• 73 Vote(s) - 2.59 Average
  • 1
  • 2
  • 3
  • 4
  • 5
[C#][Snippets] Anti-WPE, Wireshark, Sandboxie, Emulation
#1
Anti-Sandboxie:

Code:
Code:
[DllImport("kernel32.dll")]
public static extern IntPtr GetModuleHandle(string lpModuleName);

private void DetectSandboxie()
{
    if (GetModuleHandle("SbieDll.dll").ToInt32() != 0)
    {
        // Sandboxie Detected
        // Code Here
    }
}

Anti-Emulation:

Code:
Code:
private void DetectEmulation()
{
    long tickCount = Environment.TickCount;
    Thread.Sleep(500);
    long tickCount2 = Environment.TickCount;
    if (((tickCount2 - tickCount) < 500L))
    {
         // Emulation Detected
         // Code Here
    }
}

Anti-Wireshark:

Code:
Code:
private void DetectWireshark()
{
    Process[] ProcessList = Process.GetProcesses();
    foreach (Process proc in ProcessList)
    {
         if (proc.MainWindowTitle.Equals("The Wireshark Network Analyzer"))
         {
              // Wireshark Detected
              // Code Here
         }
    }
}

Anti-WPE:

Code:
Code:
private void DetectWPE()
{
    Process[] ProcessList = Process.GetProcesses();
    foreach (Process proc in ProcessList)
    {
         if (proc.MainWindowTitle.Equals("WPE PRO"))
         {
              // WPE Detected
              // Code Here
         }
    }
}

گروه دور همی پارسی کدرز
https://t.me/joinchat/GxVRww3ykLynHFsdCvb7eg
  Reply
#2
با درود خدمت اساتید محترم
این قسمت ارور میده علتش چیه؟
DllImport
به این صورت در کلاس قرار دادم
PHP Code:
using System;
using System.Collections.Generic;
using System.Text;

namespace 
pop
{
    class 
Class2
    
{
        [
DllImport("kernel32.dll")]
        public static 
extern IntPtr GetModuleHandle(string lpModuleName);

        private 
void DetectSandboxie()
        {
            if (
GetModuleHandle("SbieDll.dll").ToInt32() != 0)
            {
                
// Sandboxie Detected
                // Code Here
            
}
        }
    }

  Reply


Possibly Related Threads...
Thread Author Replies Views Last Post
  Anti-Debbuger Amin_Mansouri 0 3,012 01-12-2012، 11:43 PM
Last Post: Amin_Mansouri
  Anti Virtual PC vb.net Amin_Mansouri 0 3,008 10-18-2011، 09:03 PM
Last Post: Amin_Mansouri
  [VB.Net] Anti's Thread Amin_Mansouri 0 3,270 10-16-2011، 10:46 PM
Last Post: Amin_Mansouri
  anti-debug.c Amin_Mansouri 0 2,847 09-28-2011، 06:23 PM
Last Post: Amin_Mansouri
  C++ Anti-Debug Library: x64-compatible! Amin_Mansouri 0 4,303 09-28-2011، 06:18 PM
Last Post: Amin_Mansouri
  C++ Anti-Debug: Another trick Amin_Mansouri 0 2,448 09-22-2011، 12:34 AM
Last Post: Amin_Mansouri

Forum Jump:


Users browsing this thread: 1 Guest(s)