Eyyyy here’s an OT3 called Fruit Basket (Melon the elephant, Peach the Rhino, Barry the Hippo) for an art trade with @silver-tongues-blog. Go team pachyderm yo. All characters belong to their respective owners.
:O Pachcyderms are so adorable in your style! This is so cute! I love it!
can I get a gaming mouse that doesn’t look like it was forged when lightning struck a monster energy drink factory’s dumpster full of obliterated computer parts
OK BUT LIKE I HAVE A WHOLE BUNCH OF MY OWN POKEGO STORIES TO TELL BUT LIKE one of my fave things to happen today was that my bro and i went to get refills for my grandma’s e-cig and im waiting in the car talkin to my gram and my bro gets in the car with the refill and a huge effing grin and is like “Bro, the vape guy is our pokemon professor.”
and im like “Get out” but apparently my bro walked in to the vape shop (which for some reason looks like the inside of what i’d imagine to be an old western saloon on a rustic settlement of the moon, which is cool) and the guy at the counter was telling these two girls playing pokego about all of the local spots for catching pokemon, where people weren’t catching as many, where there were flocks, etc. He literally knew everything about the entire local puget sound
told my bro where to find tons of charmander and where there was a flock of pidgeottos in our town and was super nice to them
Yeah so, long story short, i live in a cute little port town and our local pokemon professor is the vape guy
i cant believe pokemon go has shown us what would happen if pokemon were real
You know those youtube videos that say stuff like “XBOX LIVE KEY GENERATOR[WORKING]” “RUNESCAPE GOLD GENERATOR{LEGIT}-NO SURVEYS-” that are just ultimately viruses or keyloggers or adware. What I do when I don’t have an active reverse engineering project is download them anyways and reverse engineer them and dissect them to see what their shitty little .NET application is actually doing and calling them out on it so let’s dissect this one:
So here’s the video
Off to a good start here’s the payload
Lets look at that dll there
Ok so first of all they just renamed some other ijl15.dll into mh1337.dll to try and make their software seem more legitimate and big-time but it’s just the intel jpeg library renamed. Lets look at the bytecode of the .exe. It seems like the kid made it in Visual Basic with the usual Forms callback stuff. Code’s all really simple but here’s the kicker:
So this dude’s program basically just emails your phished info to them but it includes the credentials of the sending email when it connects to the SMTP server soo I can just use these credentials and
I am Silver Tongue, I am an artist. I have many characters and you can check out my art in the art tag. I occasionally practice witchcraft though I don't do anything too complicated. I am girl 2 and don't know what else to put here.
