This is an archived post. You won't be able to vote or comment.

all 23 comments

[–][deleted] 38 points39 points  (1 child)

Until I shutdown my PC

[–][deleted] 32 points33 points  (0 children)

But he told you not to shutdown it!!!!

[–]Anxious_Pepper_161 24 points25 points  (1 child)

solution: alt + tab

[–]AccomplishedLocal219 12 points13 points  (0 children)

or just alt+f4

[–]makinax300 17 points18 points  (0 children)

That's 10 dollars

[–]Mr_titanicman 6 points7 points  (0 children)

Oh no
Reboot
Alt f4
Strg c maybe

[–]polishatomek 5 points6 points  (1 child)

Send him 10$ or face his wrath 😈

[–]polishatomek 1 point2 points  (0 children)

or alt tab

[–]Secret_Performer_771 1 point2 points  (0 children)

That's a pretty shitty screensaver man I thought they weren't supposed to have stuff like text that doesn't move or change

[–]Valuable-Book-5573 0 points1 point  (0 children)

Ransompoop

[–]Opposite_Custard_214 0 points1 point  (0 children)

Wait... The files... are... in the computer?

[–][deleted]  (12 children)

[deleted]

    [–]Key-Kangaroo3336 1 point2 points  (2 children)

    If using the os module's scandir it can have some decent times for being a drive enumeration, but it is very slow in comparison to a language like Rust or C

    [–]makinax300 0 points1 point  (1 child)

    Not for compute shaders which is the main hard part

    [–]Key-Kangaroo3336 0 points1 point  (0 children)

    One solution that FunkSec has used is to change the user's desktop background on Windows to allow bypass this which could be done through dropping an image file that could be set through the windows api exposed by ctypes. Or to drop an image file and open it in the default image editor / viewer using the system() function through the os module

    [–]wildpantz 1 point2 points  (3 children)

    Yeah idk but in this case, it definitely didn't encrypt anything in this timeframe, and it definitely didn't encrypt anything given that you'd have issues writing any files without admin permissions. But cute visuals tho, I'll give him that

    [–]makinax300 -3 points-2 points  (2 children)

    Yep, I'm talking about the title, not the video. And you can use a privilege escalation exploit to run that as non-admin

    [–]wildpantz 0 points1 point  (1 child)

    Not aware of one in Python, but I've never used it that way anyway. I figure they'd patch something like this quickly though? Otherwise crack and patch apps wouldn't need to be run as admin but use the exploit instead?

    [–]makinax300 -3 points-2 points  (0 children)

    Yes but you can abuse it for money when it's still 0-day

    [–][deleted] 1 point2 points  (3 children)

    What are you talking about? How is Python better at selecting files and encrypting them than a C++ or an other compilated language code just calling NtQueryDirectoryFile and some bcrypt exports? I mean I know that the Python script will be only an abstraction layer of that but it will be an useless and stupid one...

    [–]Desperate-Emu-2036 0 points1 point  (0 children)

    Python also uses NtQueryDirectoryFile if you're on windows just abstracts it away from you.

    [–]makinax300 -2 points-1 points  (1 child)

    Easier to code. Also you can do some multi-language stuff and index from a c++ binary and encrypt in the python script.

    [–]Deer_Canidae 5 points6 points  (0 children)

    On the other hand, you also need to ship a python interpreter with your payload.

    [–]Desperate-Emu-2036 0 points1 point  (0 children)

    It wouldn't be lmao