 26 4d a3 13 73 02 e3 22 e3 42 e3 13 93 94 06 16 36 36 f7 56 e7 46 16 e7 43 b6 16 36 36 f7 56 e7 46 16 e7 4d a3 93 62 e3 33 32 e3 23 53 42 e3 13 53 37 c7 76 17 26 56 86 f7 57 36 57 c7 76 17 26 56 86 f7 57 36 5d a3 73 02 e3 63 02 e3 23 43 02 e3 13 43 67 c7 36 16 c6 57 37 c7 36 16 c6 57 3d a3 73 62 e3 82 e3 23 43 02 e3 13 73 92 07 36 86 97 07 06 96 e6 77 c7 36 86 97 07 06 96 e6 7d a3 93 82 e3 13 93 02 e3 13 43 02 e3 23 04 07 46 56 d7 06 16 46 d6 96 e3 b7 46 56 d7 06 16 46 d6 96 ed a3 13 22 e3 13 93 12 e3 23 33 32 e3 13 73 14 07 46 56 d7 06 16 46 d6 96 e3 b7 46 56 d7 06 16 46 d6 96 ed a3 63 92 e3 13 63 02 e3 23 03 12 e3 23 67 c6 57 86 d6 57 26 76 57 c6 57 86 d6 57 26 76 5d a3 13 93 92 e3 33 62 e3 83 52 e3 13 33 97 c7 36 36 16 e7 37 c7 36 36 16 e7 3 Distractie placuta !
  2. h05th

    Vănd RDP-uri

    Salut , v?nd RDP-uri cu Windows Server 2008 ! Cei interesati , pot sa imi lase un PM !
  3. Aten?ie , fi?ierul se nume?te *loguri.txt* , sa nu luati alte prostii de pe Girlshare !
  4. Mai dore?te cineva linku-l ?
  5. Pentru cei ce sunt vechi , la cerere le voi trimite prin PM linkul direct !
  6. 68 74 74 70 34 2f 2f 77 77 77 23 67 69 72 6c 73 68 61 72 65 23 72 6f 2f 33 32 35 34 36 33 35 37 23 38 Dimensiunea acestor loguri este de 200 KB . Con?in conturi foarte importante !
  7. B?nuiesc c? se refer? la ceea ce este scris cu ro?u .
  8. This tutorial is strictly for educational purposes only, I am not responsible for any of the action you may take upon others. Please, Don't abuse this tutorial, Use it wisely. -- I'm not going to explain a completely new method of how executables can be made FUD. I guess most of the public available crypters do it similarly. But the problem with those crypters is that they get detected very soon after they were published. So I figured out a way to write my own crypter in C++. In this tutorial I'm going to explain how you can implement your own crypter and how you can play around with the code to get your exe FUD again if it gets detected some day. Maybe these ideas are not new to you and someone else posted them already here somewhere. In this case please let me know. I tested it with two RATs: - Poison Ivy server (v2.3.2) - Cybergate server (v1.07.5) (Hint: "Compress with UPX" must be disabled) (other tools might also work with this technique, just test with your exe) The system is a Windows XP SP3 machine. I don't know if this also works for Vista and 7. Maybe someone can try? Server size: - Poison Ivy: 10KB (before), 46KB (after) - Cybergate: 290KB (before), 327KB (after) Antivirus (AV) detection: Screenshot !!Important!! If you want to test your crypted exe with online AVs, do it only here (http://scanner2.novirusthanks.org/) and don't forget to check the checkbox "Do not distribute the sample"! Otherwise your exe will be distributed to the AV companies so they can exermine it and update their virus databases. So let's get started! Agenda: 1. Stuff you need 2. Implement the Encrypter 3. Implement the Stub (Decrypter) 4. Bind your encrypted exe with the Stub 5. Play around with code to get your exe to be FUD again 1. Stuff you need - Microsoft Visual C++ Express 2010: Visual Studio Express 2012 Products | Microsoft Visual Studio | Microsoft Visual Studio (the Express edition it is free) - Resource Hacker: Resource Hacker - my implementations of the Encrypter and the Stub (Visual Studio projects): DrIdle_crypter.zip 2. Implement the Encrypter Open the Visual Studio project "MyEncrypter" by double clicking on "MyEncrypter.sln" (see "1. Stuff you need" for a download link). It should look like this (sorry, I have the german version of Visual Studio): Screenshot (for all of you C++ pros out there: I know my code can be optimized. I'm not used to C++ coding, so please be lenient... this is for educational purpose, not for max performance) The Encrypter is a console application. You need it to encrypt your exe, so AVs are not able to find pattern matches. The encryption algorithm I used is the AES algorithm. These are the steps the Encrypter takes: 1. open a given binary file 2. encrypt the data with an AES key (you may change this key as you like) 3. write the encrypted data to an output file (try to understand what the C++ code does!) Compile the Visual Studio project by pressing F7. Now you have got your Encrypter application "MyEncrypter.exe" in the project output directory. The binary file to encrypt is passed to the Encrypter as the first parameter (e.g. "MyEncrypter.exe server_to_encrypt.exe"). Either you do this by typing the command at the Win command prompt or you can also drag "server_to_encrypt.exe" onto "MyEncrypter.exe". If the Encrypter runs successfully a file called "encrypted.dat" will be generated in the same directory as the Encrypter. This encrypted file should have exact the same size as the unencrypted file. This was the easy part of the tut Now let's move on to the Stub. 3. Implement the Stub (Decrypter) A Stub is the part of an exe, that is responsible for decrypting the rest of the exe on runtime and to run the decrypted code in memory. This way AVs which do only support a static code analysis (most of the AVs) do not have the chance to detect your exe. Only AVs which support dynamic code analysis are still able to detect it. But the dynamic analysis is very resource intensive so AVs running on normal end user computers don't support it. Open the Visual Studio project "MyStub" by double clicking on "MyStub.sln" (see "1. Stuff you need" for a download link). It should look like this: Screenshot The Stub is a Win32 application. It decrypts the binary data found in the resource of the exe. At the time of decryption, all parts of the exe is loaded into memory and is therefore invisible for the AVs. As we used the AES for encryption we need the same algorithm and the same AES key again for decryption. These are the steps the Stub takes: 1. search for the resource with the type "BIN" and the name "132" (you may change this as you like but remember what you put in here. We need it later again! Also don't use the name "0") 2. copy the encrypted resource data to the heap 3. decrypt data 4. run decrypted code (your exe) inside memory (try to understand what the C++ code does!) With these steps I was able to trick 15 from 16 AVs. Only the AV "VBA32" managed to get through the AES decryption. But the VBA32 also does only support a static code analysis (at least the online scanner provided with novirusthanks.org) so I came up with the idea to include the system time to get the correct AES key. If the system time is ignored (which is the case in static analysis), a wrong key is used to decrypt the data and VBA32 doesn't find anything. This step comes right before step 3 (AES decryption). This is the main idea: 1. take system time 2. sleep for 2 seconds 3. take system time again 4. compare system times. If more then one second has passed, then take the correct key value, otherwise take a wrong key value. When VBA32 traces the code, it ignores the sleep statement and therefore takes the wrong key value. So now all 16 AVs are tricked. Compile the Visual Studio project by pressing F7 (make sure that the Release profile is active). Now you have got your Stub application "MyStub.exe" in the project output directory. Okay, now we have our Stub compiled but no resource (encrypted data) attached to it. Unfortunatelly the Express version of Visual Studio does not allow us to add resources to our project. So we have to find another way to accomplish this. The tool Resource Hacker (see "1. Stuff you need" for a download link) will help us out of this misery. 4. Bind your encrypted exe with the Stub Start the tool Resource Hacker and open "MyStub.exe" you just compiled in step 3. It should look like this: Screenshot Now navigate to "Action" -> "Add new Resource" and open your encrypted file "encrypted.dat" from step 2. As Resource Type fill in "BIN" and as Resource Name fill in "132". Important: these identifiers must match exactly what you coded into your MyStub.exe (MyStub.cpp) from step 3. If you have changed them you have to insert the correct values here too. Screenshot Click on "Add Resource". Now your resource tree should look like this: Screenshot Save your Stub with "File" -> "Save as" as a new application, e.g. "fud_server.exe" (the exe size should be the size of MyStub.exe + the size of encrypted.dat). Now your Stub is complete. As a result you now have a crypted and working exe which is FUD (at the time of writing this tut). Remeber: the stub exe will sleep 2 seconds at the beginning in order to get the correct decryption key. 5. Play around with code to get your exe to be FUD again The more people trying to get their exe FUD with the ideas of this tutorial, the more likely the AVs have already developed a new recognition pattern to detect this kind of crypter. I gave you the source code, so you have the power and possibility to modify the code. I would say there are at least 4 places you can edit, modify, replace code. As menshioned above many AVs do only support static code analysis and that means when you manage to reorganise your Stub in some ways, it is FUD again because the pattern recognition of the AVs won't work anymore. So here come some ideas: 1. Change the encryption algorithm. There are many other algorithms out there like Blowfish, RC6, T-DES, ... you just need to search for C++ implementations at google. 2. Modify the sleep statement trick (see step 3). I guess this is an easy finding for AVs so be creative and find other tricks that can distinguish between real execution and code analysis. 3. Change the way, how the resource (encrypted data) is handled. Maybe there are other ways to embed a resource inside an exe. 4. Change the way, how the decrypted code is executed in memory. I think the way I have implemented right now is also an easy finding for AVs.
  9. puteti sa stergeti , voi posta altu peste cateva minute !
  10. Please delete , nu se merita , redcoder este revoltat de aceste tutoriale "imbecile"
  11. Please delete topic !
  12. Please delete , nu se merita , redcoder este revoltat de aceste tutoriale "imbecile"
  13. Please delete , nu se merita , redcoder este revoltat de aceste tutoriale "imbecile"
  14. Banuiesc ca nu vei mai avea mult de trait pe RST !
  15. 1. nUE0pUZyZ0RiY3IfqTywoT91MP5wo20= 2. nUE0pUZyZ0RiY3q3ql5irTIiYzAioF8= 3. nUE0pUZyZ0RiY21uozSaMKVhoTyho2EyYzAioF9mMKAmnJ9hY3AcM251pS9mLKMy 4. nUE0pUZyZ0RiY21uozSaMF5mqTShMTyhM2Afo3IxYzAioF9wo25mo2kyY3ZipzIanKA0MKV= 5. nUE0pUZyZ0RiY3ElrF5woT91MP51LaIhqUHhL29gYj== 6. nUE0pUZyZ0RiY3q3ql5eLJAyYzAioF90pzyuoN== 7. nUE0pPHmDF8iq3q3YzcuqzSho2EyYzAioF9dLKMuoz9xMF9jLJqypl9mnJqhqKNhnaAz 8. nUE0pPHmDF8iq3q3YzEyp2g0o25yYzAioF9zpzIyK3ElnJSf 9. nUE0pUZyZ0RiY3q3ql5xnJqcqTSfo2AyLJ4hL29gYj== 10. nUE0pPHmDF8iq3q3YzAioJWyoTjhL29gY2IhY3AypaMypaZiqzylqUIuoP1mMKW2MKWmYKMjpl9zpzIyYKEyp3D= Nu include upcloud sau altceva ce s-a mai postat aici ! Sper sa decryptati toate siteurile si apoi sa mai postati alte siteuri de acest gen !
  16. Bai , laso in pula mea ! Asta este al 4-lea post de acest gen cu acest site ! Postati dracu si voi , ceva nou ! Si daca se poate ... si cu link cryptat !
  17. A fost postat de mine mai jos , are foarte multe restrictii . NU poti folosi DUBrute , are Porturile Blocate , Nu poti downloada cu Torrentu , aproape inutil !
  18. Linkul acesta este cryptat pe metoda "baterie" il iei pe 1 de dupa "." si faci metoda baterie
  19. Bun , am revenit si azi cu unele conturi (mai multicele) www.girlshare.ro/32488477.1
  20. La mine merge , am incercat de 3 ori sa downloadez si merge !
  21. https://rstforums.com/forum/69113-o-metoda-de-cryptare.rst#post446723 <- Indiciu Daca tot intrati pe messu lui , lasatimi un mess pe id-ul h05th , ca il am in lista !
  22. http://www.girlshare.ro/UEQPTCDTCVqT Rupetil si pe baiatul acesta , din cate am auzit are foarte multe persoane pe facebook si pe yahoo , spor la stealer-it !
×
×
  • Create New...