is there a toll that connects to the server and write the bat u tell him to create?
brOmstar
Mar 15 2004, 02:52 PM
Ok here i go the program i have written is very simple ...i have written it once to filter my scanfiles....
!!! Because it's written in c# u have to install the .net framework provided by M$ --> Known Bugs: if the used file has more then 10000 Lines the proggie makes some trouble i hope to fix this problem soon
Picture1:
There are some nice features i think
No.1 Add Strings to Linestart/Lineend --> This feature is used to create ur 'createprogramm.bat' or .txt =============================================
First load the program u want to create in bin2debug or exe2hex ...let's say the outputfile is called nc.hex
Load this File (this could take some seconds)
Now fill the both txtFields
Add String to Linebegin -> "echo " Add String to Lineend -> ">>1"
and klick Add String (this takes some time..but wait it works)
now change the first line from "n nc.exe>>1" to "n nc.txt>1" and at the end add the debug command
"debug<1>nul rename nc.txt nc.exe"
That's all ..save the file as *.bat and it's done
btw of course u have to change the filename i used nc only as example here
No.2 Filter Lines --> This feature is used to filter lines from a scanfiles =============================================
Load the File u want to filter
Set the string in the Field 'Text in Line'
Press the Button 'FilterLines'
Now only the Lines are shown which include the Filterstring
No.3 Filter Ips --> This feature is used to filter only Ips out of a scanfile =============================================
Load the File u want to filter
Press the Button 'Filterips'
That's all hope someone enjoy this little tool i will send this proggie now to boshcash so that he can attach it here =)
101
Mar 15 2004, 02:54 PM
QUOTE (tibbar @ Mar 15 2004, 02:45 PM)
interesting idea. personally, ive never encountered a situation where tftp and ftp were both not available, but i'll keep this one in reserve for that rainy day.
Cheers m8
yeah but look at the method , only echo & debug command are needed (almost available on all windows) to creates all kind of exe, nasty if you have a cmd under a fw/router or some others situations ;<
The Storm
Mar 15 2004, 02:55 PM
looks good hope it does a well job. Whats the fastest way to create a bat on another box is there a prog or sth. like this or do I have to type every line itself?
brOmstar
Mar 15 2004, 03:11 PM
if u have a shell and u have created ur createmyprogramm.txt u can paste and copy the txt at once ....this worked perfect to me
boshcash
Mar 15 2004, 03:29 PM
nice program bromstar thanks for msging me , thnx 101 for that great idea
brOmstar
Mar 15 2004, 03:32 PM
boshcash plz attach the both files for the others here =) thx
dotcom
Mar 15 2004, 05:12 PM
Yup setthesun and geex0r gave us this info in a thread justa short while back....
My question is how can I manually calculate the correct CX register? db'crypter is nice but I'd like to know how to do this by hand.. By just looking at the exe beforehand the registers dont match, but I am pretty sure its about the whole 0100 vs 0000 (com vs exe as I understand it)
Also try wget, much nicer than cmdget IMHO
EDIT: Moved txt to a d/l as suggested
HAnzsz
Mar 15 2004, 05:58 PM
yeah dude!
brOmstar
Mar 15 2004, 06:45 PM
is it really usefull to post such long posts here??
boahcash why u don't post the files???
if somebody want the tool i described below to create his own *.exe
wow, when you think about it something like this could be used to put a complete rootkit on a system
EzMe
Mar 16 2004, 12:01 AM
OMG I knew it was possible to copy past c code in a *nix shell and then compile it.. but on Windows..? Kewl!
But what i still dont get is how do i copy/past a list that long into a, for example, SQL-shell..?
cenobite
Mar 16 2004, 07:39 AM
wow nice trick, although i havent had any yet situations where i could not find the ftp.exe
dir ftp*.* /s /a anyone?
The Storm
Mar 17 2004, 08:32 AM
lol cenobite where are u from? never had a server without ftp.exe evey kiddi deletes the ftp.exe cause it can`t secure it`s server on another way!!!
Buluemoon
Mar 17 2004, 02:23 PM
Has anyone tried this with sql exec for nethacker or Sqlexec (with the green apple. if so how was it done, surely you dont enter one line at a time.
oblivion2004
Mar 18 2004, 01:48 AM
lmao if u are THAT desperate i guess its cool, get someone to open a BAT file over an exe file? Or are you talking about executing it locally to bypass something?
Probably getting that into a PIF file would be more handy, its been done many times before and MANY MANY viruses use it.
Axl
Mar 18 2004, 02:21 AM
he's talking about when someone has deleted ftp.exe yo u can make it by doing this
oblivion2004
Mar 18 2004, 02:23 AM
oh ok i need to read more carefully, i was in a hurry but decided to post anyway :|
Axl
Mar 18 2004, 02:30 AM
QUOTE (Buluemoon @ Mar 17 2004, 02:23 PM)
Has anyone tried this with sql exec for nethacker or Sqlexec (with the green apple. if so how was it done, surely you dont enter one line at a time.
If you are wondering how to do it in sql, then open up sql browser and put all these into the command area... should work EDIT: Ah shit too long ok here http://www.quantumtopology.com/ftp.txt
make2004
Mar 18 2004, 06:43 AM
i think you could just use any hex editor
Buluemoon
Mar 18 2004, 03:28 PM
@ QuantumTopology going to give this a try will report back with results.
pollo
Mar 18 2004, 09:53 PM
Very, very nice...and nasty!!It works well as u say
oxydrine
Mar 19 2004, 07:05 AM
Wonderfull way isn't it,
thx for this way and smuccchhhhhh
Serhat
Mar 19 2004, 11:14 PM
Great trick... But maybe a tip.. make your own version cause... this is the french version {looks like french} of ftp.exe
Nice job
Serhat
101
Mar 20 2004, 01:52 PM
Right SerHat this is the ftp.exe of XP SP1 fr ;<
The Doom Master
Mar 20 2004, 02:16 PM
Nice Tools for passing Thorugh the Patch Servers and the Firewall that Block
Thanx for the Tools...
garcia
Mar 20 2004, 03:20 PM
what a nice method thx
SCVirus
Mar 20 2004, 09:03 PM
yeah its a nice method that i suggested when someone asked if exe to batch was possible.
Serhat
Mar 21 2004, 12:02 AM
QUOTE (101 @ Mar 20 2004, 01:52 PM)
Right SerHat this is the ftp.exe of XP SP1 fr ;<
heh .. Looks like after 3 years of no french {@ school} I still knida know how the language is like
Serhat
pollo
Mar 21 2004, 12:23 AM
2Fa$t
Apr 9 2004, 04:36 PM
QUOTE
QUOTE (Buluemoon @ Mar 17 2004, 02:23 PM) Has anyone tried this with sql exec for nethacker or Sqlexec (with the green apple. if so how was it done, surely you dont enter one line at a time.
If you are wondering how to do it in sql, then open up sql browser and put all these into the command area... should work EDIT: Ah shit too long ok here http://www.quantumtopology.com/ftp.txt
The link above doesnt work anymore someone has another method to copy and paste in sql?
Thx for suggestions!
101
Apr 9 2004, 08:17 PM
copy & past each lines with your hands :Q
KammSchott
Apr 11 2004, 08:16 PM
yes, i really want to know how to use it with sqlexec without to put line by line.
misa
Apr 11 2004, 09:54 PM
theres no other way, you got to put it line by line
or upload it with tftp, hehe
FiNaLBeTa
Apr 11 2004, 10:11 PM
QUOTE (misa @ Apr 11 2004, 09:54 PM)
theres no other way, you got to put it line by line
or upload it with tftp, hehe
echo line 1 >> test.txt & echo line 2 >> test.txt & echo line 3 >> test.txt
test that.
ZoraX
Apr 11 2004, 11:35 PM
anybody tested this on a shell? i have only tested localy, and it works here:)
Joc00
Apr 12 2004, 02:01 PM
Just tested locally on my machine. nice stuff. next test remotely
The Storm
Apr 20 2004, 01:48 PM
on SQLEXEC2 (posted in DL section) u can put a few commands in one by binding them with a & but there is no space f.e.
echo line 1 >> test.txt&echo line 2 >> test.txt&echo line 3 >> test.txt&...
I think ther should be no space. And i don`t know if SQLEXEC2 can handle so many echo commands! if someone put a & after each line pls post the txt here!
dEuS
Apr 20 2004, 08:44 PM
thank you man! nice idea
it works am my computer, but i tried it on a server and the ftp.exe was only 24kb and does not work like an ftp.exe... strange maybe i lost some lines while echoing
cya
The Storm
Apr 21 2004, 07:21 AM
it`s just 24kb cause the author of this thread (sry I can`t remeber teh name) has packed it cause u have to write less lines. the ftp.exe worked on my pc. evt. u have to verify itz wit c:\windows\system32\ftp.exe -h I think thats the command!!! but I´m not sure could u pls attach ur txt with the bind lindes (line1&line2&line3% ...) would be gr8
101
Apr 21 2004, 01:44 PM
yep ftp.exe is packed to do a smaller.txt to echo. I took the ftp.exe from a xp sp1 fr then it should work on all xps, work so on win9x, not tested win2k, if its bugging for 2k anyway , put your own exe & do the debugging alone
B1G
Apr 21 2004, 08:40 PM
well....i tried it on a remote sql but it doesn't work .......while it works locally
sfzhi
Apr 21 2004, 11:10 PM
use exe2bat.exe you can make any exe to bat you can google it and find this tool
The Storm
Apr 22 2004, 08:55 AM
@B1G what way did u use to make the bat on the remote SQL?
droplogic66
Apr 23 2004, 03:00 AM
I get this error when executing the ftp.exe i get after using the ftp.bat given on page 2.
"The procedure entry point getnameinfo could not be located in the dynamic link library ws2_32.dll"
Tried making my own batch, but i cant get the hex code to look like that, exe2hex makes it all screwed up.
Anyone mind telling me how exactly i go about making my own?