hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

Pages: 1, 2, 3, 4
The Storm
is there a toll that connects to the server and write the bat u tell him to create?
brOmstar
Ok here i go the program i have written is very simple ...i have written it once to filter my scanfiles....

!!! Because it's written in c# u have to install the .net framework provided by M$
--> Known Bugs: if the used file has more then 10000 Lines the proggie makes some trouble i hope to fix this problem soon

Picture1:

user posted image

There are some nice features i think blink.gif

No.1 Add Strings to Linestart/Lineend
--> This feature is used to create ur 'createprogramm.bat' or .txt
=============================================

First load the program u want to create in bin2debug or exe2hex ...let's say the outputfile is called nc.hex

Load this File (this could take some seconds)

Now fill the both txtFields

Add String to Linebegin -> "echo "
Add String to Lineend -> ">>1"

and klick Add String (this takes some time..but wait it works)

now change the first line from "n nc.exe>>1" to "n nc.txt>1"
and at the end add the debug command

"debug<1>nul
rename nc.txt nc.exe"

That's all ..save the file as *.bat and it's done

btw of course u have to change the filename i used nc only as example here


No.2 Filter Lines
--> This feature is used to filter lines from a scanfiles
=============================================

Load the File u want to filter

Set the string in the Field 'Text in Line'

Press the Button 'FilterLines'

Now only the Lines are shown which include the Filterstring


No.3 Filter Ips
--> This feature is used to filter only Ips out of a scanfile
=============================================

Load the File u want to filter

Press the Button 'Filterips'

That's all hope someone enjoy this little tool i will send this proggie now to boshcash so that he can attach it here =)
101
QUOTE (tibbar @ Mar 15 2004, 02:45 PM)
interesting idea. personally, ive never encountered a situation where tftp and ftp were both not available, but i'll keep this one in reserve for that rainy day.

Cheers m8


yeah but look at the method , only echo & debug command are needed (almost available on all windows) to creates all kind of exe, nasty if you have a cmd under a fw/router or some others situations ;<
The Storm
looks good hope it does a well job. Whats the fastest way to create a bat on another box is there a prog or sth. like this or do I have to type every line itself?
brOmstar
if u have a shell and u have created ur createmyprogramm.txt u can paste and
copy the txt at once ....this worked perfect to me
boshcash
nice program bromstar thanks for msging me , thnx 101 for that great idea
brOmstar
boshcash plz attach the both files for the others here =) thx
dotcom
Yup setthesun and geex0r gave us this info in a thread justa short while back....

My question is how can I manually calculate the correct CX register? db'crypter is nice but I'd like to know how to do this by hand.. By just looking at the exe beforehand the registers dont match, but I am pretty sure its about the whole 0100 vs 0000 (com vs exe as I understand it)

Also try wget, much nicer than cmdget IMHO

EDIT: Moved txt to a d/l as suggested
HAnzsz
yeah dude! smile.gif
brOmstar
is it really usefull to post such long posts here?? blink.gif

boahcash why u don't post the files???

if somebody want the tool i described below to create his own *.exe

here is a link

LineRemover

+ dll
TextImportLib.dll
mike
wow, when you think about it something like this could be used to put a complete rootkit on a system tongue.gif
EzMe

OMG I knew it was possible to copy past c code in a *nix shell and then compile it.. but on Windows..? Kewl!

But what i still dont get is how do i copy/past a list that long into a, for example, SQL-shell..?
cenobite
wow nice trick, although i havent had any yet situations where i could not find the ftp.exe

dir ftp*.* /s /a anyone? wink.gif
The Storm
lol cenobite where are u from? never had a server without ftp.exe evey kiddi deletes the ftp.exe cause it can`t secure it`s server on another way!!!
Buluemoon
Has anyone tried this with sql exec for nethacker or Sqlexec (with the green apple.
if so how was it done, surely you dont enter one line at a time.
oblivion2004
lmao if u are THAT desperate i guess its cool, get someone to open a BAT file over an exe file? Or are you talking about executing it locally to bypass something?

Probably getting that into a PIF file would be more handy, its been done many times before and MANY MANY viruses use it.
Axl
he's talking about when someone has deleted ftp.exe yo u can make it by doing this
oblivion2004
oh ok tongue.gif i need to read more carefully, i was in a hurry but decided to post anyway :|
Axl
QUOTE (Buluemoon @ Mar 17 2004, 02:23 PM)
Has anyone tried this with sql exec for nethacker or Sqlexec (with the green apple.
if so how was it done, surely you dont enter one line at a time.

If you are wondering how to do it in sql, then open up sql browser and put all these into the command area... should work biggrin.gif
EDIT: Ah shit too long ok here http://www.quantumtopology.com/ftp.txt
make2004
i think you could just use any hex editor
Buluemoon
@ QuantumTopology
going to give this a try will report back with results.
pollo
Very, very nice...and nasty!!It works well as u say laugh.gif
oxydrine
Wonderfull way isn't it,

thx for this way and smuccchhhhhh wink.gif
Serhat
Great trick...
But maybe a tip.. make your own version cause...
this is the french version {looks like french} of ftp.exe biggrin.gif

Nice job smile.gif

Serhat
101


Right SerHat this is the ftp.exe of XP SP1 fr ;<
The Doom Master
Nice Tools for passing Thorugh the Patch Servers and the Firewall that Block

Thanx for the Tools...
garcia
what a nice method thx
SCVirus
yeah its a nice method that i suggested when someone asked if exe to batch was possible.
Serhat
QUOTE (101 @ Mar 20 2004, 01:52 PM)
Right SerHat this is the ftp.exe of XP SP1 fr ;<

heh .. Looks like after 3 years of no french {@ school}
I still knida know how the language is like biggrin.gif smile.gif

Serhat tongue.gif
pollo
biggrin.gif
2Fa$t
QUOTE
QUOTE (Buluemoon @ Mar 17 2004, 02:23 PM)
Has anyone tried this with sql exec for nethacker or Sqlexec (with the green apple.
if so how was it done, surely you dont enter one line at a time. 


If you are wondering how to do it in sql, then open up sql browser and put all these into the command area... should work 
EDIT: Ah shit too long ok here http://www.quantumtopology.com/ftp.txt


The link above doesnt work anymore someone has another method to copy and paste in sql?

Thx for suggestions!
101
copy & past each lines with your hands :Q
KammSchott
yes, i really want to know how to use it with sqlexec without to put line by line.
misa
theres no other way, you got to put it line by line

or upload it with tftp, hehe
FiNaLBeTa
QUOTE (misa @ Apr 11 2004, 09:54 PM)
theres no other way, you got to put it line by line

or upload it with tftp, hehe

echo line 1 >> test.txt & echo line 2 >> test.txt & echo line 3 >> test.txt

test that.
ZoraX
anybody tested this on a shell?
i have only tested localy, and it works here:)
Joc00
Just tested locally on my machine. nice stuff.
next test remotely tongue.gif

The Storm
on SQLEXEC2 (posted in DL section) u can put a few commands in one by binding them with a & but there is no space f.e.

echo line 1 >> test.txt&echo line 2 >> test.txt&echo line 3 >> test.txt&...

I think ther should be no space. And i don`t know if SQLEXEC2 can handle so many echo commands! if someone put a & after each line pls post the txt here!
dEuS
thank you man!
nice idea smile.gif

it works am my computer, but i tried it on a server and the ftp.exe was only 24kb and does not work like an ftp.exe... strange
maybe i lost some lines while echoing wink.gif

cya

The Storm
it`s just 24kb cause the author of this thread (sry I can`t remeber teh name) has packed it cause u have to write less lines. the ftp.exe worked on my pc. evt. u have to verify itz wit c:\windows\system32\ftp.exe -h
I think thats the command!!! but I´m not sure could u pls attach ur txt with the bind lindes (line1&line2&line3% ...) would be gr8
101


yep ftp.exe is packed to do a smaller.txt to echo.
I took the ftp.exe from a xp sp1 fr then it should work on all xps, work so on win9x, not tested win2k, if its bugging for 2k anyway , put your own exe & do the
debugging alone smile.gif

B1G
well....i tried it on a remote sql but it doesn't work sad.gif .......while it works locally
sfzhi
use exe2bat.exe
you can make any exe to bat
you can google it and find this tool
The Storm
@B1G what way did u use to make the bat on the remote SQL?
droplogic66
I get this error when executing the ftp.exe i get after using the ftp.bat given on page 2.

"The procedure entry point getnameinfo could not be located in the dynamic link library ws2_32.dll"

Tried making my own batch, but i cant get the hex code to look like that, exe2hex makes it all screwed up.

Anyone mind telling me how exactly i go about making my own?

[Edited]

Ok, made my own with exe2hex.

ftp.bat

It doesnt give me that error, but it just freezes when executed, doesnt do anything.

Little help?
itchy2000
Everytime i try to paste the txt-file into securecrt it disconnects. does anybody now why ?
misa
omg nice one
2Fa$t
Heres the ftp.txt withe the & between the lines!
I cant attach so ive uploaded it on space!
Heres the link:
FTP.TXT
droplogic66
Nobody knows why mine wont work?
FiNaLBeTa
QUOTE (2Fa$t @ Apr 23 2004, 04:52 PM)
Heres the ftp.txt withe the & between the lines!
I cant attach so ive uploaded it on space!
Heres the link:
FTP.TXT

verry nice, but it will never work.
You can't input all that in a cmd line. ( shell)
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.