The Best R00tkit ?

GovernmentSecurity.org > System Security > Beginners Section

MxMx

Dec 29 2003, 09:09 AM

Hellow,

I'm searching for a g00d rootkit for win2k/xp .. maybe even NT ..
this one must me capable of hiding processes/services , hiding user , hiding registry values and hiding dirs..

which one would you recommand me?

Thanks

DigitCrash

Dec 29 2003, 09:28 AM

i have one. but its selfcoded cuz of AV or FW can't dedect it. so i won't share it. Sorry

temp

Dec 29 2003, 09:53 AM

@DigitCrash
why do you post then?

i think you have got nothing and just want to be something better..

iLLuSioN

Dec 29 2003, 10:06 AM

exactly =)

sry cant help u there dude dunno many i was given one by a friend

BlaStA

Dec 29 2003, 10:31 AM

I don't use one, but at http://packetstormsecurity.nl/NT/ there are some...

arun0075

Dec 29 2003, 11:08 AM

THERE ARE A LOT OF ROOTKITS ON NET U JUST NEED TO SEARCH FOR IT, USE GOOGLE TO SEARCH ,IT'S THE BEST SEARCH ENGINE

NEWAYS YOU CAN ALSO CHECK THIS SITE www.rootkit.com THERE ARE A LOT OF KITS THERE HOPE U GET WHAT U ARE SEARCHING FOR

Sancy

Dec 29 2003, 11:34 AM

I personally would recommand Hackers Defender (hxdef)
Just use Google and download it

AlessandroIT

Dec 29 2003, 12:30 PM

QUOTE (Sancy @ Dec 29 2003, 11:34 AM)

I personally would recommand Hackers Defender (hxdef)
Just use Google and download it

It were deleted By NAV and KAV....I hate it...

I can hide exe and ini...And NAV and KAV can't delete it...But when HXDEF start, create a sys file for settings...and it were deleted by nav...If it delete .sys file..Hxdef doesn't work correctly....It's the cause because i hate HXDEF :|
But the features is good..and it work correctly if AV is off

eXist

Dec 31 2003, 01:59 AM

Try packing the .exe with a UPX packer, usually works. Or you could try hex editing stuff, but you'd really have to know what you're doing for that to be successful.

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.