Decompiling A Key Stealer

Is there anyone out there that would like to teach me how to decompile a key stealer? I've only learned some of Arma II's scripting engine and I plan to learn how to code C++ soon, looking at a key stealers code would also be a cool example of C++; anyone out there that would like to help me?
Skype: <Removed>

I use a program called Red Gate Reflector I downloaded it from a torrent site because its 70$+ to buy but you can get a free trial by searching Google.

Originally Posted by xGTx

I use a program called Red Gate Reflector I downloaded it from a torrent site because its 70$+ to buy but you can get a free trial by searching Google.

Just installed it, any tips on how to use it?

open the program in it look through the files, most keystealers are obfuscated

Originally Posted by xGTx

open the program in it look through the files, most keystealers are obfuscated

Thank you so much Gavo! I got it working and I decompiled a key stealer and managed to find its website; however all I got was a blank page so I think it redirects the keys. Thank you again

Originally Posted by Jim Morrison

Thank you so much Gavo! I got it working and I decompiled a key stealer and managed to find its website; however all I got was a blank page so I think it redirects the keys. Thank you again

i think you need to learn how to sql inject now

Originally Posted by neoleathakz

i think you need to learn how to sql inject now

Probably but I have no one to teach me how.

Originally Posted by Jim Morrison

Probably but I have no one to teach me how.

message me your skype. on MPGH.

VB Decompiler Pro is a good one, very simple to understand

What are you trying to do with the newly found information?

I have managed to decompile and get the websites like normenjaydenfbi but how are you suppose to sql inject a blank website? Would love if someone could send me a guide or something.

Originally Posted by fifman

I have managed to decompile and get the websites like normenjaydenfbi but how are you suppose to sql inject a blank website? Would love if someone could send me a guide or something.

Its not SQL Injection, Most files are .log which are written from php so if you get to ?w= it means it writes to somewhere in a .log file like /keys.log

Originally Posted by xGTx

Its not SQL Injection, Most files are .log which are written from php so if you get to ?w= it means it writes to somewhere in a .log file like /keys.log

So would something like net.net - The first domain name on the Internet! to find the keys would it be net.net - The first domain name on the Internet! or net.net - The first domain name on the Internet! Just cause I have tried a few different ways and am still to find the keys.

Also for ones that send it via email this is what I find

FileSystem.FileGet(1, ref this.emailname, -1L, false);
FileSystem.FileGet(1, ref this.pwodrt, -1L, false);
FileSystem.FileGet(1, ref this.emailhost, -1L, false);

None of them ever have the email address or password?

Originally Posted by xGTx

Its not SQL Injection, Most files are .log which are written from php so if you get to ?w= it means it writes to somewhere in a .log file like /keys.log

Could you explain this in a bit more depth to me in a PM?

---------- Post added at 11:01 PM ---------- Previous post was at 10:58 PM ----------

Originally Posted by xGTx

Its not SQL Injection, Most files are .log which are written from php so if you get to ?w= it means it writes to somewhere in a .log file like /keys.log

I just cracked my first key stealer, I wub you <3

Originally Posted by Jim Morrison

Could you explain this in a bit more depth to me in a PM?

---------- Post added at 11:01 PM ---------- Previous post was at 10:58 PM ----------

I just cracked my first key stealer, I wub you <3

Normen, if you have some time could you PM'me your Skype?
I really want to learn it and I'm willing to "trade scripting knowledge" with you.
Anyway, my Skype: guilherme.rc1

Decompiling A Key Stealer

Similar Threads

Tags for this Thread