+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: [MUST SEE] The RAT's Crew [ Tips 'n Tricks ] || Week #3 (/showthread.php?tid=1508549)
[MUST SEE] The RAT's Crew [ Tips 'n Tricks ] || Week #3 - KillαMuvz - Jul 21, 2011
[img]http://bit.ly [WARNING: potentially infected]/ivKhuv[/img]
IF YOU ARE READING THIS PLEASE READ MY SIGNATURE!
Hello fellow HF members, I'm here to present with a brand new, noob-friendly weekly guide. I'm here demonstrating the knowledge that The RAT's Crew has, and for next weeks I will be covering multiple subjects on SPREADING and all that it involves. I with the help of several other members will provide extensively detailed information on every subject.
WEEK #1 - See it HERE!
WEEK #2 - See it HERE!
• For the thirs week I am going to explain a good spreading guide which contains:
- Introduction to Spreading.
- Sources download link.
- Seting up the host account
- Uploading the files
- Creating a facebook application
- Seting up the system
- Tips 'n Tricks.
Introduction to Spreading.
At this point you have to know what spreading is. If not, spreading is "sharing" your malware with multiple people, over the internet, with the intention to get them running your server. There are multiple methods. In this edition we will just show the types of spreading.
There are TWO types of spreding:
• Targeted : This means to a specific group, type of people, or to a single person.
• Un-targeted : This is also the "RANDOM" spreading. You do not direct it towards any group. You simple want people to run it. For this you can use Youtube Videos, Torrent, Post in Forums, and many other thing.
On the next edition we will teach you some effective methods.
Sources download link.
Download this RAR archive HERE!
Seting up the host account.
Go to Byethost and create a free account.
Follow this steps:
Click on the sign up button
Then fill up the form like this
Spoiler (Click to View)
After succesul mesagge, go to your email address and click the confirmation link (If you cant see the email in inbox check the spam/junk folder)
Then confirm the last step.
Spoiler (Click to View)
Then you get this message:
"ACCOUNT ACTIVATED, you will recieve your account details via email very soon."
Go to your email address and open the email where you have your account details, Click the Cpanel URL and login.
Uploading the files.
Click the ONLINE FILE MANAGER.
Spoiler (Click to View)
Then navigate to htdocs directory
and click UPLOAD button.
In the right side click CHOSE FILE then navigate and click the RAR FILE you downloaded before, and finally click the TICK button
Spoiler (Click to View)
Creating a facebook application.
First of all goHERE! And click Create New App
Spoiler (Click to View)
Then type this name "Check Who Views Your Profile", Agre the terms and click CONTINUE, Then add the captcha and click SUBMIT.
You will see this screen:
Spoiler (Click to View)
Click Change your icon to change the apps icon.
Click Change your logo to change the logo (its not very important)
Then click On Facebook [in the left menu]
Spoiler (Click to View)
Now here lets fill out some stufs:
Canvas Page Add here the apps username EX: FB.com/username, you can put it like "checkswhoviewsyourprofile" if it is free or domethink like that (No spaces, dots, uper or under scores)
Canvas URL: We must put here our subdomain from the hosting account EX: http://myusername.byethost.com But remember you must put an "/" without quotes on the end of the link.
Tick the "Auto-resize" (important)
And finaly click Save Changes
Here the picture:
Spoiler (Click to View)
Seting up the system.
Now we need to edit some source from the files in our host.
First lets go to our host file manager and tick the INDEX.HTM in the left box, then click DELETE from the up right menu, confirm the deletion and then go back.
Now tick the INDEX.PHP in the left box, then click EDIT from the right side
You will see a bunch of codes, click CTRL+F and type "YOUR APPS FAN PAGE URL" without quotes, you will find two lines with that text like here.
Spoiler (Click to View)
Replace that two lines with our APPS FAN PAGE LINK, go again to our facebook apps settings and click View App Profile Page, then copy the link and paste it there.
Spoiler (Click to View)
Then click SAVE ang go back to you file manager
Spoiler (Click to View)
Now we have to edit CONFIRM.PHP
Open it up and here we need to change only one thing, this line "http://www.yoursite.com/yourfile.exe" We must put our SERVER direct link.
Spoiler (Click to View)
And finally we are done, now lets navigate to our apps link and it should looks like this:
Spoiler (Click to View)
Spoiler (Click to View)
Tips 'n Tricks.
How To Spread:
If you want to have a successful spreading you must know who is the best target.Search for diferent groups or fan pages who are interested to see who views their profile, or search on google there are many forums with that topic, just post your link there.
Untargeted
• Bind it with a fake program. A keygen is the best way. Pretend it is a keygen for a very good program. For me Adobe collections CS5 worked pretty good. Windows come with a binder, iexpress.exe . There are plenty of tutorials on how to use it.
Use your imagination, innovate.
Targeted
This is the only type of spreading I do. Why? More profit for me. I usually target my teacher and it works. How? Well simply say you are having dificulties resolving a worksheet you found on the internet (And never say it is you, always give someone else's name.).
Be carefull and take every security measures possible.
• Knowing that you can be seen through CMD.exe running the Netstat -a command can also help you seeing if you're infected.
Use the command netstat -b , it will show you what file / .exe is using what connection, works as some sort of firewall with no option to block.
• ALWAYS name your server some trusted windows file to "bypass" the curious eye. The most used filenames are:
- svchost.exe
- explorer.exe
- iexplorer.
- taskmgr.exe [this one is my favourite]
About Tricks
Just try to be creative and if you want to target a specific person try to use social enginering, be realist and a little interesting ;) It will work for sure...
Credits to
* - Exal - Jul 21, 2011
This is one of my contrubution to the RAT's Crew, I hope you all find this useful and HAPPY SPREADING ✌
* - 我是欧米茄 - Jul 21, 2011
Thank you thank you 100 times Spoiler (Click to View)
* - olivier93612 - Jul 21, 2011
Wow that's really interesting thanks a lot bro :)
* - GuJJu - Jul 21, 2011
Awesome thread, keep the HQ 'up' bro.
* - spikebites - Jul 21, 2011
this is excellent tutorial.. i'm glad to see more and more involvement from the RC. keep up the good work.
* - Apathes - Jul 21, 2011
Great tutorial, going to try this method out on some of my stolen facebook accounts.
* - nialce - Jul 21, 2011
Wow realy nice topic!!
kenny<3
* - Rvaveo - Jul 21, 2011
Amazing Guide.These should be read by every beginner.
* - [KiLLeR]Hany - Jul 21, 2011
thank you a lot guys, and thank you for your hard work.
all my respect to: The Rat's Crew BTW Can i join u guys? what is the requmints?
* - b0ris - Jul 21, 2011
Very clear and well written, congrats.
* - Golliath808 - Jul 22, 2011
Awesome post, I was waiting for the week-<3 release!
But why you should take the best security measures when you'r targeting people ??( excepting 'coz they will know you who did it and they know you in real life')
* - Support. - Jul 23, 2011
i cant download that rar :(
* - Carb0n F1ber - Jul 23, 2011
Another awesome release. I'm going to try this right away. The download is dead though. Mind asking what exploit pack this is ?? I have another one for fan pages which won't go through the hazzle of 'likes' and 'shares' but straightaway exploit.
* - Exal - Jul 26, 2011
The download link its updated, now you can download it.