Government Security
Network Security Resources

Jump to content

Photo

KaHT.exe and Source


  • Please log in to reply
5 replies to this topic

#1 Blake

Blake

    Former Commander In Chief

  • Retired Admin
  • 7,334 posts

Posted 24 June 2003 - 11:09 AM

I've been getting alot of requests for it. So here it is.

Summary: Anti-virus companies have reported a trojan kit called KaHT. It is also known as “rolark” (“kralor” spelled backwards) because it uses the same shellcode as the kralor exploit. Unlike the other kralor-based exploit kits, this kit is capable of mass automated exploitation of vulnerable hosts once it is set in motion. Its features include a built-in listener to receive incoming shells and run commands from a predefined list, the ability to read a list of IPs to exploit, and intelligent brute-forcing of the offset using a set of known "hot" return offsets

http://www.greyhat.o...its/2003/april/

Download KaHT.exe and Source

#2 Fletcher

Fletcher

    Private First Class

  • Members
  • 53 posts

Posted 26 July 2003 - 01:17 PM

For you information:

does not working: http://www.greyhat.o...its/2003/april/


Download KaHT.exe is not in the compressed files

#3 Blake

Blake

    Former Commander In Chief

  • Retired Admin
  • 7,334 posts

Posted 30 July 2003 - 01:43 PM

Are sure about that, it is in the tar.

For you information:

does not working: http://www.greyhat.o...its/2003/april/


I know the site goes up and down, that's why I mirror the files locally, so the members can always have it ;)

#4 Faceless Master

Faceless Master

    Staff Sergeant

  • Members
  • 259 posts

Posted 24 January 2004 - 09:33 AM

I m facing problem downloading the attached file.
It aint downloading
Regards
~Faceless Master

#5 Guest_101_*

Guest_101_*
  • Guests

Posted 24 January 2004 - 10:44 AM

I've been getting alot of requests for it. So here it is.


how possible ? :)

really old this one but evil, at4r was the coder of it.
look at the haxorcitos crew website .

#6 radien

radien

    Private First Class

  • Members
  • 73 posts

Posted 24 January 2004 - 12:32 PM

GSec the mirror needs authentication!
But, I've found a file w/ the same name on two mirrors, I dunno if they are same az yours.

Mirror 1, SF

Mirror 2, 3W Design and Security




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users