Jump to content

DMoneigh

Members
  • Posts

    20
  • Joined

  • Last visited

  • Feedback

    0%

Everything posted by DMoneigh

  1. I'm glad that you guys like this. There will be a well improved version with brand-new features in the near future.
  2. No problem, if you have any suggestions please let me know.
  3. Unobfuscated Results Obfuscated Results That's completely fine, but continue to get detection results such as the ones above from Malware-Bytes.
  4. Thanks man I worked really hard. If you find any bugs and/or have any suggestions please tell me.
  5. Thanks, will do shortly! Please provide an example. If you're talking about using reflection, that's understandable. I will be adding "signatures" to the next version to detect reflection.
  6. 1) Find a Java program that you are suspicious of. 2) Goto http://www.github.com/DMoneigh/JScanner and download the Jar or compile and execute yourself. 3) Click "Scan" and select what you're scanning. - For class and Jar files click "Application" and select them. - For Applets click "Applet" and supply the URL to the applet. - If you would like to list all class and Jar files on your computer click the "Computer" menu item. 4) Read your scan results and determine if the Java program is malicious.
  7. Lol thanks man, I seriously don't understand why so many people think its not legit.
  8. Thank you, currently working on the virtualization function. (Called emulation by accident in my video.) This will allow JScanner to "attack" the selected file and then run it in a sandbox environment (VM), so that it can get more information about what the Jar file is doing.
  9. If it helps, I have added a link to my yearly documented log on JScanner.
  10. Please proceed to create a malicious Java program that JScanner can't detect. Unobfuscated Results Obfuscated Results
  11. There is nothing to decompile? It is Open-Source on Github.
  12. No problem, please send me some feedback. People do use Java. You're using this bot aren't you? Millions of people play Minecraft, have played Runescape, and others games that use Java. Browsing the web can make you a victim of a JDB attack.
  13. That's alright. Let me know what you think.
  14. No problem. I am currently working on another Java program that does a bit with Bytecode injection. It will be on Github as well. Please watch for updates.
  15. Thank you. Your review is much appreciated!
  16. Great! Please send me some feedback. You have a few options here James. A. Get a VM, download the file, and look at the source through JD-GUI. B. Take a good look at the source on Github for any "viruses" and compile/run yourself. C. Wait for someone to post a Virus Scan of a Open-Source project. O_o
  17. Hello forum, I have an Open-Source Java Malware Defense Tool called, "JScanner." It allows users to scan class files, Jar files, and Applets for malicious code. The latest video on JScanner can be watched here: http://www.jscanner.net Source: http://www.github.com/DMoneigh/JScanner Documentation: https://docs.google.com/a/dragons.asms.net/document/d/1Jsw_3RNAdIMfvvbz9Xm0snbQbcdszSdE4hicAGxCEuE/edit Thanks!
×
×
  • Create New...