posted in Tools & sources on May 26th, 2009
Tool name :
FirewallBypassing++ 0.1
Description :
A tool to check if your desktop firewall can be bypassed by injecting code into a remote process. It opens an existing process (in this case a running instance of Internet Explorer), allocates memory in the address space of the remote process where the new malicious code will be copied to. [...]
read full post »
posted in Tools & sources on May 12th, 2009
Tool name :
Firewall bypassing 0.1
Description :
A tool to check if your desktop firewall can be bypassed via DLL injection (also called the FWB method). It opens an existing process and instructs it to load a specific DLL. Once the DLL is loaded by the foreign process the injected code will be executed.
This tool consists of [...]
read full post »
posted in Articles on Mar 31st, 2009
There were days when we were connected to the Internet without being afraid someone could intrude our computers and install malicious programs to steal our account and credit card information or accounting data from our computers. At least we thought so but actually that time never really existed somewhen in the year 1997, the [...]
read full post »
posted in Tools & sources on Mar 15th, 2009
Below, you can find a link to the source code with the function(s) to bypass a desktop firewall with the FWB++ technique. In the code we copy a malicious function into an other process, we execute this “remote function” and let the other process connect through the desktop firewall to http://www.megapanzer.com.
fwb++.cpp
read full post »