Welcome Guest! To enable all features please Login. New Registrations are disabled.



Go to last post Go to first unread
#1 Posted : Saturday, April 30, 2011 9:18:50 PM(UTC)

Rank: Newbie

Groups: Registered
Joined: 4/30/2011(UTC)
Posts: 1

guys claimed to have to have some protections that they in fact do not. So heres source code (most of it after tearing through the crap smart-assembly used) for others to learn from.

File Name: RiftMinionSRC.rar

Download Link: http://filebeam.com/f1c1...e199f686ede6c3859c5a68bc

Virus Total:

Complete scanning result of "RiftMinionSource.rar", processed in VirusTotal at 04/30/2011 21:18:38 (CET).

[ file data ]
* name..: RiftMinionSource.rar
* size..: 298335
* md5...: f1c1bfa1e199f686ede6c3859c5a68bc
* sha1..: 7198ce982cdc2658bdb15ddc04d01194843d7e0b
* peid..: -

[ scan result ]
AhnLab-V3 2011.05.01.00/20110430 found nothing
AntiVir found nothing
Antiy-AVL found nothing
Avast 4.8.1351.0/20110430 found nothing
Avast5 5.0.677.0/20110430 found nothing
AVG found nothing
BitDefender 7.2/20110430 found nothing
CAT-QuickHeal 11.00/20110430 found nothing
ClamAV found nothing
Commtouch found nothing
Comodo 8534/20110430 found nothing
DrWeb found nothing
eSafe found nothing
eTrust-Vet 36.1.8299/20110429 found nothing
F-Prot found nothing
F-Secure 9.0.16440.0/20110430 found nothing
Fortinet found nothing
GData 22/20110430 found nothing
Ikarus T3. found nothing
Jiangmin 13.0.900/20110430 found nothing
K7AntiVirus 9.98.4527/20110430 found nothing
Kaspersky found nothing
McAfee 5.400.0.1158/20110430 found nothing
McAfee-GW-Edition 2010.1D/20110430 found nothing
Microsoft 1.6802/20110430 found nothing
NOD32 6083/20110430 found nothing
Norman 6.07.07/20110430 found nothing
Panda found nothing
PCTools found nothing
Prevx 3.0/20110430 found nothing
Rising found nothing
Sophos 4.64.0/20110430 found nothing
SUPERAntiSpyware found nothing
Symantec 20101.3.2.89/20110430 found nothing
TheHacker found nothing
TrendMicro found nothing
TrendMicro-HouseCall found nothing
VBA32 found nothing
VIPRE 9162/20110430 found nothing
ViRobot 2011.4.30.4439/20110430 found nothing
VirusBuster 13.6.329.0/20110430 found nothing

[ notes ]


Wanna join the discussion?! Login to your forum account. New Registrations are disabled.

#2 Posted : Sunday, May 1, 2011 9:46:00 AM(UTC)

Rank: Administration

Groups: Administrators
Joined: 1/24/2011(UTC)
Posts: 541

Thanks: 1 times
Was thanked: 247 time(s) in 79 post(s)
Looked at it, due to smart assembly most of it does read like crap though. Method_01, Method_02, etc. I'm disappointed in smart assembly though if you could still get this from their exe. It just proves to me that you just can't protect your IP when writing .NET applications.

Note, if they request to take down this post, then I will do so (mostly because I know a few people that work on RiftMinion). But it would be hypocritical of me to take it down before that time, this is a hacking forum after all.
#3 Posted : Sunday, May 1, 2011 5:03:24 PM(UTC)

Rank: Member

Groups: Registered
Joined: 4/9/2011(UTC)
Posts: 11

Was thanked: 2 time(s) in 1 post(s)
ha thats true... I checked it out aswell, theres better ways to protect your .net applications then with a most likley pirated (cracked) version of the security software! (lol /ironic)

ya I know a few guys that work on rift minion as well, if they have nothing to hide I wouldnt see why they care, atleast they didnt hard code the offsets...
#4 Posted : Sunday, May 8, 2011 10:02:05 PM(UTC)

Rank: Newbie

Groups: Registered
Joined: 3/16/2011(UTC)
Posts: 1

That pretty cool to look at. And as Da_Teach wrote, c# is realy easy to decompile. A reason aswell why i never went into it. C++ all the way Dancing

Thanks for sharing
User is suspended until 12/9/2285 4:26:33 AM(UTC) garry  
#5 Posted : Saturday, August 6, 2011 4:43:08 AM(UTC)

Rank: Newbie

Groups: Registered
Joined: 8/6/2011(UTC)
Posts: 1

Users browsing this topic
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.