Silkroad Security Video

11/05/2008 19:49 wurstbrot123#1
Hi guys,
i just played a bit with Silkroad and c++.
The result was a Undetected Silkroad Keylogger.
I was Scanning it for fun on Virustotal.com
the result was 1/36
The 1 Antivir who said anythink
was Panda - Suspicous File
Maybe you have the Question now
why did you post this here?

Because i wanted that you can see how easy it is to get the id and password
from other user.
Thats why i made the Program into another small Program.
All the thinks like getting the Data and all is hided of course.

Here is a small Video

Youtube:
[Only registered and activated users can see links. Click Here To Register...]

Myvideo:
[Only registered and activated users can see links. Click Here To Register...]

Uploaded.to (full quali cuz quali on youtube and myvideo sucks) :
[Only registered and activated users can see links. Click Here To Register...]


Also you should be really Care and only using Programs that you can Trust.

// The file that you can see on WTS FTP PRO was sended by the program itself,
// i just was connected to the ftp server that you see that it will send the account data
// to an ftp server


BTW:
iam not a hacker, i was just trying out somethink a bit
and thats the Result.
Please dont ask how to get the id and pass and all the thinks the Program does. Only ask question that are related to the video.
I wont give any information about hacking Accounts or somethink
because i dont like Hacker.




Greetz
wurstbrot123
11/05/2008 20:35 Mizo007#2
i don't understand anything from the video :D

is you talking to hackers ???
11/05/2008 20:44 wurstbrot123#3
Quote:
Originally Posted by Mizo007 View Post
i don't understand anything from the video :D

is you talking to hackers ???
Nah, first of all iam going to my ftp program and refreshing the directory of the FTP Server (no data there).

Than iam running a program that i have written.

The Program is getting the ID the Password the Server and the Charname from the Silkroad account that is currently logged in.

After that iam closing the Program (the program itself is a small spammer, i just added the code to get the id pass server etc and sending it / saving it to an ftp server)

Than iam reshreshing the FTP Directory and huh?
a file named "accounts.txt" is there in this file are the Accountdata stored
also Charname, Server, Id and Password.

Also the Program you see in the video is getting this datas and sending it to a ftp so that the user who developed the program can easy get Login Informations from other guys while hiding this into another Program.

I made this Video that you guys see how easy thinks like that are done.
So you should be care in the Future :)

Greetz
Wurstbrot123
11/05/2008 21:04 Secura#4
Stop talking shit dude.
There is no Undetected Silkroad Keylogger.

And if your IQ would be greater than 20 you shure would notice that only one
Anti-Virus Programm (which is bullshit) has detected the "Keylogger".

Please ban yourself, kthnxbye.
11/05/2008 21:33 wurstbrot123#5
Quote:
Originally Posted by Secura View Post
Stop talking shit dude.
There is no Undetected Silkroad Keylogger.

And if your IQ would be greater than 20 you shure would notice that only one
Anti-Virus Programm (which is bullshit) has detected the "Keylogger".

Please ban yourself, kthnxbye.
What is wrong with you ?
And ur pretty false dude,
if you want ill send you my program because ur THAT NICE here
and because you say iam talking bullshit.
Than you can scan it yourself and use it.
Ill login into your Account and than we will see lol.
Really, with this post you let us know that ur just a idiot.
"Forum Asshole" that says all lol :3

BTW:
its not working like a Keylogger its working another way.
You should be right that there is no undetected Sro Keylogger,
but with this Program iam able to get your Account data and it
seems like tis Clean how i wrote.
I just wrote this Program today while beeing bored so its new ofc.
If any1 would develope a new Keylogger with his own methods
i think it should be clean too.


EDIT:

JUST FOR YOU -->

Virscan -->

[Only registered and activated users can see links. Click Here To Register...]

The Program:

[Only registered and activated users can see links. Click Here To Register...]

// DONT DOWNLOAD THIS PROGRAM THIS IS A PROGRAM THAT WILL GET YOUR ACCOUNT
// DATA I JUST UPLOADED IT FOR SECURA THAT HE CAN USE IT WHEN HES MEANING
// THAT IAM A LIER CUZ IT SEEMS LIKE ITS CLEAN ILL PROOF HIM THAT HES WRONG
// CUZ I DIDNT LIKE IT WHEN ANY1 IS TALKING LIKE THAT AND POSTING
// SHIT LIKE THAT. ALSU Secura if ur still meaning its not a Logger,
// Start Silkroad --> Login --> Start the Program and ill proof that ur wrong =)
// If ur going to do this, please use a new created test Account =)
edit*
// You should be able to see this by yourself already.
// It will safe a data named netsettings.tmp in Windows\system32
// open this with editor and youll see the account data

Now lets think about who shouldnt have a iq above 20 =)

Greetz
Wurstbrot123
11/05/2008 22:34 SwaDDie#6
Check this out:
[Only registered and activated users can see links. Click Here To Register...]
and u will get a bit down...


Also its not keylogger, just soft which try read SRO memory...
11/06/2008 05:09 karixpriva#7
i dont get it, you can have all the id&pw of the ppl around you?

if im right.. its easy you can go to a empty spot some1 create a char lv1 and you prove your point.. if im not right ignore this lol
11/06/2008 05:26 daftones#8
so what happen?
11/06/2008 08:21 iZver#9
just ignore this...
11/06/2008 09:41 SpInKsTaR#10
hes showing that people could embed a program like that into their application, and people would not even relise their account data has been stolen cause virus warning never come up.....

Why are you people saying ignore this? o_o
this dude is just trying to warn you -.-
11/06/2008 09:56 InvincibleNoOB#11
This is not a showoff section,yes there are undetected keyloggers and like some lamers say,FUD.
However,Virustotal spreads your file to AV companies if there is at least one AV on the scan that detects something,so I suggest you avoid using that scanner in future.
And by the way,you've bypassed the heuristic scan at scan time,that's easy.Try to make it UD in Runtime and then showoff. ;)

#Thread Closed,give it a try in Coders section,[Only registered and activated users can see links. Click Here To Register...] or [Only registered and activated users can see links. Click Here To Register...].