Видео New malware tactic, Silent Tor Server.

[pryx]

Hello,
In this video I showcase my new malware. The idea is to turn the victim's machine into a vulnerable server with directory listing enabled. It's an indirect attack, a new kind of evasion.
Tor Silent server doesn't require any port forwarding!

Please share your thoughts,it will help me a lot.

youtube link
Pixel drain video link
​

 

[pryx]

Please let me know if i broke any of the video requirements so i can fix it, or record the video again.

 

[pryx]

Please note that I didn't work on defense evasion. It's undetected by default because what it does is not considered malicious by antivirus software. That's what makes it unique.

 

[xrahitel]

Если правильно понял твоё видео, то это что, типо, этого?

 

[pryx]

Если правильно понял твоё видео, то это что, типо, этого?

Nice!, you did something similar.

 

[pryx]

Если правильно понял твоё видео, то это что, типо, этого?

I think this requires port forwarding, the tor silent server doesn't require any port forwarding.

 

[phant0m]

Looks nice. Are you running it as an administrator and do you need to modify firewall rules ?

 

[Volcan]

Hello,
In this video I showcase my new malware. The idea is to turn the victim's machine into a vulnerable server with directory listing enabled. It's an indirect attack, a new kind of evasion.
Tor Silent server doesn't require any port forwarding!

Please share your thoughts,it will help me a lot.

youtube link
Pixel drain video link
​

great idea man i loved what you did also you can work on panel to send and execute commands rather than writing the comman in the url i mean make it more optmized and user-friendly thanks a lot for this nice idea keep up the High quality work

 

[pryx]

great idea man i loved what you did also you can work on panel to send and execute commands rather than writing the comman in the url i mean make it more optmized and user-friendly thanks a lot for this nice idea keep up the High quality work

Thank you, I thought about that too, I will do it soon.

 

[pryx]

Looks nice. Are you running it as an administrator and do you need to modify firewall rules ?

Nope, there's no need to execute it as an administrator or modify any firewall rules. I don't know why, but it works fine on every device I've tested, even with the firewall enabled.

 

[phant0m]

Nope, there's no need to execute it as an administrator or modify any firewall rules. I don't know why, but it works fine on every device I've tested, even with the firewall enabled.

Looks awesome, you will publish it soon ?

 

[pryx]

Looks awesome, you will publish it soon ?

Yeah, probably I will make a detailed blog about it.

 

[pryx]

silent tor server.rar

This file has been shared with you on pixeldrain

pixeldrain.com

zip archive

 

[Volcan]

silent tor server.rar

This file has been shared with you on pixeldrain

pixeldrain.com

zip archive

is this in english or russian bro ?!

 

[pryx]

is this in english or russian bro ?!

Just the video zipped.

 

[Volcan]

Just the video zipped.

waiting the blog so badly i did part of it but i am stuck the the active directory part i think , maaan i loved this idea very high quality

 

[pryx]

waiting the blog so badly i did part of it but i am stuck the the active directory part i think , maaan i loved this idea very high quality

You can ask me in dms and I will help you out with your script.

 

[unruly007]

You can ask me in dms and I will help you out with your script.

Looks nice, how FUD is the payload ?

 

[pryx]

Looks nice, how FUD is the payload ?

It's fully undetectable since it does nothing considered malicious by antivirus software. I installed many many antivirus software to test on locally, no detects at all.
ofc i would never scan it with vt.

 

[unruly007]

It's fully undetectable since it does nothing considered malicious by antivirus software. I installed many many antivirus software to test on locally, no detects at all.
ofc i would never scan it with vt.

Do you have any future plans to work with it or to finish developing the front end and functionalities for more real-life applications?