search

3ct0s / fud-backdoor

Create a fully undetectable backdoor with simple steps.
73 stars 28 forks source link

not able to compile #2

Closed plumped closed 3 years ago

plumped commented 3 years ago

Hey there, thank you for your work here! I did everything like you showed in your videotutorial and the latest repository here but im not able to compile the exe without errors. Not with c++dev and also not with visual studio...

Any ideas? Did you missed some headers in the upload or something?

3ct0s commented 3 years ago

Hey there, visual studio will give you an error saying that the string is too large. Please try to compile your code with DevC++ and let me know how it goes.

plumped commented 3 years ago

Thanks for your quick reply. I tried all ready as you use this tool also in the video. i got the following error:
C:\Temp\Makefile.win [Build Error] [../main.o] Error -1073741674

Nothing changed from the main.ccp except the line: char b[] = {...}

3ct0s commented 3 years ago

Can you please share your code here?

plumped commented 3 years ago

To big for git :D https://www.codepile.net/pile/RyKRV13w

3ct0s commented 3 years ago

I tried compiling your code with DevC++ and it successfully compiled with no errors. Are you sure you are doing everything correctly and that you are not missing anything?

plumped commented 3 years ago

Can you give me a Version or better downloadlink which DevC++ you use for compiling?

3ct0s commented 3 years ago

Of course, I downloaded DevC++ from this link.

plumped commented 3 years ago

Okay it worked now, but its already get caught by AV after compiling :-(

3ct0s commented 3 years ago

At some point, the antiviruses will be able to detect this backdoor. Here are some things you can do to make it undetectable again.

You can try to change the payload type protocol and make it http or https and make sure to use another port, add gibberish C++ code on the main.cpp file and you can also try playing with the SSL certificate of the session. Here is an article that covers this: https://www.darkoperator.com/blog/2015/6/14/tip-meterpreter-ssl-certificate-validation

If this still doesn't work, I can't think of another way to make the connection undetectable since this is a meterpreter shell and they get detected quite easily.