Reply to thread

Message: <blockquote data-quote="BLACKLIST_MEMBER" data-source="post: 28295962" data-attributes="member: 79414">Step1:Enable Microsoft windows sandbox (Windows comes with a built-in sandbox these days, you just have to enable it)Step2:Copy the bat file into the sandbox and delete it from the host machine (just in case you accidentally execute the malicious code on your real computer.Step3:<ul> <li data-xf-list-type="ul">Try to read the code, enable/disable and some commands and see what happens</li> <li data-xf-list-type="ul">Modify</li> <li data-xf-list-type="ul">Re-execute</li> <li data-xf-list-type="ul">Repeat.</li> </ul>I see you try to obfuscate the code using that for loop variables, be that as it may, we still can see that the interpreter has to reach this [ICODE]Goto:Eof[/ICODE] line in order to run that obfuscated code.So, the first thing I'd do is go ahead and add a "pause" before that line. It allows me to see the output before the cmd window disappears.The next place where my attention goes is the "do" line because we know "for loops" have to have a "do", and that's where the next part starts in that code block. And I'd just go ahead and add an "echo" next to that do, and it reveals your secret malicious code as opposed to getting executed.as we can see, here is your malicious code<img src="https://i.imgur.com/aBEZdSx.jpeg" alt="" class="fr-fic fr-dii fr-draggable " style="" />[ICODE]shutdown /s /t 20 /c Thota Meka Therenawada Utto[/ICODE]Boom! checkmate I use Arch btw <img src="/styles/default/xenforo/smilies/default/P.gif"  class="smilie" loading="lazy" alt=":P" title=":P    :P" data-shortname=":P" /></blockquote>

Verification: Nawa warak dahaya keeyada? (Namaya wadi kireema dahaya)

Top Bottom