βοΈ { ππ ππ―π©π’π±π±π'π° ππ¬π²π«π€π’ } βοΈ
Closed channel
π§ͺ ππππβππΈππ πΈπΉπππ πΌππΌβππβπβπΎπ§ͺ You search how to setup windows on VM, what credit reports are or how checks work? We show you practical ones to understand β οΈ Unauthorized advertisments in comments will lead to a ban from channel :)
Show moreNo data
Subscribers
+724 hours
+657 days
+16630 days
Posts Archive
Phemedrone Stealer Version 2.3.2 OpenSource
Features:
Stealer gathers all data in memory
No external libraries are used for Phemedrone Stealer
Stub size is ~80 kB
Works on both x32 and x64 systems
All logs get sent to an HTTP Host
Configurable Anti CIS, Anti VM, Anti Debbuger and Mutex
Configurable File grabber file extensions and search depth
Grabbing Cookies, Passwords, Autofills and Credit cards from Chromium-based browsers (using dynamic path searching)
Grabbing Cookies, Passwords and Autofillsfrom Gecko-based browsers (using dynamic path searching)
Grabbing Telegram, Steam and Discordsessions using dynamically path searching
Grabbing sensitive Extensions from Chromium-based browsers (includes crypto-extensions and authenticators)
Grabbing most known Crypto wallets
Detailed System information which includes hardware, geolocation and OS information with a Screenshot
FRAUD BIBLE .pdf3.57 MB
They sell old fraud bible from 2020. π
They sell old fraud bible from 2020. π
Seems like @kingpaul00's channel got deleted. π
π₯ HOW TO DECODE PHP FILES PART 2 π₯
βοΈDecoded Files : 16short Admin Page βοΈ
π Time : 29 minutes
π¬ Type Of Obfuscation :
__halt_compiler(); and 4 stages.
π£ Recorder : @scarlettaowner
π
Recorded at : 23.05.2021This one is still obfuscated - i will send a video how to deobfuscate and i upload it when deobfuscated.
16Shop-Amex-New-V1.zip4.66 MB
In 2020, we unpacked all 16shop pages except the sender. The sender used a API which returns the script from a valid license check of his server - sadly
Should i reupload the files for learning ?
π©βπ»
redirector_cracker.zip = Certified Useless
π¦ Contents: 0x00 repeated 7.950.513 times
π§ Result: No MZ header, no shellcode, no embedded strings, no entropy, not even a decent attempt at obfuscation.
Next time when you try to share malware, build it correctly so that I have something to do and have fun.
@alwaysgoodfrπ°HOW NETWORKS ARE STRUCTUREDπ°
https://t.me/viperzcrew2/252
π§―
zoominvite.exe = Certified Useless
π¦ Contents: 0x00 repeated 8,192,000 times
π§ Result: No MZ header, no shellcode, no embedded strings, no entropy, not even a decent attempt at obfuscation.
Next time when you try to share malware, build it correctly so that I have something to do and have fun.
@techruu
AutoLog Keylog [Source Code] π©βπ»
π Features of the Source Code
βΆοΈ stub.au3: Dropper that extracts
AutoUpdate.exe, Emai.exe, Scre.exe to C:\ProgramData\Skype, downloads LaZagne.exe for credential dumping, collects system info (Antivirus, antivirus, OS, CPU, IP), sets persistence, bypasses UAC, disables antivirus (244+ processes), and clears browser data.
βΆοΈ Emai.au3: Sends log files (Passwords.txt, Info.txt, logs_*.htm) from C:\ProgramData\Skype via Gmail SMTP, deletes logs after sending, runs silently with admin privileges.
βΆοΈ Scre.au3: Captures desktop screenshots and webcam images using DirectShow, sends them via Gmail SMTP, deletes files after sending, runs stealthily.
βΆοΈ Main.au3: Nearly identical to Scre.au3, captures screenshots and webcam images, likely the source for Scre.exe.
βΆοΈ All scripts use obfuscation, run silently (#NoTrayIcon), and require admin privileges (#RequireAdmin). Outputs are saved to C:\ProgramData\Skype (stub.au3, Emai.au3) or C:\Windows\log (Scre.au3, Main.au3).
β Leecher ? Be smart and ask for promotions instead of getting a ban! π§
π» Share And Support Channelπ»
https://t.me/+ZFUM798YLi5mODUy𧾠Prerequisites
To compile and run this C# program, you need:
β
Option 1: .NET SDK / Visual Studio Developer Command Prompt
βΆοΈInstall .NET SDK or
βΆοΈUse Visual Studio with the Developer Command Prompt
β
Option 2: Use
csc.exe from Windows
* Comes with .NET Framework (on most Windows systems)
* Path: C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe
π§ Compilation
1οΈβ£ Save the Code
Create a new text file, e.g., Program.cs, and paste the full C# code into it. Replace:
string token = "";
string chatId = "";Program.cs is saved.
3οΈβ£Compile with CSC
"C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe" /target:exe /platform:x86 /optimize Program.csProgram.exe in the same folder.
If you're on 64-bit Windows, you can also try:
"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /target:exe /platform:x64 /optimize Program.csProgram.exe
