<link>http://www.megapanzer.com</link> <description /> <lastBuildDate>Tue, 14 May 2013 20:45:23 +0000</lastBuildDate> <language>en-US</language> <sy:updatePeriod>hourly</sy:updatePeriod> <sy:updateFrequency>1</sy:updateFrequency> <generator>http://wordpress.org/?v=3.5.1</generator> <atom10:link xmlns:atom10="http://www.w3.org/2005/Atom" rel="self" type="application/rss+xml" href="http://feeds.feedburner.com/megapanzer" /><feedburner:info uri="megapanzer" /><atom10:link xmlns:atom10="http://www.w3.org/2005/Atom" rel="hub" href="http://pubsubhubbub.appspot.com/" /><feedburner:emailServiceId>megapanzer</feedburner:emailServiceId><feedburner:feedburnerHostname>http://feedburner.google.com</feedburner:feedburnerHostname><item> <title>AyCarrumba 1.4 ready for download http://feedproxy.google.com/~r/megapanzer/~3/wMeNjOxjv6M/ http://www.megapanzer.com/2013/05/14/aycarrumba-1-4-ready-for-download-2/#comments Tue, 14 May 2013 20:45:23 +0000 carrumba http://www.megapanzer.com/?p=8621 codeGet the latest build of AyCarrumba (1.4) here.
Please report the bugs you encounter.

]]> http://www.megapanzer.com/2013/05/14/aycarrumba-1-4-ready-for-download-2/feed/ 0 http://www.megapanzer.com/2013/05/14/aycarrumba-1-4-ready-for-download-2/ AyCarrumba 1.4 RC2 http://feedproxy.google.com/~r/megapanzer/~3/gBWT-2uVnYw/ http://www.megapanzer.com/2013/05/04/aycarrumba-1-4-rc2/#comments Sat, 04 May 2013 09:53:32 +0000 carrumba http://www.megapanzer.com/?p=8603 codeThis is the latest build of AyCarrumba release 1.4. To make it more stable, bugfree, solid and usable as many people as possible should download and use it on as many different environments as possible. I developed under Windows 7 with .Net 4.
If you run Windows 7/8 with .Net 4.* on your computer, you have some minutes spare and want to contribute your share to this exciting project I invite you to download the RC2, install it, test it and report all bugs you encounter. You can do that either via Facebook messages, this contact form or via email (megapanzer@gmail.com).

Thanks for your contribution!

Download link : AyCarrumba_1_4_RC2

]]> http://www.megapanzer.com/2013/05/04/aycarrumba-1-4-rc2/feed/ 0 http://www.megapanzer.com/2013/05/04/aycarrumba-1-4-rc2/ AyCarrumba … http://feedproxy.google.com/~r/megapanzer/~3/_rTVoJe1j5A/ http://www.megapanzer.com/2013/04/06/aycarrumba-2/#comments Sat, 06 Apr 2013 21:24:38 +0000 carrumba http://www.megapanzer.com/?p=8588 codeAll relevant features are implemented and it looks like it is becoming more and more stable. The plugins don’t interfere with each other anymore, two major bugs are fixed and on my system it is working smoothly.
The plan for the coming weeks is …

  • making the plugins more customizable so the users are not depending on my configuration and settings.
  • merging both DNS poisoning approaches in one module. Probably I integrate them in APE.
  • one really, really (!) necessary open task is assigning the whole program an architecture. The code at its current state is rather messy. To avoid chaos applying a clear structure inside the code and around whole the project is inevitable

This will take some time. The weekend and evening are the only moments where I find enough time to work on it seriously.

]]> http://www.megapanzer.com/2013/04/06/aycarrumba-2/feed/ 0 http://www.megapanzer.com/2013/04/06/aycarrumba-2/ Zeus Trojan Source Code http://feedproxy.google.com/~r/megapanzer/~3/tUrRAn75V3g/ http://www.megapanzer.com/2013/02/22/zeus-trojan-source-code/#comments Fri, 22 Feb 2013 14:15:07 +0000 carrumba http://www.megapanzer.com/?p=8410       Bot name Zeus Trojan trojanhorse   Author -     Written in C++     Description Zeus is a Trojan horse that steals banking information by Man-in-the-browser keystroke logging and Form Grabbing. It is spread mainly through drive-by downloads and phishing schemes. The various Zeus’ botnets are estimated to include millions of compromised computers.
The Zeus Trojan-controlled machines are in 196 countries, including isolated states such as North Korea. The five countries with the most significant instances of infected machines are Egypt, the United States, Mexico, Saudi Arabia, and Turkey. Altogether, 2,411 companies and organizations are said to have been affected by the criminal operations running the botnet.

  Downloads Source (Password : zeus)


]]> http://www.megapanzer.com/2013/02/22/zeus-trojan-source-code/feed/ 3 http://www.megapanzer.com/2013/02/22/zeus-trojan-source-code/ ARP Poisoning source code http://feedproxy.google.com/~r/megapanzer/~3/eauCzbMEdAs/ http://www.megapanzer.com/2013/02/16/arp-poisoning-source-code/#comments Sat, 16 Feb 2013 21:15:00 +0000 carrumba http://www.megapanzer.com/?p=8397 codeI added new source codes to Github.

  • Basic sniffer
  • ARP Ping
  • ARP Poison

I packed everything into a Visual Studio (2010) Solutions. Download, open, compile and test it. Any feedback is welcome.
More code will follow soon. Missing parts are the packet forwarder and a combination of poisoning and forwarding.

]]> http://www.megapanzer.com/2013/02/16/arp-poisoning-source-code/feed/ 3 http://www.megapanzer.com/2013/02/16/arp-poisoning-source-code/ RunAsAdmin – Running program with administrator privileges http://feedproxy.google.com/~r/megapanzer/~3/A2WMmugFiSc/ http://www.megapanzer.com/2013/01/06/runasadmin-running-program-with-administrator-privileges/#comments Sun, 06 Jan 2013 11:44:43 +0000 carrumba http://www.megapanzer.com/?p=8369 Tool name : RunAsAdmin   Description : RunAsAdmin is a tool to run a particular portion of the code under the elevated administrator privileges. If the user is an Administrator and has elevated privileges it will directly jump to the block where the elevated admin privileges are required.

If the user is an administrator but the privileges are not elevated yet RunAsAdmin will elevate them automatically and jump to the block where the elevated admin privileges are required.

If the user has no administrator privileges it calls the “RunAs” command and asks the user to run the program under elevated privileges. Depending on the UAC settings the user either has to type in a password, he has to confirm the process or there is no confirmation screen.   Tested on : Windows 7   Feedback : In case you encounter any problems with the tool, you have suggestions to improve it, or you tested it with a Windows version i’ve not yet tested please drop me an email.   Downloads : Version 0.1 – Binary&Source   ]]> http://www.megapanzer.com/2013/01/06/runasadmin-running-program-with-administrator-privileges/feed/ 0 http://www.megapanzer.com/2013/01/06/runasadmin-running-program-with-administrator-privileges/ C – Encode Databuffer To Base64 http://feedproxy.google.com/~r/megapanzer/~3/GrxVAWZsnjU/ http://www.megapanzer.com/2012/12/30/c-encode-databuffer-to-base64/#comments Sun, 30 Dec 2012 12:10:11 +0000 carrumba http://www.megapanzer.com/?p=8305 


1
2
3
4
5
6
7
8
9
10
11
12
13
14

BOOL ToBase64(BYTE *pInput, int pInputLen, BYTE **pOutput, DWORD *pOutputLen)
{
  BOOL lRetVal = FALSE;
  DWORD lBufSize = 0;
 
  if (CryptBinaryToStringA(pInput, pInputLen, CRYPT_STRING_BASE64, NULL, &lBufSize) && lBufSize > 0)
    if ((*pOutput = (BYTE *) HeapAlloc(GetProcessHeap(), HEAP_ZERO_MEMORY, lBufSize+1)) != NULL)
      if (CryptBinaryToStringA(pInput, pInputLen, CRYPT_STRING_BASE64, (LPSTR) *pOutput, &lBufSize))
        lRetVal = TRUE;
 
  *pOutputLen = lBufSize;
 
  return(lRetVal);
}


]]> http://www.megapanzer.com/2012/12/30/c-encode-databuffer-to-base64/feed/ 0 http://www.megapanzer.com/2012/12/30/c-encode-databuffer-to-base64/ C – Sending HTTP POST request http://feedproxy.google.com/~r/megapanzer/~3/_0DZ-tYfWC4/ http://www.megapanzer.com/2012/12/26/c-sending-http-post-request/#comments Wed, 26 Dec 2012 12:18:40 +0000 carrumba http://www.megapanzer.com/?p=8295 


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79

BOOL SendHTTPPost(char *pHostname, char *pURI, char *pUserAgent, char *pFileName)
{
  BOOL lRetVal = FALSE;
  HANDLE lInputFH = INVALID_HANDLE_VALUE;
  HINTERNET lInetInit = NULL;
  HINTERNET lInetConn = NULL; 
  HINTERNET lInetReq = NULL;
  DWORD lBytesRead = 0;
  DWORD lBytesWritten = 0;
  DWORD lTotalBytesWritten = 0;
  char lTemp[MAX_BUF_SIZE + 1];
  char lHeader[MAX_BUF_SIZE + 1];
  BYTE lBuffer[MAX_BUF_SIZE];
  INTERNET_BUFFERS lBufferIn = {0}; 
 
 
  if (pHostname != NULL && pURI != NULL && pFileName != NULL)
  {
    if (PathFileExists(pFileName))
	{      
      if ((lInputFH = CreateFile(pFileName, GENERIC_READ, FILE_SHARE_READ, NULL, 
          OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL)) != INVALID_HANDLE_VALUE)
	  {
        // Set default User Agent.
        if (pUserAgent == NULL)
          pUserAgent = "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/525.19 (KHTML, like Gecko) Chrome/0.2.153.1 Safari/525.19";
 
 
        if ((lInetInit = InternetOpen (pUserAgent, INTERNET_OPEN_TYPE_PRECONFIG, NULL, NULL,
             0)) != NULL)
        {
          if ((lInetConn = InternetConnect(lInetInit, pHostname, INTERNET_DEFAULT_HTTP_PORT,
              NULL,NULL,INTERNET_SERVICE_HTTP, 0, 0)) != NULL)
          {
            if ((lInetReq = HttpOpenRequest(lInetConn, "POST", pURI, NULL, NULL, NULL, 0, 0))
                 != NULL)
            {
              lBufferIn.dwStructSize = sizeof(INTERNET_BUFFERS); 
              lBufferIn.dwBufferTotal = GetFileSize (lInputFH, NULL);
 
              // Add HTTP header
              ZeroMemory(lHeader, sizeof(lHeader));
              strcat(lHeader, "Content-type: application/x-www-form-urlencoded");
              HttpAddRequestHeaders(lInetReq, lHeader, strnlen(lHeader, sizeof(lHeader)-1), 
                                    HTTP_ADDREQ_FLAG_REPLACE|HTTP_ADDREQ_FLAG_ADD);
 
              if (HttpSendRequestEx(lInetReq, &lBufferIn, NULL, HSR_INITIATE, 0))
              {
                  do 
                  { 
                    if (!ReadFile(lInputFH, lBuffer, sizeof(lBuffer), &lBytesRead, NULL))
                    { 
                      printf("ReadFile failed on buffer %d.\n", GetLastError()); 
                      break; 
                    } 
                    if (!InternetWriteFile(lInetReq, lBuffer, lBytesRead, &lBytesWritten))
                    { 
                      printf("InternetWriteFile failed %d.\n", GetLastError()); 
                      break; 
                    } 
 
                    lTotalBytesWritten += lBytesWritten; 
                  } while (lBytesRead == sizeof(lBuffer)); 
 
                  if (lTotalBytesWritten == GetFileSize (lInputFH, NULL))
                    lRetVal = TRUE;
              } // if(HttpSendReque...
              InternetCloseHandle(lInetReq);
            } // if ((lInetReq...
            InternetCloseHandle(lInetConn);
          } // if ((lInetCo...
          InternetCloseHandle(lInetInit);
        } // if ((lInetIn...
      } // if ((lInputFH = CreateFile(...
    } // if (PathFileExists(...
  } // if (pHostn...
 
  return(lRetVal);
}


]]> http://www.megapanzer.com/2012/12/26/c-sending-http-post-request/feed/ 0 http://www.megapanzer.com/2012/12/26/c-sending-http-post-request/ C – Sending HTTP GET request http://feedproxy.google.com/~r/megapanzer/~3/7JtODyri1Do/ http://www.megapanzer.com/2012/12/21/c-sending-http-get-request/#comments Fri, 21 Dec 2012 12:13:52 +0000 carrumba http://www.megapanzer.com/?p=8290 


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48

BOOL SendHTTPGet(char *pHostname, char *pURI, char *pUserAgent)
{
  BOOL lRetVal = FALSE;
  HINTERNET lInetInit = NULL;
  HINTERNET lInetConn = NULL; 
  HINTERNET lInetReq = NULL;
  DWORD lBytesRead;
  char lTemp[MAX_BUF_SIZE + 1];
 
 
  if (pHostname != NULL && pURI != NULL)
  {
    if (pUserAgent == NULL)
      pUserAgent = "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/525.19 (KHTML, like Gecko) Chrome/0.2.153.1 Safari/525.19";
 
    if ((lInetInit = InternetOpen (pUserAgent, INTERNET_OPEN_TYPE_PRECONFIG, NULL, NULL, 0))
        != NULL)
    {
      if ((lInetConn = InternetConnect(lInetInit, pHostname, INTERNET_DEFAULT_HTTP_PORT, 
          NULL,NULL,INTERNET_SERVICE_HTTP, 0, 0)) != NULL)
      {
        if ((lInetReq = HttpOpenRequest(lInetConn, "GET", pURI, NULL, NULL, NULL, 0, 0))
           != NULL)
        {
          if (HttpSendRequest(lInetReq, NULL, 0, NULL, 0))
          {
            lRetVal = TRUE;
            ZeroMemory(lTemp, sizeof(lTemp));
            while (InternetReadFile(lInetReq, lTemp, MAX_BUF_SIZE, &lBytesRead))
            {
              printf("> %s\n", lTemp);
 
              ZeroMemory(lTemp, sizeof(lTemp));
 
              if(lBytesRead < 1)
                break;
            } // while (InternetRead...
          } // if(HttpSendReque...
          InternetCloseHandle(lInetReq);
        } // if ((lInetReq...
        InternetCloseHandle(lInetConn);
      } // if ((lInetCo...
      InternetCloseHandle(lInetInit);
    } // if ((lInetIn..
  } // if (pHostn...
 
  return(lRetVal);
}


]]> http://www.megapanzer.com/2012/12/21/c-sending-http-get-request/feed/ 0 http://www.megapanzer.com/2012/12/21/c-sending-http-get-request/ C – Decrypt Data With AES http://feedproxy.google.com/~r/megapanzer/~3/ycHRsmZUsFg/ http://www.megapanzer.com/2012/12/16/c-decrypt-data-with-aes/#comments Sun, 16 Dec 2012 12:41:26 +0000 carrumba http://www.megapanzer.com/?p=8285 


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

BOOL AESDecrypt(char *pPassword, char *pData, DWORD pDataLen, DWORD *pOutputDataLen)
{
  BOOL lRetVal = FALSE;
  HCRYPTPROV lCryptProvHandle = 0;
  HCRYPTKEY lKeyHandle = 0;
  HCRYPTHASH lHashHandle = 0;
 
  if (CryptAcquireContext(&lCryptProvHandle, NULL, NULL, PROV_RSA_AES, 
      CRYPT_VERIFYCONTEXT))
  {
    if (CryptCreateHash(lCryptProvHandle, CALG_SHA_256, 0, 0, &lHashHandle))
    {
      if (CryptHashData(lHashHandle, (PBYTE) pPassword,(DWORD) strlen(pPassword), 0))
      {
        if (CryptDeriveKey(lCryptProvHandle, CALG_AES_256, lHashHandle, 
            CRYPT_EXPORTABLE, &lKeyHandle))
        {	
          if (CryptDecrypt(lKeyHandle, 0, TRUE, 0, (BYTE *) pData, &pDataLen))
          {
            *pOutputDataLen = pDataLen;
            lRetVal = TRUE;
          }
          else
            *pOutputDataLen = 0;
 
          CryptDestroyKey(lKeyHandle);
        } // if (CryptDeriveKey(...
      } // if (CryptHashData(...
      CryptDestroyHash(lHashHandle);
    } // if (CryptCreateHash(...
    CryptReleaseContext(lCryptProvHandle, 0);
  } // if (CryptAcquireContext(...
 
  return(lRetVal);
}


]]> http://www.megapanzer.com/2012/12/16/c-decrypt-data-with-aes/feed/ 0 http://www.megapanzer.com/2012/12/16/c-decrypt-data-with-aes/