Friday 5 February 2016

Tw Grabber

Coded in C++
Grabs:- Ff/Ie/Chrome (SSL)
Apple Safari/opera (non ssl)

Well today i got an interesting stuff from an friend .

Here is Tw-grabber bin he gave me:- (17 kb) (Not packed with anything,not even upx) (in this bin he said reg startup is disabled as he requested bin with no startup.)

here is some analysis done by me:-

bot connects :- 89.248.168.57/recv.php (Sends POST data as soon as login is found)
He says Panel is not locked to domain ,its just ion-cube encoded to protect php source.

to Setup:- upload panel on host and run setup.php and fill database info + login page info and click finish.

Admin login page is:- login.php

+ few notes he told me that the coder was "pr0t0type" from hf ,he left his customer after scamming his fellow partners (without paying them for selling his bot) (as always) who were selling this tw-grabber for him and project closed.

We need an crack to change the ip with our desired one.

No comments:

Post a Comment