[REQ] 2belove

[VASTskiies]

Pd mo e decompile ang Wimac Hunter V.3.5? Smells something eh. As what I had observed.​

 

[theraryu]

ts matagal na po,.search mo mga thread nya

 

[thinelev]

Ako na nagsearch para sayo TS...

nadecompile ko na yan at wala naman ko nakita malicious codes.

wag kayo basta humuhusga ng isang proggy base lang sa pagscan sa mga av engines, alam nyo naman na may mga false alarms, may whitelisting feature rin sila kasi alam nila na di lahat ng result ng scan nila ay perpekto. kung alam mo na may keylogger yan, alam mo na may, mga kinokonekan yan ftp/smtp server para dun ipadala yung mga mananakaw nila kung may mga codes man sila na ganun, and so para makonpirma mo, sana gumamit ka ng mga network sniffer na tools. or if you know some RE, you could use it to prove kung anuman mga hinala mo.

yung kay syntax dati, dinecompile ko na yun and clean naman yung codes nya, wala codes ng pagnanakaw.

ok wait for my reverse engineering approach if it have those malicious codes.

edit:

eto lang naman mga nakita ko dun na url:

https://www.facebook.com/The.Casper.hf
http://www.symbianize.com/showthread.php?t=928192
https://www.facebook.com/Verbatim29
https://www.facebook.com/wimax.scraper.3
https://www.facebook.com/macbyte
https://www.facebook.com/PreciousLovely16
https://www.facebook.com/gridfctor
www.google.com

im looking for encrypted strings, but zero result...

ok so judge if maipapadala ba dyan sa mga yan macs nyo?

 

[asiongcaltupang]

gandang gamitin tools na yan pero hindi maalis ang pagdududa

 

[Culsjane]

Puwedeng pare-certify ulit? Edited na kasi ang thread kung saan mada-download ang tool, baka kako kasi pati 'yung tool "na-edit" na at hindi na 'yung orig na na-decompile dati.

D'un lang pumapaling ang isip ko kung ang pag-uusapan ay ang pagkakaroon ng "palaman" ng particular tool na ito. Sayang din kasi, maraming magandang feedback kaso hindi mawala-wala ang issue ng palaman. Para lang din wala nang masabi ang iba, 'di ba?

No offense meant po sa developer ng tool at sa nag-decompile at nag-certify dati na malinis ang tool. I am a TSR kasi that deals with security of accounts in an online selling website, kaya mabusisi ako when it comes to security issues. We are trained to be like that.
Pero siyempre, may choice naman ang lahat kung gusto nilang gamitin ang tool or hindi. Ang sa akin lang ay sayang, mahusay na tool pa naman ang impression ko because of a lot of good feedback.

 

[Z a c h a r y]

try this ..

go to your CONTROL PANEL > System and Security > Windows Firewall > Advanced Settings > Windows Firewall Properties > Outbound Connections (set to Block)

may palaman man o wala sigurado akong wala silang mapapala ..


the tools you guys are using is for free .. so you have to live with the consequences ..

 

[VASTskiies]

Puwedeng pare-certify ulit? Edited na kasi ang thread kung saan mada-download ang tool, baka kako kasi pati 'yung tool "na-edit" na at hindi na 'yung orig na na-decompile dati.

D'un lang pumapaling ang isip ko kung ang pag-uusapan ay ang pagkakaroon ng "palaman" ng particular tool na ito. Sayang din kasi, maraming magandang feedback kaso hindi mawala-wala ang issue ng palaman. Para lang din wala nang masabi ang iba, 'di ba?

No offense meant po sa developer ng tool at sa nag-decompile at nag-certify dati na malinis ang tool. I am a TSR kasi that deals with security of accounts in an online selling website, kaya mabusisi ako when it comes to security issues. We are trained to be like that.
Pero siyempre, may choice naman ang lahat kung gusto nilang gamitin ang tool or hindi. Ang sa akin lang ay sayang, mahusay na tool pa naman ang impression ko because of a lot of good feedback.

Tulad nitong sa tass ko. Hindi nman nagdududa kami. Alam naman kasi nating lahat mayrong consiq ang mga bagay2 dba? Sorry po sa developer. Try po ninyo sir.

 

[2belove]

ok i'll let any user of this tool to analyze it on their own, as ive already decompile it maybe there something ive missed.
here is the unpacked file as the original file is packed and so it couldn't be open in any decompiler.
http://rghost.net/56781084

open this through

http://www.red-gate.com/products/dotnet-development/reflector/

or

https://sites.google.com/site/simpledotnet/simple-assembly-explorer

now browse its code.

or upon using this, open any network snipper/firewall so you could see what url it connects.

httpdebugger
fiddler
wireshark
etc.

 

[wakaranay]

try this ..

go to your CONTROL PANEL > System and Security > Windows Firewall > Advanced Settings > Windows Firewall Properties > Outbound Connections (set to Block)

may palaman man o wala sigurado akong wala silang mapapala ..


the tools you guys are using is for free .. so you have to live with the consequences ..

baKit ngayon ka lang...hehehe..try ko to...

- - - Updated - - -

try this ..

go to your CONTROL PANEL > System and Security > Windows Firewall > Advanced Settings > Windows Firewall Properties > Outbound Connections (set to Block)

may palaman man o wala sigurado akong wala silang mapapala ..


the tools you guys are using is for free .. so you have to live with the consequences ..

baKit ngayon ka lang...hehehe..try ko to...

 

[matteodo]

I really like topics like this, di man ako astig na developer gaya ni Boss 2belove, pero intersted talaga ako magbasa ng ganitong thread!
Very much helpful to be much aware and nasasagot mga tanong ko.

To all na nagsisipag magrereply to clear something needs to be clarify, I salute you all!

To TS, if you really smells something fishy, wag mo na lang gamitin, may iba pa namang tools dyan eh, that's the Logic. okie!

But for me, of all tools maker, si Casper ang isa sa tinitingala ko. ​

 

[magetah69]

try this ..

go to your CONTROL PANEL > System and Security > Windows Firewall > Advanced Settings > Windows Firewall Properties > Outbound Connections (set to Block)

may palaman man o wala sigurado akong wala silang mapapala ..


the tools you guys are using is for free .. so you have to live with the consequences ..

sir windows 7 yata to sa windows xp pano po

 

[uripawn]

ok i'll let any user of this tool to analyze it on their own, as ive already decompile it maybe there something ive missed.
here is the unpacked file as the original file is packed and so it couldn't be open in any decompiler.
http://rghost.net/56781084

open this through

http://www.red-gate.com/products/dotnet-development/reflector/

or

https://sites.google.com/site/simpledotnet/simple-assembly-explorer

now browse its code.

or upon using this, open any network snipper/firewall so you could see what url it connects.

httpdebugger
fiddler
wireshark
etc.

salamat dito sir

 

[matteodo]

try this ..

go to your CONTROL PANEL > System and Security > Windows Firewall > Advanced Settings > Windows Firewall Properties > Outbound Connections (set to Block)

may palaman man o wala sigurado akong wala silang mapapala ..


the tools you guys are using is for free .. so you have to live with the consequences ..

Brad, ask lang about this. Can we specify yung ibblock lng ng firewall? I'm thinking kasi na baka may mablock din siya na outbound na hindi naman dapat. Gets my point? I'm not familiar sa mga outbound connections ng default pc when you are using it for everyday use like chatting, emailing or surfing. Thanks for the help anyway. ​

 

[theraryu]

try this ..

go to your CONTROL PANEL > System and Security > Windows Firewall > Advanced Settings > Windows Firewall Properties > Outbound Connections (set to Block)

may palaman man o wala sigurado akong wala silang mapapala ..


the tools you guys are using is for free .. so you have to live with the consequences ..

tol matanong ko lang..anong eba.block dun?

 

[thinelev]

tol matanong ko lang..anong eba.block dun?

OO nga naman....

Pwede yun sinasabi mo kaya lang dapat specified kung anu ang iboblock sa Outbound Rule ng firewall..

Try ninyo ang Link na nasa Signature ko

 

[VASTskiies]

salamat dito sir

I really like topics like this, di man ako astig na developer gaya ni Boss 2belove, pero intersted talaga ako magbasa ng ganitong thread!
Very much helpful to be much aware and nasasagot mga tanong ko.

To all na nagsisipag magrereply to clear something needs to be clarify, I salute you all!

To TS, if you really smells something fishy, wag mo na lang gamitin, may iba pa namang tools dyan eh, that's the Logic. okie!

But for me, of all tools maker, si Casper ang isa sa tinitingala ko. ​

Maganda kasi gamitin ang tool nya eh. Mabilis pang Snipe. Pero may kutob lang kasi ako eh. Iwan HAHAHA

ok i'll let any user of this tool to analyze it on their own, as ive already decompile it maybe there something ive missed.
here is the unpacked file as the original file is packed and so it couldn't be open in any decompiler.
http://rghost.net/56781084

open this through

http://www.red-gate.com/products/dotnet-development/reflector/

or

https://sites.google.com/site/simpledotnet/simple-assembly-explorer

now browse its code.

or upon using this, open any network snipper/firewall so you could see what url it connects.

httpdebugger
fiddler
wireshark
etc.

Meron na akung reflector Sir. Cracked. Hirap lang kasi ako eh. Dami kupang ginagawa ngayun kasi. Maybe next time. Kaya nga nag request ako sayo dba? BTW thank you sa pag response mo sir.

 

[Culsjane]

try this ..

go to your CONTROL PANEL > System and Security > Windows Firewall > Advanced Settings > Windows Firewall Properties > Outbound Connections (set to Block)

may palaman man o wala sigurado akong wala silang mapapala ..


the tools you guys are using is for free .. so you have to live with the consequences ..

Sir, d'un po ba sa tatlong profiles (Domain, Private, Public) iba-block? Nai-set ko na po sa "Block" 'yung Domain at Private profiles matagal na pero kapag 'yung public ang isi-set kong "Block", napuputol ang internet connection ng wimax ko po.

I'm not sure din kung Windows Firewall nga ang active sa lappy ko. Naka-Avast Pro po kasi ako na may firewall na nagpu-prompt kung papayagan ko mag-connect/browse outbound ang isang app (based sa setting ko sa Avast). Sapat na po ba 'yun? Ita-try ko one time 'yung tool to check kung iba-block ng avast ang outbound connection (kung mayroon man). Hindi rin kasi ako sure kung required ang outbound connection kung nag-i-snipe ang tool.

Meron na akung reflector Sir. Cracked. Hirap lang kasi ako eh. Dami kupang ginagawa ngayun kasi. Maybe next time. Kaya nga nag request ako sayo dba? BTW thank you sa pag response mo sir.

Sir, puwede rin po ba'ng maki-share sa cracked version ng reflector ninyo? Baka kasi mapag-aksayahan ko ng oras ang decompile-decompile na 'yan.

 

[babebabe27]

Sir, d'un po ba sa tatlong profiles (Domain, Private, Public) iba-block? Nai-set ko na po sa "Block" 'yung Domain at Private profiles matagal na pero kapag 'yung public ang isi-set kong "Block", napuputol ang internet connection ng wimax ko po.

I'm not sure din kung Windows Firewall nga ang active sa lappy ko. Naka-Avast Pro po kasi ako na may firewall na nagpu-prompt kung papayagan ko mag-connect/browse outbound ang isang app (based sa setting ko sa Avast). Sapat na po ba 'yun? Ita-try ko one time 'yung tool to check kung iba-block ng avast ang outbound connection (kung mayroon man). Hindi rin kasi ako sure kung required ang outbound connection kung nag-i-snipe ang tool.



Sir, puwede rin po ba'ng maki-share sa cracked version ng reflector ninyo? Baka kasi mapag-aksayahan ko ng oras ang decompile-decompile na 'yan.

Same experience tayo, kapag bnlock mo yung outbound connections ng public network. mawawala talaga internet. lahat kc ibblock nya, pakibigyan naman ng mas elaborated guide Sir Reyy yung tut mo...

TIA

Here's the PS of the settings na tinuro mo, pati gui d na maaccess once bnlock mo.
View attachment 176647