Author Topic: Photo stealer Trojan Horse (see the demo)  (Read 3678 times)

0 Members and 1 Guest are viewing this topic.

Offline Infinityexists

  • Peasant
  • *
  • Posts: 74
  • Cookies: 1
    • View Profile
Photo stealer Trojan Horse (see the demo)
« on: April 13, 2012, 10:38:39 am »
Few months ago i started a thread saying that i am working on a trojan horse that steal all the photos from the victim Pc, here i am testing it on my brother's Laptop ;)


Watch the video and let me know if the source-code worth a share ,


Video with explanation (low quality),

http://www.youtube.com/watch?v=2NRcgx8LdJ8


Video in HQ,

http://www.youtube.com/watch?v=4i60bEJAaz4

coded in: VBScripting, Batch Programming, Php/MySQL with few windows registry tweaks to bypass antivirus and other user access controls.

coded by Sufyan Ghori
« Last Edit: April 13, 2012, 11:36:23 am by Infinityexists »

Offline Kulverstukas

  • Administrator
  • Zeus
  • *
  • Posts: 6627
  • Cookies: 542
  • Fascist dictator
    • View Profile
    • My blog
Re: Photo stealer Trojan Horse (see the demo)
« Reply #1 on: April 13, 2012, 11:09:37 am »
Few months ago i started a thread saying that i am working on a trojan horse that steal all the photos from the victim Pc <...>
Wasn't it yesterday...? lol.

Very nice thing you made, like really. Looks like it works great ^^
What's the Application coded in btw?

Offline Infinityexists

  • Peasant
  • *
  • Posts: 74
  • Cookies: 1
    • View Profile
Re: Photo stealer Trojan Horse (see the demo)
« Reply #2 on: April 13, 2012, 11:17:50 am »
Wasn't it yesterday...? lol.

Very nice thing you made, like really. Looks like it works great ^^
What's the Application coded in btw?


it wasn't yesterday :p, i am talking about this -> http://evilzone.org/hacking-and-security/i-developed-my-first-hack-using-vbscripting/
btw the application is coded in VBScripting with Batch programming and few Windows registry tweaks to bypass user access controls :) then I used Winrar SFX to generate the executable file and then changed the icon, this is everything behind the Application.
on the web-server side i used PHP to code the program that browse and generate the gallery + HTML/CSS to give it the smart Gallery look ;)


it is 100% undetectable and it is just 170kb in size :p !!
tested with Avast, Avira , AVG and Mcafee ;)
however Panda antivirus doesn't allowed the execution of vbscript file so i've also coded the simple program that shutdown the Panda Antivirus (if there is any) before the execution :)


P.S : sorry for the video quality , i had never recorded the video before :p i had a real hard time in choosing the right screen recorder :p
btw i used Blue Berry for screen recording and Windows movie maker for editing :p
« Last Edit: April 13, 2012, 11:28:26 am by Infinityexists »

Offline Kulverstukas

  • Administrator
  • Zeus
  • *
  • Posts: 6627
  • Cookies: 542
  • Fascist dictator
    • View Profile
    • My blog
Re: Photo stealer Trojan Horse (see the demo)
« Reply #3 on: April 13, 2012, 04:01:59 pm »
Lol I must say your concept is actually very clever ^^ It's mostly undetectable because it is a script.
Btw for screen recording I prefer "Camtasia" (Windows) and recordMyDesktop for Linux.

Offline Infinityexists

  • Peasant
  • *
  • Posts: 74
  • Cookies: 1
    • View Profile
Re: Photo stealer Trojan Horse (see the demo)
« Reply #4 on: April 13, 2012, 04:21:13 pm »
Lol I must say your concept is actually very clever ^^ It's mostly undetectable because it is a script.
Btw for screen recording I prefer "Camtasia" (Windows) and recordMyDesktop for Linux.


thanks for the screen recorder suggestion, i spent like 3 hours trying different Recorders to record the desktop the issue was, my laptop is Full HD (1080p) so even if i was recording with the full screen, only small part of the screen has been recorded , i even tried with different resolution like 800x600 , 1024x786 but the issue remained there then i found blue berry recorder and it worked like a charm even with 1080p :)
next time while recording the screen your suggestion will be kept in mind :)

Offline dataspy

  • Peasant
  • *
  • Posts: 99
  • Cookies: 16
    • View Profile
Re: Photo stealer Trojan Horse (see the demo)
« Reply #5 on: April 13, 2012, 04:23:11 pm »
Good work, looks very interesting!!!
The only people for me are the mad ones, the ones who are mad to live, mad to talk, mad to be saved, desirous of everything at the same time, the ones who never yawn or say a commonplace thing, but burn, burn, burn, like fabulous yellow roman candles exploding like spiders across the stars.
-Kerouac

Offline Axon

  • VIP
  • King
  • *
  • Posts: 2047
  • Cookies: 319
    • View Profile
Re: Photo stealer Trojan Horse (see the demo)
« Reply #6 on: April 13, 2012, 05:34:43 pm »
Very creative. Great work

Offline Infinityexists

  • Peasant
  • *
  • Posts: 74
  • Cookies: 1
    • View Profile
Re: Photo stealer Trojan Horse (see the demo)
« Reply #7 on: April 14, 2012, 06:48:17 pm »
Very creative. Great work


Thankyou , will add more features soon and gonna give the professional look to the gallery , the gallery will be totally based on Ajax :p

Offline bio_n3t

  • Serf
  • *
  • Posts: 21
  • Cookies: -2
    • View Profile
Re: Photo stealer Trojan Horse (see the demo)
« Reply #8 on: April 16, 2012, 08:07:30 pm »
Good work!! I have done something similar but with more feature, I will post a video demonstration of it as soon as possible.
By the way I have done it with a combination of:
jQuery, AJAX, PHP, MySQL for the server side
and VB.net for the client side  :)

Offline z@h1r

  • NULL
  • Posts: 1
  • Cookies: 0
    • View Profile
Re: Photo stealer Trojan Horse (see the demo)
« Reply #9 on: April 16, 2012, 08:23:50 pm »
Have you release the source code and tutorial to use it? :)


Wireshark Cookie Dump:

OKCancel

Offline Infinityexists

  • Peasant
  • *
  • Posts: 74
  • Cookies: 1
    • View Profile
Re: Photo stealer Trojan Horse (see the demo)
« Reply #10 on: April 16, 2012, 09:21:26 pm »
Good work!! I have done something similar but with more feature, I will post a video demonstration of it as soon as possible.
By the way I have done it with a combination of:
jQuery, AJAX, PHP, MySQL for the server side
and VB.net for the client side  :)


Good work, I'd love to watch that ;)


@z@h1r : nope, Source code hasn't been released yet :)

« Last Edit: April 16, 2012, 09:22:00 pm by Infinityexists »