Articles

Metasploit Framework Windows Tutorial
Remote Desktop Connection
Windows Processes That May Be Dangerous
How-To use NetCat a Tutorial
Common Linux Commands
Common Ports
Netcat Commands
HTTP Response Codes
War-Google Hack Terms
Wardriving
Avoiding Social Engineering and Phishing Attacks
Intrusion Detection on Linux
Linux Intrusion Detection
Penetration Testing Guide
Penetration Testing Tools
Social Engineering Fundamentals, Part I: Hacker Tactics
Social engineering (computer security)
The Psychology of Social Engineering

The Archives

General GSO
GovernmentSecurity.org News & Suggestions
In The News
Open Topic
General Security Information
Trash Can
Exploit & Vulnerability Mailing List Archives
Trial Member Forum
Product and Program Reviews GSO Tutorials
System Security
Windows Systems
Beginners Section
Linux & Unix Systems
File Downloads
Exploit Research & Discussion Trojan & Virus Errata
Networking Security / Firewall / IDS / VPN / Routers
System Hardening
E-Mail Security
Wifi Security
Trial Member Uploads
Upload discovered Trojans & Mal ware
GSO Programming Section
C , C++ , VC++
Visual Basic.NET
Perl /CGI
Java/Javascript
PHP/XML/ASP/HTML
Assembly + Other
The Cork Board
Network Security Consultant Directory
Network Security Jobs
The Archives
Encryption Information
General Network Security
Internet Anonymity
HTTP Protocol Security
Linux Security
MS IIS Information
Exploit Articles
Programming / Tool Design
GSO Software Projects
Public Downloads
Microsoft Security Questions and Papers

Full Version: Bindcrypter
tibbar
This is a project in its early days, for binding files. It's not quite automated yet, but works well enough...

Attached are two projects, one for crypting your files, the other to create the binded exe.

Here's how to use it.

Say you wish to bind notepad.exe and calc.exe...

Step 1: Use CryptFile.exe as follows:

CODE

D:\cpp\CryptFile\Release>CryptFile.exe notepad.exe Seed used for encryption is: 0x23e4ddec . Remember this for later...



This gives me output: notepad.exe.crypt

Similarly, do this on calc.exe to give calc.exe.crypt.

Remember the seeds!

Step 2: Open up the binder project in Visual Studio 2003. Go to the resource tab, and add two resources for each crypted file. [right click, Add Resource, Import..., select all file types, select crypted file. Specify custom resource section name "CRYPT"].

Make sure the section is called CRYPT and the two resources are named IDR_CRYPT1, IDR_CRYPT2 otherwise this will fail:

CODE

FindDecryptAndWriteResource(IDR_CRYPT1, "CRYPT", file1, seed1); FindDecryptAndWriteResource(IDR_CRYPT2, "CRYPT", file2, seed2);


Step 3: Modify seed values and filenames for output at start of binder.cpp:

CODE

DWORD seed1 = 0x23C5943D; DWORD seed2 = 0x23D16998; char file1[] = "myFile1.exe"; char file2[] = "myFile2.exe";



Step 4: Rebuild the project in release mode.

You will now have a binded, self deleting executable.

If you want extra files binded, just use common sense to add another two lines to the code.

Enjoy!

N.B. next release should automate all this stuff for you. Eventually we might even have a GUI.
realloader

N.B. next release should automate all this stuff for you. Eventually we might even have a GUI.

Im waiting for!
Infected
great work man

can you explain how to add a resources using Dec C++ ?
and if i want only to crypt, how do i make the .crypt file into an .exe ?
tibbar
can you explain how to add a resources using Dec C++ ?

- no, I only use Visual Studio on windows.

and if i want only to crypt, how do i make the .crypt file into an .exe ?

- this is a binder which happens to encrypt files before binding, not a file crypter, so you can't do this. Try codeCrypter for this sort of thing.
apsync
just tested it with (ms)visual studio 6 and it worked great, waiting for the new version unsure.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2005 Invision Power Services, Inc.