Is there any way to compile this script without using third-party tools? third-party tool's executable get detected easily. Please suggest me about this issue.
After tweaking code, I had a reboot and now ./Villain.py will not run and I am receiving the following error: Traceback (most recent call last): File "/root/Villain/./Villain.py", line 11, in from Core.common import * File "/root/Villain/Core/common.py", line 12, in from Crypto.Cipher import AES ModuleNotFoundError: No module named 'Crypto'
Thanks! I've made a video about it, you can find it on my channel. Also the closed issue #17 in the project's repo has important information about ngrok usage.
Hi Mr.t3l3machus i have tested the tool(Villain) the code is executed smoothly ,but unable to get shell and i have tested in multiple win10 machines using obfuscate,encode and constraint_mode . I'll waiting for response.
can you edit the program payload so it make the updated payload by it self, so we not need to edit it ourself i mean great video and thanks for the help but it would be better if you edit the program to make the new payload by itself please
But is anyone else starting to feel like cyber security has pretty much won by now? Idk I guess rly bad actors doing physical penetration attacks is still happening. But the days of hacking your friends laptop to Rick roll him are pretty much dead. Thanks behavior based protection. I'm drunk
Im new into this so my question might sound dumb.. Lets say you establish a session with Villain, how do you escalate the priviliges with Villain, if needed? Is there someway I can transfer over files like I usually do with "python -m http.server" ? Is that what wwwtree is for?
Unfortunately a Villain backdoor is not a fully functional pty. This means that during privilege escalation you're gonna have a bad time, you need to find the PE vector and catch a new shell as the elevated user. Yes, wwwtree is a tool to use instead of the python http server module (actually it is utilizing the http.server module). You can transfer files normally using curl or any other web client.
Totally agree with the last part. Better for the tool and keeps script kiddies away. A win win.
truly amazing. love every video.
I love every video bro, thanks for the Job.
Great video again. Amsi is really the easiest thing to bypass xd
truly greate. love your content bro
luv the content thanks for sharing \o/
truly amazing. love every video. Plsease help me, How use to Viliain with Ngrok
Thanks! Check my channel, i've made a video about it. Also check issue #17 on the project's repository for more info
You're my Arnold Schwarzenegger bro
great video thanks for sharing
Is there any way to compile this script without using third-party tools? third-party tool's executable get detected easily. Please suggest me about this issue.
After tweaking code, I had a reboot and now ./Villain.py will not run and I am receiving the following error: Traceback (most recent call last):
File "/root/Villain/./Villain.py", line 11, in
from Core.common import *
File "/root/Villain/Core/common.py", line 12, in
from Crypto.Cipher import AES
ModuleNotFoundError: No module named 'Crypto'
ok the desktop image got me
Thank you so much for the tools! One questions for villain, is there any way i can utilize tunneling service such as ngrok?
Thanks! I've made a video about it, you can find it on my channel. Also the closed issue #17 in the project's repo has important information about ngrok usage.
Make a video about bypassing behavior based detection
Why you have auto sample submition enabled 😩😭😭
Hi Mr.t3l3machus
i have tested the tool(Villain) the code is executed smoothly ,but unable to get shell and i have tested in multiple win10 machines using obfuscate,encode and constraint_mode . I'll waiting for response.
Obfuscate it manually. Auto is obviously detected
how to use it over wan
port it using third party clients like ngrok
can you edit the program payload so it make the updated payload by it self, so we not need to edit it ourself i mean great video and thanks for the help but it would be better if you edit the program to make the new payload by itself please
But is anyone else starting to feel like cyber security has pretty much won by now? Idk I guess rly bad actors doing physical penetration attacks is still happening. But the days of hacking your friends laptop to Rick roll him are pretty much dead. Thanks behavior based protection. I'm drunk
ew
Im new into this so my question might sound dumb..
Lets say you establish a session with Villain, how do you escalate the priviliges with Villain, if needed? Is there someway I can transfer over files like I usually do with "python -m http.server" ?
Is that what wwwtree is for?
Unfortunately a Villain backdoor is not a fully functional pty. This means that during privilege escalation you're gonna have a bad time, you need to find the PE vector and catch a new shell as the elevated user. Yes, wwwtree is a tool to use instead of the python http server module (actually it is utilizing the http.server module). You can transfer files normally using curl or any other web client.
@@HaxorTechTones Thanks, appreciate the answer. Learning new things everyday from you nowadays.. :)