logo
Welcome Guest! To enable all features please Login. New Registrations are disabled.

Notification

Icon
Error

Options
Go to last post Go to first unread
wowfjb  
#1 Posted : Saturday, April 30, 2011 9:18:50 PM(UTC)
wowfjb

Rank: Newbie

Groups: Registered
Joined: 4/30/2011(UTC)
Posts: 1

guys claimed to have to have some protections that they in fact do not. So heres source code (most of it after tearing through the crap smart-assembly used) for others to learn from.

File Name: RiftMinionSRC.rar

Download Link: http://filebeam.com/f1c1...e199f686ede6c3859c5a68bc


Virus Total:
Quote:

Complete scanning result of "RiftMinionSource.rar", processed in VirusTotal at 04/30/2011 21:18:38 (CET).

[ file data ]
* name..: RiftMinionSource.rar
* size..: 298335
* md5...: f1c1bfa1e199f686ede6c3859c5a68bc
* sha1..: 7198ce982cdc2658bdb15ddc04d01194843d7e0b
* peid..: -

[ scan result ]
AhnLab-V3 2011.05.01.00/20110430 found nothing
AntiVir 7.11.7.92/20110430 found nothing
Antiy-AVL 2.0.3.7/20110430 found nothing
Avast 4.8.1351.0/20110430 found nothing
Avast5 5.0.677.0/20110430 found nothing
AVG 10.0.0.1190/20110430 found nothing
BitDefender 7.2/20110430 found nothing
CAT-QuickHeal 11.00/20110430 found nothing
ClamAV 0.97.0.0/20110430 found nothing
Commtouch 5.3.2.6/20110430 found nothing
Comodo 8534/20110430 found nothing
DrWeb 5.0.2.03300/20110430 found nothing
eSafe 7.0.17.0/20110428 found nothing
eTrust-Vet 36.1.8299/20110429 found nothing
F-Prot 4.6.2.117/20110430 found nothing
F-Secure 9.0.16440.0/20110430 found nothing
Fortinet 4.2.257.0/20110430 found nothing
GData 22/20110430 found nothing
Ikarus T3.1.1.103.0/20110430 found nothing
Jiangmin 13.0.900/20110430 found nothing
K7AntiVirus 9.98.4527/20110430 found nothing
Kaspersky 9.0.0.837/20110430 found nothing
McAfee 5.400.0.1158/20110430 found nothing
McAfee-GW-Edition 2010.1D/20110430 found nothing
Microsoft 1.6802/20110430 found nothing
NOD32 6083/20110430 found nothing
Norman 6.07.07/20110430 found nothing
Panda 10.0.3.5/20110430 found nothing
PCTools 7.0.3.5/20110429 found nothing
Prevx 3.0/20110430 found nothing
Rising 23.55.04.03/20110429 found nothing
Sophos 4.64.0/20110430 found nothing
SUPERAntiSpyware 4.40.0.1006/20110430 found nothing
Symantec 20101.3.2.89/20110430 found nothing
TheHacker 6.7.0.1.184/20110430 found nothing
TrendMicro 9.200.0.1012/20110430 found nothing
TrendMicro-HouseCall 9.200.0.1012/20110430 found nothing
VBA32 3.12.16.0/20110429 found nothing
VIPRE 9162/20110430 found nothing
ViRobot 2011.4.30.4439/20110430 found nothing
VirusBuster 13.6.329.0/20110430 found nothing

[ notes ]
UTF-8




Sponsor

Wanna join the discussion?! Login to your forum account. New Registrations are disabled.

Da_Teach  
#2 Posted : Sunday, May 1, 2011 9:46:00 AM(UTC)
Da_Teach

Rank: Administration

Groups: Administrators
Joined: 1/24/2011(UTC)
Posts: 541

Thanks: 1 times
Was thanked: 247 time(s) in 79 post(s)
Looked at it, due to smart assembly most of it does read like crap though. Method_01, Method_02, etc. I'm disappointed in smart assembly though if you could still get this from their exe. It just proves to me that you just can't protect your IP when writing .NET applications.

Note, if they request to take down this post, then I will do so (mostly because I know a few people that work on RiftMinion). But it would be hypocritical of me to take it down before that time, this is a hacking forum after all.
jayswag  
#3 Posted : Sunday, May 1, 2011 5:03:24 PM(UTC)
jayswag

Rank: Member

Groups: Registered
Joined: 4/9/2011(UTC)
Posts: 11

Was thanked: 2 time(s) in 1 post(s)
ha thats true... I checked it out aswell, theres better ways to protect your .net applications then with a most likley pirated (cracked) version of the security software! (lol /ironic)

ya I know a few guys that work on rift minion as well, if they have nothing to hide I wouldnt see why they care, atleast they didnt hard code the offsets...
V0gelz  
#4 Posted : Sunday, May 8, 2011 10:02:05 PM(UTC)
V0gelz

Rank: Newbie

Groups: Registered
Joined: 3/16/2011(UTC)
Posts: 1

That pretty cool to look at. And as Da_Teach wrote, c# is realy easy to decompile. A reason aswell why i never went into it. C++ all the way Dancing

Thanks for sharing
User is suspended until 12/9/2285 4:26:33 AM(UTC) garry  
#5 Posted : Saturday, August 6, 2011 4:43:08 AM(UTC)
garry

Rank: Newbie

Groups: Registered
Joined: 8/6/2011(UTC)
Posts: 1

Users browsing this topic
Guest
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.