monthly archive for March, 2009

There were days when we were connected to the Internet without being afraid someone could intrude our computers and install malicious programs to steal our account and credit card information or accounting data from our computers. At least we thought so but actually that time never really existed somewhen in the year 1997, the [...]

read full post »

Below, you can find a link to the example source code to bypass a desktop firewall with the OLE Automation technique. The principle is to start a hidden instance of the Internet Explorer and to control it via the OLE Automation technique.

ole_automation.cpp

read full post »

Stumbled upon last week …

One of the most impressing things I’ve stumbled on last week  is the laser based keystroke sniffer. Using equipment costing about 80$. By aiming the laser to the keyboard and due to the vibration it causes when hitting a specific key it is possible to determine which key it was. Read it here ….

Ehud Tenenbaum [...]

read full post »

Source : Binder stub

Below, you can find a link to the source code with the function(s) for a complete joiner/binder. This joiner/binder is straightforward without bigger features like scrambling and encryption.
It shows how to configure a new header structure, how to attach files to it, how to detach these files again, how to execute it and how to [...]

read full post »

Malware propagation is one of the most fascinating parts of the attackers activities and is attracting, besides the anger of the affected people, the most attention. It is the part where all the magic of infection and intrusion happens, where attackers release the malicious software to the wild and try to infect new victim systems [...]

read full post »

Below, you can find a link to the source code with the function(s) to stop Desktop Firewalls and Anti Virus software. This is a rather old technique and not a promising one that probably doesn’t work anymore. You also have to complete the process and service names of the software because I was too [...]

read full post »

Dear reader out there

This post goes right out to you! Since some weeks now I am posting about malware, what it does, how it works, not yet how to protect against it (but I will do so soon) and generally stuff concerning that topic.
I see a lot of traffic coming from US and UK what means, these people [...]

read full post »

The image problem of a malware homepage

The question that kept me busy and made me feel uncertain from time to time once was what the final goal of all this will be or what direction shall I walk. Because, frankly, running a webpage with focus on a topic that is punishable in the most countries and publishing posts about the ways [...]

read full post »

The lifecycle of a trojan horse

Summarizing the lifecycle of a trojan horse as “configuration, infection, action, deletion” would be too brief and you would miss a lot of important and valuable information that makes you understand how they are constructed, how the internal structure looks like and how to breathe life into them. I want to give you the [...]

read full post »

Below, you can find a link to the source code with the function(s) to encrypt and decrypt data buffers with the RC4 altorithm.
rc4.cpp

read full post »

older posts »