[TuT] USG 0.X + NoVirusThanks scan automation [CryptMaker v1.0.4]

[TuT] USG 0.X + NoVirusThanks scan automation [CryptMaker v1.0.4]

02-20-2010, 11:12 PM (This post was last modified: Yesterday 12:45 AM by GigaWatt.) Post: #1

GigaWatt  I wonder how long a title I can fit Posts: 63 Joined: Feb 2010 Reputation: 6

Well, this is my first big post, so please bear with my if my style isn't fully in sync with the community yet. I spent most of my afternoon writing these scripts, so I hope you find them as useful as I have. Anyhow, here we go. == Please read and understand the whole guide before you begin. == LAST VERSION: CryptMaker v1.0.4 (LINK) (pw: hf.net) LAST VERSION: March 1, 2010 CHANGES: (Click to View) == March 2, 2010: For a pre-installed environment to run CryptMaker in (with PHP, AutoIt, VB6 already installed), check out the postHERE. == [SCREENSHOTS] Spoiler (Click to View) [STUFF YOU'LL NEED] The tools (see download link at top of page). PHP 5.3 or newer (LINK) AND knowledge of how to run command line PHP files. Be sure to include the PHP directory in your windows PATH variable. See Q&A if you're unsure on how to do this. AutoIt v3 installed [WHAT THESE FILES ARE] ./_clean.bat - Removes transitional files from generating stubs. Called on by _CryptMaker.au3 ./_CryptMaker.au3 - (Written in AutoIt) Automates the process of stub generation with USG. Will generate and compile your stubs for you. ./ToCheck/_Snoopy.class.php - A PHP class for simplifying website interaction (used by _Submit.php) ./ToCheck/_Submit.php - Goes through the current folder looking for stubs and upload them to NoVirusThanks.org automatically. Also removes any orphaned .ini files from failed compiles. ./ToCheck/_Check.php - After running _Submit.php, this script will check the scan status of your stubs, removing any which trigger more than a set threshold of AV detections. Also generates __List.html which contains links to the scan results for verification. BEFORE YOU BEGIN: Be absolutely sure that your hosts file (C:\Windows\system32\drivers\etc\hosts) is set to read only! For some reason, USG takes it upon itself to block VirusTotal, Jotti, AND HackForums.net. [USAGE] Execute and configure USG to your liking. Run "_CryptMaker.au3". Select which aspects of the stubs you'd like randomized. Press OK when done. The tooltip in the upper left will guide you and give you status updates. When you are ready, press F4 to unpause the script and let it run! When you feel like you've generated enough stubs, you can either press F4 and wait for the script to finish the current stub, or press F5 to kill it immediately. Using F5 is important to stopping CryptMaker as it runs "_clean.bat" on close and removes unnecessary transitional files. Select all of your newly generated stubs and move them into the "ToCheck" folder. They MUST (unless you want to modify the .php scripts) be in "ToCheck" for the upload and checking scripts to work. The following is optional: Open "_Config.php" with your preferred text editor and modify the settings as you wish. You can include proxy usage, debug logging, and deletion threshold (will delete if detected by more than $threshold AV software). Run "_Submit.php" either via command prompt. You can execute by double clicking (if you have associations set) but the window will disappear after execution finishes. This step will upload your newly generated stubs to NoVirusThanks.org AND utilizes their "Do not distribute" feature. Run "_Check.php". If ran immediately after _Submit.php, it'll usually take a while on the first few files as it waits for the scans to finish. This script will delete any stub that failed to meet the threshold requirements. The following is optional: open the newly created "__Links.html" file in a web browser and feel free to manually check the scan results. Move the remaining stubs and .ini files to a different folder for safe keeping. This also ensures that they don't waste your time later by accidentally re-uploading and checking them. Enjoy your new bulk quantity of ("as-you-decided" quality) stubs! [SHORT Q&A] (Click to View) Well, here's hoping you enjoy! -GigaWatt. ==> [MY TUTORIALS] <== Please DO NOT request my AIM/MSN/YIM/etc. Thank you for understanding.