EvilZone

Programming and Scripting => .NET Framework => Topic started by: darkhunter on July 26, 2013, 01:30:12 AM

Title: [HELP] wininet.dll hook
Post by: darkhunter on July 26, 2013, 01:30:12 AM

Good evening, I wanted to ask if you can create a form-grabber or a hook dll wininet.dll as in the botnet Zeus in vb6, thanks in advance for the answers ;)

Title: Re: [HELP] wininet.dll hook
Post by: Kulverstukas on July 26, 2013, 09:35:42 AM

If it was done in Zeus, then it's obvious that you can... but why VB6? why do you have to use that skiddy shit that has been used among skiddy malware devs so much?

Title: Re: [HELP] wininet.dll hook
Post by: darkhunter on July 26, 2013, 10:20:03 AM

Unfortunately I only know the vb6 and I could not find a good guide on the C in Italian  :-\

Title: Re: [HELP] wininet.dll hook
Post by: xC on July 28, 2013, 09:46:24 PM

Took me forever to find a working Zeus link, however here is the source. It should be somewhat easy to port to VB6. Look under source at corehook, userhook, and httpgrabber; it should get you started.

Password: zeus

Title: Re: [HELP] wininet.dll hook
Post by: darkhunter on July 29, 2013, 01:46:42 AM

Thanks for the reply, one last thing, could you tell me if there is a way to make a BTC Mining in vb6?

Title: Re: [HELP] wininet.dll hook
Post by: vezzy on July 29, 2013, 02:55:39 AM

Given that VB6 is a Turing complete language, it is by no means impossible, however it is computationally infeasible since Bitcoin mining is a cryptographically demanding and arduous process of calculating SHA-256 block headers. Which is unsuitable for a language like Visual Basic.

Title: Re: [HELP] wininet.dll hook
Post by: xC on July 29, 2013, 05:26:06 AM

Calculating hashes is easier in VB6 then traditional C. If you create a module for that alone and use the included components for appropriate handshakes it actually takes far less code.

Edit: I included in the post a VB6 example of SHA-256 encryption. Also, here (https://en.bitcoin.it/wiki/Mining) is a little information about the Bitcoin method.

Title: Re: [HELP] wininet.dll hook
Post by: darkhunter on July 29, 2013, 11:26:56 AM

Thanks for the replies, however I wondered how I could do it in vb6 because unfortunately I do not know C :-\

Title: Re: [HELP] wininet.dll hook
Post by: xC on July 31, 2013, 04:05:35 PM

You need no knowledge of C to port something to VB6 except the calls.

Title: Re: [HELP] wininet.dll hook
Post by: darkhunter on August 01, 2013, 12:40:23 AM

Thanks for the answers   ;)

Title: Re: [HELP] wininet.dll hook
Post by: bubzuru on October 08, 2013, 01:18:06 AM

of course you can just use the winapi, you will need to declere all needed function first

example:

Code: [Select]

Declare Auto Function MBox Lib "user32.dll" Alias "MessageBox" (
    ByVal hWnd As Integer,
    ByVal txt As String,
    ByVal caption As String,
    ByVal Typ As Integer) As Integer

Walkthrough: Calling Windows APIs (Visual Basic):
http://msdn.microsoft.com/en-us/library/172wfck9.aspx

Title: Re: [HELP] wininet.dll hook
Post by: darkhunter on October 11, 2013, 10:20:03 PM

Ok, thank you very much Bubzuru  ;)