CodeDOM [Basic's | Crypters | Source's]

LethalNET · 07-30-2013, 06:05 PM

Originally from hackforums, i made this thread and i will add more soon
Quick links to everything on this thread

CodeDOM [Basics & About]
What is CodeDOM?

CodeDOM meaning 'Code Document Object Model', CodeDOM is based upon a single model for rendering source code. Therefore, source code may be generated for any language that supports the CodeDOM specification, Also at once allowing the user to write and compile source code to a executable during a application's run-time, And most popular CodeDOM is used for Crypters And developing automatic source code generators, As this is not a basic of Crypter's thread i will not get into too much about it but i will just cover the basics because I'm sure most of you are reading this because you hope to be able to code a Crypter using CodeDOM, So here is a quick briefing, A Crypter is a builder which takes any given executable and encrypts the data stored inside the executable file and embeds it in to the stubs resources[In most cases] And compiles it, And a stub on the other hand does the opposite, It decrypts the data stored in a resource file and [In most cases] Injects the bytes into a process [RunPE], But back to CodeDOM.

CodeDOM is a very useful part of the .NET Frame Work because at any given point in time during a applications run-time it can build a executable from a simple source code, And the source code is much alike to VB.NET in fact, The source code you need to write is the same but requires more imports!

CodeDOM [Why use CodeDOM, Why not use EOF or Mono?]
Well there is a simple answer to that,

Unlike EOF CodeDOM does not store the data at the end of the file, But EOF doesn't necessarily mean it has to be the end of file, You can get creative with it and store data anywhere [With proper handling] And it can be just as powerful as CodeDOM if used properly!

And Well Against Mono.Cecil, Its just preference really, They can both do the same but Mono.Cecil Is more powerful when it comes to Crypter's because you can easily add a simple obfuscation code in there and change pretty much anything you want to change making you have the upper hand, But in my personal opinion i prefer CodeDOM, It is a lot more user friendly and isn't as hard to use as Mono.Cecil but a bit more restricted to functionality when it comes to the executable being personalized.

Extra Sources:

Spoiler:

http://msdn.microsoft.com/en-us/library/...71%29.aspx

http://www.codeguru.com/vb/gen/article.p...nology.htm

CodeDOM Compiler Class

I have decided to write a very quick and simple compiler class with basic compile functionality and i threw a 'Stub' generator to aid in the learning process

The usage of this class is very simple and you can look into the class and get comfortable with it,

Usage:

PHP Code:
Dim Source As [String] = Compiler.GenerateSource("Ohia")
  Compiler.Compile(Source, "C:\Test.exe", "Done!", "Icon path Optional step!") 

Download link to my compiler class[.vb]:
http://www.mediafire.com/download/5qv15q...ompiler.vb

Crypter's
It is pretty simple after you get the basics of CodeDOM down to be able to throw a Crypter together in no time!

Source to Crypter with a FUD guide [This is not the highest quality because it was written in my spare time almost 2 weeks ago]

The source covers:

Resources
Encryption/Decryption
Junk Resource Generate/Adder
Icon Injector /w Class
Basic Scantime

Other source's to learn from:
Castle Crypter Coded By Angelic Wings

Other CodeDOM Projects To Learn From:
Net Script Coded By Tweety.
Other Stuff:
Compiler by [Eprouvez]
Credit list:
Tweety. (Link to Net Script, Also offers freelancing services)
Angelic Wings (Castle Crypter Source)
[Eprouvez] (Another compiler)
Thank You, And hope you find this useful! :blackhat:

Do not hesitate to pm me if you need any help [Help meaning ill help you figure something out and /or help fix a bug, Not go on TeamViewer and code for free :pinch:

I will add more eventually when i can be bothered XD