Forums
-
Community Links
-
Terms, Privacy Policy & Frequently Asked Questions (244,941 visits to this link)
-
-
Community Discussions
-
- 2.3k
- posts
-
-
Developers Forums
-
- 12.7k
- posts
-
- 417
- posts
-
- The Free Programming E-Books Topic
- By Progman,
-
- 927
- posts
-
- help for macOs protector
- By khodam,
-
-
Reverse Code Engineering
-
- 14.6k
- posts
-
- ConfuserEx 1.6.0
- By modz50,
-
- 229
- posts
-
- 452
- posts
-
- Get past an Incapsula block HTTP request
- By Progman,
-
- 1.7k
- posts
-
- Polymorphic Parasite (x86) WriteUp
- By Luca91,
-
- 2.5k
- posts
-
- Revteam Reverse Engineering Collection
- By kar2rost,
-
- 197
- posts
-
-
Community Projects
-
- 506
- posts
-
- Scylla Imports Reconstruction Source
- By Progman,
-
- 1.3k
- posts
-
- How to use x64dbgida plugin
- By neomkingdom,
-
- 148
- posts
-
- 820
- posts
-
- Driver doesn't want to start
- By Progman,
-
-
Member Statistics
25,405
Total Members7,713
Most Online
Newest Member
Christophe blanchards
Joined
-
Posts
-
By Luca91 · Posted
Ok, I just finished reading. Congratulations, it was a good read and made me smile a couple of times... BUT IT'S INCOMPLETE I have a couple of comments: 1) It looks like you're really determined to 0-out DllCharacteristics to get predictable addresses... but is that really necessary? Other than the WoW64 execution flag exploit, I don't see any real benefit to this. What am I missing? Also, the lack of the execution flag will cause this sample to fail on a real x86 OS. 2) You add 0x1000 to both the raw and virtual addresses because you don't have the real size of the virus. However, there is a real easy trick to get the size: just wrap your viral code with two labels (say _virii_start and _virii_end) and then you can get the real size by substracting _virii_start from _virii_end. 3) Small QoL improvement: since you provided a huge list of API addresses, you could add a comment at the end of each line, indicating the actual API name. Again, kudos to you for your work! I can't wait to read the missing part! -
By yano65bis · Posted
HI LCF-AT Your current implementation has a few issues that need to be addressed: The select and setSelectionRange methods are used for input or text area elements, not plain strings. The navigator.clipboard.writeText method directly accepts a string, so you don't need to manipulate DOM elements to copy text. Below is a corrected and simplified example using the modern Clipboard API: <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Copy to Clipboard Example</title> </head> <body> <button id="copyButton">Copy Text</button> <script> // Define the text to copy const HOLD1 = "Some_Text_to_COPY"; // Function to copy text to clipboard function copyToClipboard(text) { navigator.clipboard.writeText(text) .then(() => { console.log('Text copied to clipboard:', text); alert('Text copied to clipboard: ' + text); }) .catch(err => { console.error('Failed to copy text:', err); }); } // Add event listener to button document.getElementById('copyButton').addEventListener('click', () => { copyToClipboard(HOLD1); }); </script> </body> </html> I hope it can help and works for you. -
-
By LCF-AT · Posted
Thanks again but I would like using IDM with my file name instead of using browser download itself. Just bad that its not possible so far. Anyway, I will try to continue testing the code. Thanks for helping @Kanes, I'm pretty sure next questions will come soon. greetz -
By Kanes · Posted
From what I see it's not possible because IDM captures the download at the network level. you can try using fetch with a Blob to prevent IDM from intercepting <!DOCTYPE html> <html> <body> <script> let link_to_DL = "https://www.w3schools.com/html/mov_bbb.mp4"; let title = "Test Title.mp4"; let input = document.createElement("input"); input.type = "button"; input.value = link_to_DL; input.onclick = () => download(link_to_DL, title); document.body.appendChild(input).style.cursor = "pointer"; function download(fileURL, fileName) { fetch(fileURL) .then(res => res.blob()) .then(blob => { const a = document.createElement('a'); a.href = URL.createObjectURL(blob); a.download = fileName; a.click(); URL.revokeObjectURL(a.href); }) .catch(err => alert("Download error: " + err)); } </script> </body> </html>
-
-
Popular Contributors
-
1
LCF-AT
21 -
2
CodeExplorer
20 -
3
jackyjask
19 -
4
Kanes
15 -
5
lovejoy226
12
-
-
Files
-
-
File Comments
-
-
By Teerayoot · Posted
1.43 +fix pass command line in Manual Map option. +check old byte before patch (1337 file) +detect x86 or x64 file image if not same exe will crash. Remote Process Injector1.43.zip -
-
By Teerayoot · Posted
release 1.42 +support x86 injection(LdrLoadDll) +fix bug(load patch file) Remote Process Injector1.42.rar -
By Teerayoot · Posted
I released new version to 1.4 +dlll manual map +random tittle name .Remote Process Injector1.4.zip
-
-
Tell a friend
