HellBound Hackers
Join us at IRC!
It is the path of least resistance that makes rivers and men crooked. - Bj Palmer
Wednesday, February 08, 2012
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
HellBoundHackers Additional:
Shop
Learn
Communicate
Submit
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Interact
Other
HellBoundHackers Executive:
HellBoundHackers Leisure:
Members Online
Total Online: 45
Web Spiders: 28
Guests Online: 42
Members Online: 3
conner, j0kex, tuere816

Registered Members: 67246
Newest Member: Robojojo
Latest Articles
View Thread

HellBound Hackers | Computer General | Programming
Author

Appending data
sk8more272
Member

Posts: 15
Location:
Joined: 14.02.10
Rank: Hacker Level 1
Posted on 09-03-10 22:09
Hey guys, im currently developing a program that replaces another program exactally and logs data. it then uploads it to an ftp and then uses the normal programs shell to pass the data. I made the package commercial, it contains a remote install exe for distribution and an exe to edit the ftp settings. when the main exe is edited it appends the ftp host,uername and host to the end of the exe. at the time i diddnt realize what a security vulnerability this was until somebody got the info from the exe and jacked all my uploaded........ data..... after sniffing packets or reading the plain text settings in the exe. So i have 2 questions.

1. how could i make the the ftp setting secure in the main exe, i was thinking of writing an encryption algorithm to write the data and then reading it when the exe is executed, or is there a better way, while still keeping it in one exe file?

and 2. how can i protect the packets from being sniffed when the contents are being uploaded?

thanks in advance :]
Author

RE: Appending data
define
Member

Posts: 201
Location:
Joined: 13.12.08
Rank: Moderate
Warn Level: 1
Posted on 12-03-10 02:18
sk8more272 wrote:
1. how could i make the the ftp setting secure in the main exe, i was thinking of writing an encryption algorithm to write the data and then reading it when the exe is executed, or is there a better way, while still keeping it in one exe file?

and 2. how can i protect the packets from being sniffed when the contents are being uploaded?

Going to take a stab at this one.

1. If they're reversing the exe at all, then there are some good anti-reversal techniques here: http://www.codeproject.com/KB/security/AntiReverseEngineering.aspx

In particular, they address how to detect the presence of a debugger, which you could use to stop the execution of it.

2. SSH sounds like a first try. :)

If you need to contact me, send me a PM. I will read and/or respond in time.
Guest
Username

Password

Remember Me


Bookmark This Page
Affiliates
Adverts

 

 

160 x 600
Links

Anime Wallpaper Site
By using, viewing or obtaining any information contained on this site, you agree to the disclaimer.

© HellBound Hackers 2004 - 2012. Since 3rd December 2004.

19681873 Unique Visits

Powered by HBH-Fusion