Page 1 of 2 12 LastLast
Results 1 to 15 of 23
  1. #1
    Jim Morrison's Avatar
    Join Date
    Sep 2011
    Gender
    male
    Location
    Canterlot, Equestria
    Posts
    12,444
    Reputation
    1090
    Thanks
    3,336

    Decompiling A Key Stealer

    Is there anyone out there that would like to teach me how to decompile a key stealer? I've only learned some of Arma II's scripting engine and I plan to learn how to code C++ soon, looking at a key stealers code would also be a cool example of C++; anyone out there that would like to help me?
    Skype: <Removed>
    Last edited by Jim Morrison; 09-12-2014 at 09:38 PM.

  2. #2
    xGTx's Avatar
    Join Date
    Jan 2012
    Gender
    male
    Posts
    200
    Reputation
    16
    Thanks
    4,044
    I use a program called Red Gate Reflector I downloaded it from a torrent site because its 70$+ to buy but you can get a free trial by searching Google.

  3. The Following User Says Thank You to xGTx For This Useful Post:

    [MPGH]Jim Morrison (12-11-2012)

  4. #3
    Jim Morrison's Avatar
    Join Date
    Sep 2011
    Gender
    male
    Location
    Canterlot, Equestria
    Posts
    12,444
    Reputation
    1090
    Thanks
    3,336
    Quote Originally Posted by GavoTrav View Post
    I use a program called Red Gate Reflector I downloaded it from a torrent site because its 70$+ to buy but you can get a free trial by searching Google.
    Just installed it, any tips on how to use it?

  5. #4
    blasstock's Avatar
    Join Date
    Dec 2011
    Gender
    male
    Posts
    20
    Reputation
    10
    Thanks
    0
    My Mood
    Inspired
    VB Decompiler Pro is a good one, very simple to understand

  6. #5
    xGTx's Avatar
    Join Date
    Jan 2012
    Gender
    male
    Posts
    200
    Reputation
    16
    Thanks
    4,044
    open the program in it look through the files, most keystealers are obfuscated

  7. The Following User Says Thank You to xGTx For This Useful Post:

    [MPGH]Jim Morrison (12-11-2012)

  8. #6
    Jim Morrison's Avatar
    Join Date
    Sep 2011
    Gender
    male
    Location
    Canterlot, Equestria
    Posts
    12,444
    Reputation
    1090
    Thanks
    3,336
    Quote Originally Posted by GavoTrav View Post
    open the program in it look through the files, most keystealers are obfuscated
    Thank you so much Gavo! I got it working and I decompiled a key stealer and managed to find its website; however all I got was a blank page so I think it redirects the keys. Thank you again

  9. #7
    Gray's Avatar
    Join Date
    Nov 2012
    Gender
    male
    Location
    Sweden
    Posts
    13,557
    Reputation
    2516
    Thanks
    10,618
    What are you trying to do with the newly found information?

  10. #8
    neoleathakz's Avatar
    Join Date
    Nov 2012
    Gender
    male
    Posts
    127
    Reputation
    10
    Thanks
    19
    My Mood
    Yeehaw
    Quote Originally Posted by NormenJaydenFBI View Post
    Thank you so much Gavo! I got it working and I decompiled a key stealer and managed to find its website; however all I got was a blank page so I think it redirects the keys. Thank you again
    i think you need to learn how to sql inject now

  11. #9
    Jim Morrison's Avatar
    Join Date
    Sep 2011
    Gender
    male
    Location
    Canterlot, Equestria
    Posts
    12,444
    Reputation
    1090
    Thanks
    3,336
    Quote Originally Posted by neoleathakz View Post
    i think you need to learn how to sql inject now
    Probably but I have no one to teach me how.

  12. #10
    neoleathakz's Avatar
    Join Date
    Nov 2012
    Gender
    male
    Posts
    127
    Reputation
    10
    Thanks
    19
    My Mood
    Yeehaw
    Quote Originally Posted by NormenJaydenFBI View Post
    Probably but I have no one to teach me how.
    message me your skype. on MPGH.

  13. #11
    fifman's Avatar
    Join Date
    Jul 2009
    Gender
    male
    Posts
    11
    Reputation
    10
    Thanks
    0
    I have managed to decompile and get the websites like normenjaydenfbi but how are you suppose to sql inject a blank website? Would love if someone could send me a guide or something.

  14. #12
    xGTx's Avatar
    Join Date
    Jan 2012
    Gender
    male
    Posts
    200
    Reputation
    16
    Thanks
    4,044
    Quote Originally Posted by fifman View Post
    I have managed to decompile and get the websites like normenjaydenfbi but how are you suppose to sql inject a blank website? Would love if someone could send me a guide or something.
    Its not SQL Injection, Most files are .log which are written from php so if you get to ?w= it means it writes to somewhere in a .log file like /keys.log

  15. #13
    fifman's Avatar
    Join Date
    Jul 2009
    Gender
    male
    Posts
    11
    Reputation
    10
    Thanks
    0
    Quote Originally Posted by GavoTrav View Post
    Its not SQL Injection, Most files are .log which are written from php so if you get to ?w= it means it writes to somewhere in a .log file like /keys.log
    So would something like net.net - The first domain name on the Internet! to find the keys would it be net.net - The first domain name on the Internet! or net.net - The first domain name on the Internet! Just cause I have tried a few different ways and am still to find the keys.

    Also for ones that send it via email this is what I find

    FileSystem.FileGet(1, ref this.emailname, -1L, false);
    FileSystem.FileGet(1, ref this.pwodrt, -1L, false);
    FileSystem.FileGet(1, ref this.emailhost, -1L, false);

    None of them ever have the email address or password?
    Last edited by fifman; 12-11-2012 at 08:55 PM.

  16. #14
    Jim Morrison's Avatar
    Join Date
    Sep 2011
    Gender
    male
    Location
    Canterlot, Equestria
    Posts
    12,444
    Reputation
    1090
    Thanks
    3,336
    Quote Originally Posted by GavoTrav View Post
    Its not SQL Injection, Most files are .log which are written from php so if you get to ?w= it means it writes to somewhere in a .log file like /keys.log
    Could you explain this in a bit more depth to me in a PM?

    ---------- Post added at 11:01 PM ---------- Previous post was at 10:58 PM ----------

    Quote Originally Posted by GavoTrav View Post
    Its not SQL Injection, Most files are .log which are written from php so if you get to ?w= it means it writes to somewhere in a .log file like /keys.log
    I just cracked my first key stealer, I wub you <3

  17. #15
    Mr. Bunny's Avatar
    Join Date
    Dec 2012
    Gender
    male
    Posts
    2
    Reputation
    10
    Thanks
    0
    My Mood
    Amazed
    Quote Originally Posted by NormenJaydenFBI View Post
    Could you explain this in a bit more depth to me in a PM?

    ---------- Post added at 11:01 PM ---------- Previous post was at 10:58 PM ----------



    I just cracked my first key stealer, I wub you <3
    Normen, if you have some time could you PM'me your Skype?
    I really want to learn it and I'm willing to "trade scripting knowledge" with you.
    Anyway, my Skype: guilherme.rc1
    Last edited by Mr. Bunny; 12-11-2012 at 09:34 PM.

Page 1 of 2 12 LastLast

Similar Threads

  1. [Info] Avoid Key stealers
    By xGTx in forum DayZ Mod & Standalone Hacks & Cheats
    Replies: 35
    Last Post: 02-03-2013, 07:27 AM
  2. serial\registry key stealer
    By undergroundhack in forum C++/C Programming
    Replies: 1
    Last Post: 07-16-2009, 01:03 PM

Tags for this Thread