EvilZone

Hacking and Security => Hacking and Security => : lsquared September 14, 2012, 06:29:10 AM

: Binding to DLLs or Hiding in Processes
: lsquared September 14, 2012, 06:29:10 AM
I've been thinking of a project to start on the side for fun, decided on something along the lines of a backdoor or keylogger to better learn python. When I was thinking of different functionality that would be cool I realized, I have about no idea or experience with how to hide a program's process and how to bind a program with a DLL.

Just reading that seems a little n00by.. sorry bout it. I don't need you guys to hold my hand, maybe just point me in the right direction.

Also if anyone wants to collaborate on something I'm more than willing, just PM me.

Thanks,
lsquared
: Re: Binding to DLLs or Hiding in Processes
: flowjob September 14, 2012, 07:02:42 AM
To import a dll:
:
import ctypes
dll = ctypes.WinDLL('mydll.dll')
: Re: Binding to DLLs or Hiding in Processes
: ande September 14, 2012, 01:15:37 PM
I would say Python is not your first choice when making backdoors/keyloggers, at least if you want to hide them and run them as malware.

All tho, I guess it is possible; You can probably use a normal registery key in HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run to start your python script at boot. Hiding it from the process list on the other hand, probably not so easy/possible (with python).
: Re: Binding to DLLs or Hiding in Processes
: z3ro September 14, 2012, 05:25:21 PM
Wanna make a good backdoor? I mean, a really gooed one? Code in C / C++  ;)
: Re: Binding to DLLs or Hiding in Processes
: Nexus September 14, 2012, 05:45:44 PM
The problem with using Python is that in order for your backdoor to work, the target system must be able to run it. No version of Windows has ever had Python installed by default and there are a probably a few Linux distro's that are the same. You can convert python to binary executables but they will be massive in size. You can certainly create a backdoor using a Python framework for example, but that backdoor has to end up as a binary native to the target system.
: Re: Binding to DLLs or Hiding in Processes
: lsquared September 15, 2012, 08:54:25 PM
Good point on the difficulty of using python for this kind of project. I have just been looking for something to try with python, but may as well stick with C/C++ and Assembly for now.

Thanks guys,
lsquared
: Re: Binding to DLLs or Hiding in Processes
: Ragehottie September 16, 2012, 12:05:11 AM
Good point on the difficulty of using python for this kind of project. I have just been looking for something to try with python, but may as well stick with C/C++ and Assembly for now.

Thanks guys,
lsquared

Hello. I am a fellow python coder. I suggest don't let people change your mind over a few replies. Python might not be the best, but its fun to code and it works just fine. People will always try to change you over to c/++, but stick with python.
: Re: Binding to DLLs or Hiding in Processes
: z3ro September 16, 2012, 12:24:20 PM
Hello. I am a fellow python coder. I suggest don't let people change your mind over a few replies. Python might not be the best, but its fun to code and it works just fine. People will always try to change you over to c/++, but stick with python.


Why?  :P
: Re: Binding to DLLs or Hiding in Processes
: Deque September 16, 2012, 01:51:05 PM
Hello. I am a fellow python coder. I suggest don't let people change your mind over a few replies. Python might not be the best, but its fun to code and it works just fine. People will always try to change you over to c/++, but stick with python.

There are reasons you don't use a fork for eating soup (even if it is a good fork and it is fun to use it).