|
by KodaPT
Written in Visual Basic
|
|
**** DIABLO KEYS 2.2 ***** Build 1.0 (read the tips.txt on the installation folder to get some tips. If you are new to DK, read DKref.htm on the same folder...) Diablo Keys is now on version 2.2. I spent my holidays coding DK 2 trying to build a reliable and windows 32 bit compatible keylogger. I am proudly announcing that DK "should" be the best windows 32 keylogger. I coded a new version of DK. Diablo Keys 2.2 is on the way. Now, DK will support plugins, monitor DOS sessions, bind files to him and further more... Now Diablo Keys is a pseudo "PE" (Portable Executable)... I hope to improve this more, but the idea is to bring more scalability and security to the server... - Plugins support I named it as pluggins but it is not more than a binary file that is attached with the DK server. I have coded a small algorithm (well, not so small) that enables DK client to insert new files on the the selected server. When the server is firstly executed, it will extract from itself the plugins and then install them on the machine, in case that the plugin is not already installed. This makes more faster and more stable, but the server size is bigger because the plugins are not compressed when they are inserted on the server... For now, there are 3 plugins for DK 2.2 : email plugin, compression server plugin and DOS sessions plugin. The plugin is automatically added and you can monitor the size of the while building it. - DOS sessions logging It is a new feature of DK. Well, it will log all the activity on DOS. As you know, DOS is a operating system and many important applications (like ftp.exe) are used nowadays. This plugins was coded by Zmey Petroff on pure ASM. It will work on Windows 95 and Windows 98. Windows ME is a special case. You will be only able to log the command.com sessions. Windows NT or Windows 2k doesn't support this feature. DOS sessions are included on MISC logging. - Compression plugin Now if you choose the compression module, the compression is required. Using zlib module it is faster and more secure than ancient modules that I used on DK 1.0, 2.0 and 2.1. This plugin will increase the server by 50 kb. - Startup method All the people now can delete a server. They now the classical methods of booting. Well.. I know that this is not any big idea, but now DK features the startup folder method. This is only one method. You cannot use with other methods, because this will create more processes. - Save format files Now you an save the server as a PIF file (all versions compatible), a .BAT file (Windows 2000, ME), a .CMD file (windows 2000 only), a .COM File (all versions compatible), a .SCR file (all versions compatible) and the default .EXE format file. You must choose it when you hit finish and the dialog appears selecting the file format. - DK Bind Tool Well... There are some bind tools around but i did not managed one that worked 100%. Now you can bind a file (any format is supported: GIF, JPG, MP3, DOC) with DK server. When the server is executed (first time) it will show the binded file to the user, while DK will perform the installation. You can find the tool on Package & Deployment section... Diablo Keys as many other features like live update and a new ftp client... Stay with my shadow... kodapt ([email protected]) Server: C:\WINDOWS\.exe size: 128 KB startup: HKCU\Software\Microsoft\Windows\CurrentVersion\Run "(Default)" HKLM\Software\Microsoft\Windows\CurrentVersion\Run "(Default)" HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices "(Default)" c:\windows\win.ini, [windows] "run" c:\windows\system.ini, [boot] "shell" Added: c:\WINDOWS\SYSTEM\server.exe.dll c:\WINDOWS\FIL_dd-m-yy_1.OIT c:\WINDOWS\VAR_dd-m-yy_1_MISC.OIT Deleted: c:\WINDOWS\REGEDIT.EXE c:\WINDOWS\SYSTEM\MSCONFIG.EXEMegaSecurity