[GET] S3 Ripper

[Cronos783]

If you worry about VirusTotal report use this online tool:
https://www.internetgeeks.org/online-too...line-tool/

[dirtyredd2]

Thanks for the share

[xSkInNeRx]

Does this still work?

[raphanie]

wp ripper is suspended

[GalaxyQuest]

(01-16-2021 03:01 PM)xSkInNeRx Wrote:  Does this still work?

(03-29-2021 08:16 AM)raphanie Wrote:  wp ripper is suspended

In answer to both the above questions, yes, xSkInNeRx it still works and not sure what you mean raphanie by suspended I have been using this on and off since GFXWhizz posted back in 2016, great tool and so easy to use... Only negative for this program you can fill your HDD up very quickly

[gash]

(08-31-2016 01:34 AM)GFXWhizz Wrote:  Hi All,

Wasn't sure were to post this
I searched and saw that s3 ripper is not available
for download anymore

So I found a copy on my HDD
Its Clean :)

Virus Total

https://www.virustotal.com/en/file/f7c44...472570296/

Magic Button :

https://mega.nz/#F!Ldh13ChZ!s8git-2WD75A7cCoE9gy3w

Sharing is caring

[berlinerin]

(07-01-2021 09:57 AM)GalaxyQuest2 Wrote:  

(01-16-2021 03:01 PM)xSkInNeRx Wrote:  Does this still work?

(03-29-2021 08:16 AM)raphanie Wrote:  wp ripper is suspended

In answer to both the above questions, yes, xSkInNeRx it still works and not sure what you mean raphanie by suspended I have been using this on and off since GFXWhizz posted back in 2016, great tool and so easy to use... Only negative for this program you can fill your HDD up very quickly

This is very true! It fills the HD as I remember. But I only use now/sometimes this:
And also I'm since years only using my MAC not PC.

http://bestblackhatforum.com/Thread-%E2%...4%EF%B8%8F

[StevieRay]

THANKS! AWESOME FIND ON YOUR SYSTEM! REPPED +15 !!!

[layna61524]

(02-28-2018 05:06 PM)smithnowt Wrote:  This was suggested...and the thread has TWO different VT reports - how is that possible ?!?
OK. Whatever...

So I've just re-scanned and gotten a 3rd report right now:

Code:

https://virustotal.com/en/file/f7c44437c3923e6c11de5e9e0d982b56406fd9e222ba783f269eabdbb969b82f/analysis/1519801137/
SHA256:     f7c44437c3923e6c11de5e9e0d982b56406fd9e222ba783f269eabdbb969b82f
File name:     s3ripper.7z
Detection ratio:     0 / 59
Analysis date:     2018-02-28

Clean.

@smithnowt: I can try to answer your question to the best of my ability, as to why Virus Total would give a different scan result.

I know you're computer savvy and already know all this, but I'm posting this detailed information for anyone who isn't.

When you run a virus scan on a zipped (archived) file, Virus Total may bypass files that could be dangerous because they are embedded inside the archive and could be hidden from detection.

Particularly with executables (program files), designed to operate on your computer and use its operating system resources, you should ALWAYS unrar or unzip the archive and look for the executable file; then run that through Virus Total.

Also, you should do the same with any "black hat" types of files like key generators or patch or crack files designed to make paid programs run illegally. These are all seen by the anti-virus programs as vulnerable to hacking efforts or ways for others to make changes to your computer's operating system.

Never use an archived (packaged) download in Virus Total if there are executables, crack or patch files, etc. or you risk getting a false sense of security.

On the other hand, you could also get a false positive, in which case you will need to do more due diligence on to verify if there is a real threat.

Keep in mind that you shouldn't worry about a threat detected by an anti-virus engine you don't use. I read all the time on the forum posts showing a couple of detected potential threats but if you're using Avast or Malwarebytes, for example, and those engines show a green check-mark, then you have nothing to worry about. Your anti-virus program gives the file a clean pass and you can use it on your computer with no worries.

Only if the file is deemed offensive by an engine in Virus Total that you have installed on your computer and use as your AV program, then you have a potential threat. And I say potential, because it could very well be a false-positive. That means, your AV program didn't like something about the contents of the file and it could be that the software is overly sensitive so as not to let any exploits pass by. You've then got to investigate further and you've got a few options.

First, you can use the program inside of a "virtual sandbox" environment that protects the rest of your computer's operating system from it. This is a quick and safe way to use the download without fear of it damaging or disabling your OS. To do that, just look into the settings in your anti-virus program and look for virtual sandbox or sandbox. If you can't find it in your AV program, you can use a trial of the tried-and-true golden oldie... Sandboxie. Search Google for it (if it's still being sold) and if you like it, buy it. There are other virtual sandbox products but Sandboxie immediately comes to mind.

Another option is to check to see what has been reported by computer tech sites about the alleged threat.

To do that, you'll need to copy the name and, if included, any numbers in the description of the thread Virus Total detected. Use that as a keyword in a Google search to look for computer tech or customer service type websites that have articles on the topic. You can safely ignore sites with strange URLs and ones that offer you to install THEIR software when you're just trying to determine if the alleged exploit is something you need to worry about (real threat) versus a false positive (harmless).

Read a few of the sites suggestions and make your decision whether or not to use the download.

Here's what I found when I opened the archive (extracted the rar file on my desktop) and pulled the executable file out and onto the desktop to expose it.

I then went to Virus Total (https://virustotal.com) and then put the executable file into VT to run it. Here are the results:

https://www.virustotal.com/gui/file/ca66.../detection

Out of 70, the scan reports, "3 security vendors flagged this file as malicious." Here are the anti-virus engines that said that:



So, long-story-short, if you use any of these anti-virus programs, you should be concerned:

- Cylance
- Kingsoft
- Trapmine

Personally, I've never heard of them until now. Maybe they're not as popular in the United States (?)... I don't know.

The most important thing you need to be concerned about is what YOUR anti-virus program says about this file. If you find your program on the list and there is a green (go-ahead) icon, you're all good.

And just to be sure I wouldn't have egg on my face for claiming that the archive (all file contents packaged neatly into a zip or rar file) would give a clean report, I ran the archive in Virus Total and this is what I got:

https://www.virustotal.com/gui/file/f7c4.../detection

Here's the image:

And, in this case 3 (of 59 engines this time) detected the file as malicious. They were these anti-virus programs:

- Grindsoft
- Jiangmin
- Kingsoft

The red text beside each of the engines is Virus Total's description of the alleged exploit or malicious content the engine(s) detected. And that is what you should use as a keyword when you want to search for answers about the danger being real or simply over-cautious.

But, to be clear, Virus Total can give you different reports on the same file, depending on whether you upload the packaged archive (all file parts zipped into a single directory) or whether you (unrar or unzip) it first and pull out the different file components onto your desktop to upload into Virus Total.

In this case, it seem 3 engines found and reported issues with both uploads; but it's up to you to decide whether to use the file, after you investigate but if the AV program you use shows a green check-mark for Undetected, you have nothing to worry about.

So know, I have to ask the same question you did... how is this possible?

It is interesting that your scan result shows that NONE of the 59 engines reported a malicious file. Your scan is from 2018. Do you remember how you uploaded the file to VT? It looks like you did the same process I used in the second illustration. Yet, I still got 3 engines reporting a problem whereas your report shows none.

The variance in results must then be a matter of Virus Total's engines being updated over time to better detect issues. Otherwise, I can't explain it, since we're both using the same (unchanged) file shared by the OP.

All the best!
Layna61524

[Guest123]

lost my version to malware corruption :(